Security Affairs

OCTOBER 25, 2024

Irish Data Protection Commission fined LinkedIn €310M after finding its use of behavioral data for targeted ads violated privacy laws, requiring compliance changes. “The decision includes a reprimand, an order for LinkedIn to bring its processing into compliance, and administrative fines totalling €310 million.”

GDPR 307

GDPR Personal data Compliance Privacy 307

Security Affairs

AUGUST 18, 2021

The German state’s data protection agency (DPA) warns that the use of the videoconferencing platform Zoom violates the European Union’s GDPR. The German agency states that the use of Zoom by the public body violated the EU GDPR. The DPA is going to issue a formal warning, under Article 58 (2) (a) of the GDPR.

GDPR 363

GDPR Privacy Compliance Communications 363

Data Breach Today

SEPTEMBER 25, 2020

The campaign enticed victims with subject lines indicating their email security system was not in compliance with the law, according to Area 1 Security. Campaign Designed to Steal Credentials A recently uncovered phishing campaign used the European Union's General Data Protection Regulation as a lure to steal login credentials.

Compliance 264

Compliance Phishing GDPR Security 264

The Last Watchdog

DECEMBER 18, 2024

Today, part three of Last Watchdog s year-end roundtable zeroes in on the regulatory and compliance landscape. Srivatsav Ravi Srivatsav , CEO, DataKrypto Non-compliance with regulations, such as the European Unions General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), risks severe penalties.

Compliance 130

Compliance Cybersecurity Privacy Risk 130

Data Breach Today

JANUARY 24, 2019

Cisco is out with findings from its 2019 Data Privacy Benchmark Study, which shows the impact of GDPR compliance as well as how customers are asking more questions about how their data is secured. Cisco Chief Privacy Officer Michelle Dennedy analyzes the survey.

GDPR 269

GDPR Data Privacy Privacy Compliance 269

Security Affairs

DECEMBER 18, 2024

The DPC fined Meta 251M for GDPR violations, citing insufficient breach notifications (8M), poor breach documentation (3M), design flaws (130M), and default data protection failures (110M). Decision 2 Article 25(1) GDPR – By failing to ensure that data protection principles were protected in the design of processing systems.

Data breaches 265

Data breaches GDPR Personal data Access 265

Security Affairs

JUNE 14, 2024

Much like GDPR, this act promises to exert significant influence on the activities of organizations around the world. He suggested that it might be a “tough call for any organization to follow and to reach as a compliance deadline.” Its official launch date of January 17, 2025, means there are some pretty stringent deadlines.

Compliance 311

Compliance Insurance Risk Cloud 311

Data Breach Today

JULY 29, 2020

Attorneys Discuss Gaps That Still Need To Be Addressed Now that it's been two years since enforcement of the European Union's General Data Protection Regulation began, three attorneys - Kelsey Finch, Jonathan Armstrong and David Dumont - reflect on the lessons learned so far and the compliance gaps that still need to be addressed.

Compliance 221

Compliance GDPR IT 221

Security Affairs

OCTOBER 25, 2024

By doing so, DLP risk assessments ensure compliance with ever-more stringent data protection regulations like GDPR , HIPAA , and PCI DSS. How to Conduct a Comprehensive DLP Risk Assessment Conducting a comprehensive DLP risk assessment requires a considered, planned, and methodical approach.

Risk 307

Risk Cybersecurity Cloud Compliance 307

Security Affairs

JANUARY 21, 2023

by the Irish Data Protection Commission (DPC) for violating the General Data Protection Regulation (GDPR). The DPC has given six months to the Meta-owned company to bring its data processing operations in compliance with the privacy regulation. million (for breaches of the GDPR relating to its service).”

GDPR 246

GDPR Metadata Encryption Communications 246

Data Breach Today

DECEMBER 4, 2018

Attorney Steven Teppler on Holding Vendors Accountable Why is ramping up vendor risk management such a critical component of compliance with the EU's General Data Protection Regulation? Attorney Steven Teppler provides insights.

Compliance 183

Compliance Risk GDPR 183

Data Breach Today

APRIL 11, 2018

Second Congressional Hearing Probes Privacy Issues At a U.S. House hearing Wednesday, Facebook CEO Mark Zuckerberg said the company would eventually comply worldwide with the European Union's tough privacy law, the General Data Protection Regulation.

Compliance 203

Compliance GDPR Privacy 203

Data Breach Today

MARCH 7, 2019

RSA Conference Panel: Organizations Worldwide Face Long List of Challenges Nearly 10 months after the beginning of enforcement of the EU's GDPR privacy regulation, organizations around the world are still learning plenty of compliance lessons - including how to locate all personal data so it can be protected, according to regulatory experts on a panel (..)

GDPR 189

GDPR Personal data Compliance Privacy 189

The Last Watchdog

JANUARY 9, 2023

Related: GDPR sets new course for data privacy. Large corporations tend to have the resources to deal with compliance issues. It’s often difficult for small businesses to invest significantly in data privacy compliance or security measures because they don’t have large budgets. Paths to compliance.

Data Privacy 210

Data Privacy Compliance Privacy GDPR 210

Data Breach Today

FEBRUARY 14, 2020

Sorting Out the Role of the Data Protection Officer As organizations settle into the third year of enforcement of the EU's General Data Protection Regulation, some are struggling to define and understand the role of a data protection officer as required under the regulation - including whether the CISO should take on the extra role of DPO.

Compliance 194

Compliance GDPR 194

Data Breach Today

OCTOBER 24, 2024

Irish Data Protection Commission Cites Social Platform for GDPR Violations The Irish Data Protection Commission imposed a 310 million euro fine on LinkedIn for violating a European privacy law stemming from the company's use of customer data. It ordered the social media platform to bring its data processing under compliance.

Privacy 303

Privacy GDPR Compliance IT 303

IT Governance

FEBRUARY 16, 2024

For a start, maintaining data privacy and GDPR [General Data Protection Regulation] compliance will become increasingly complex through 2024, particularly for organisations operating across multiple jurisdictions. About that “GDPR-like legislation”, could you please elaborate?

Data Privacy 114

Data Privacy GDPR Compliance Privacy 114

eSecurity Planet

AUGUST 9, 2022

Regulatory compliance and data privacy issues have long been an IT security nightmare. And since the EU’s General Data Protection Regulation (GDPR) took effect May 25, 2018, IT compliance issues have been at the forefront of corporate concerns. GDPR-style data privacy laws came to the U.S.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

IT Governance

JULY 4, 2024

Expert insight from a data privacy trainer and DPO “Organisations tend to overcomplicate GDPR [General Data Protection Regulation] compliance.” Specifically for GDPR compliance , records of processing activities, also known as ‘ROPAs’, are one compliance activity that tends to be overcomplicated. What is a ROPA?

GDPR 101

GDPR Compliance Data Privacy Privacy 101

Data Protector

SEPTEMBER 13, 2020

Early train from Euston, just a croissant and two teas Didn't get to eat last night Who today will I see pleading on their knees Liz, I had a dreadful fright I've breached the GDPR You don't know how lucky you are, boys Breaching the GDPR Been away so long I barely know the place BC, it's good to be back home Don't make me pack my case Honey disconnect (..)

GDPR 156

GDPR Compliance Privacy IT 156

Data Breach Today

NOVEMBER 6, 2023

Guidance Cites GDPR Transparency and Consent Clauses The data protection regulator of European country Liechtenstein rolled out new data processing guidance for large language model-powered chatbots such as ChatGPT. The primary legal basis for compliance will be the consent and transparency clauses of the GDPR, the agency said.

GDPR 278

GDPR Compliance 278

eSecurity Planet

DECEMBER 22, 2021

But in order for businesses to maintain compliance with major privacy laws , they have to have security measures in place before an attack. The regulations from GDPR, PIPL, and CCPA are especially prevalent to MSPs and software vendors because they get access to data from so many organizations, but all businesses need to comply with them.

GDPR 144

GDPR Compliance Data Privacy Personal data 144

Security Affairs

OCTOBER 20, 2020

According to Aoife Harney , Compliance Manager at AON, “One of the most important aspects of any data protection program is having an in-depth and documented knowledge of the what, the why, the where, the who, and the how.”. Automation: the Future of Compliance.

Data Privacy 352

Data Privacy Privacy GDPR Compliance 352

Data Breach Today

JUNE 22, 2023

French Regulator Fines Criteo for Website Cookie Tracking Tools The top French privacy regulator has imposed a fine of 40 million euros against a Parisian advertising technology company for its use of website tracking cookies and failure to process users' personal data in compliance with privacy laws under the General Data Protection Regulation.

GDPR 246

GDPR Personal data Privacy Compliance 246

Data Breach Today

APRIL 14, 2023

Concerns Raised Over ChatGPT's Compliance With GDPR The French and Spanish data privacy watchdogs have launched separate probes into ChatGPT over potential data privacy violations. European scrutiny of the chatbot mounted after the Italian data protection agency announced a temporary ban on ChatGPT in March.

Data Privacy 274

Data Privacy GDPR Privacy Compliance 274

Data Breach Today

FEBRUARY 29, 2024

Home Office Electronic Migrant Tracking System Violates UK GDPR, Says ICO A defunct U.K.

Privacy 273

Privacy GDPR Compliance IT 273

IBM Big Data Hub

JANUARY 22, 2024

The General Data Protection Regulation (GDPR) is a European Union (EU) law that governs how organizations collect and use personal data. Any company operating in the EU or handling EU residents’ data must adhere to GDPR requirements. However, GDPR compliance is not necessarily a straightforward matter.

GDPR 79

GDPR Compliance Personal data Privacy 79

Hunton Privacy

AUGUST 27, 2021

On August 19, 2021, the UK Information Commissioner’s Office (“ICO”) approved the criteria for three certification schemes, as required under Article 42(5) of the UK General Data Protection Regulation (“UK GDPR”). Certification schemes are one method for organizations to demonstrate compliance with the UK GDPR.

GDPR 142

GDPR Compliance Personal data Privacy 142

Security Affairs

JANUARY 17, 2025

noyb filed GDPR complaints against the above companies for unlawfully transferring EU users’ data to China. While some admit these transfers, others list “third countries,” raising concerns about compliance with EU data protection laws. ” reads the announcement published by noyb.

Privacy 241

Privacy GDPR Compliance Personal data 241

IT Governance

JUNE 21, 2022

Data governance and regulatory compliance go hand in hand. For example, the GDPR (General Data Protection Regulation) and its UK equivalent includes specific rules on data integrity and security. Moreover, it provides reassurance for regulatory compliance. The approach throughout is resolutely non?geek, Purchase your copy.

Compliance 136

Compliance Government GDPR Data breaches 136

The Last Watchdog

MAY 7, 2024

The unfolding disruption of Generative AI — and rising compliance requirements — add to the mix. This includes automated checks to assure compliance with PCI DSS, HIPAA, GDPR and CIS benchmarks. Thus, cloud-native security tools have risen to the fore.

Cloud 264

Cloud Security Compliance GDPR 264

Security Affairs

JANUARY 5, 2023

. “Final decisions have now been made by the DPC in which it has fined Meta Ireland €210 million (for breaches of the GDPR relating to its Facebook service), and €180 million (for breaches in relation to its Instagram service).” Both complaints were made on the date on which the GDPR came into operation, on 25 May 2018.

GDPR 246

GDPR Compliance Marketing IT 246

IT Governance

JULY 9, 2024

An overlooked GDPR requirement AND a business enabler Andy Snow has trained thousands of people on the GDPR (General Data Protection Regulation). Andy’s explanations show the importance of this overlooked area of GDPR compliance. Contracts aren’t just a GDPR requirement. His response? Perhaps two or three.

GDPR 99

GDPR Compliance Data Privacy Privacy 99

eSecurity Planet

FEBRUARY 14, 2023

It was also a drag on the sales cycle, and then there was the need for maintaining compliance. The vision was to automate security and compliance across 14 frameworks, including SOC 2, ISO 27001, HIPAA and GDPR. GRC Market Defies Downturn There are some powerful drivers for the compliance and security automation market.

Compliance 122

Compliance Security Cybersecurity Marketing 122

The Last Watchdog

NOVEMBER 4, 2021

Related: GDPR and the new privacy paradigm. Europe’s General Data Protection Regulations (GDPR) changed the game. Legacy filing systems were not built to keep track of the personal data of specific individuals primarily to be in compliance with the many data protection regulations popping up around the world. billion by 2027.

Personal data 237

Personal data Privacy Data Privacy Unstructured data 237

IT Governance

AUGUST 12, 2021

Last month, Amazon was hit with a €746 million (about £630 million) fine for violating the GDPR (General Data Protection Regulation) – an astronomical figure by data protection regulation, or indeed most, standards. It is by far the biggest fine issued under the GDPR, surpassing the €50 million penalty that Google received in 2019.

GDPR 128

GDPR Data breaches Compliance Privacy 128

The Last Watchdog

NOVEMBER 12, 2024

The compliance variable has come into play in an impactful way. We have the benefit of learning from GDPR in Europe as well as other flavors of privacy laws in Canada, Utah, Virginia and other jurisdictions. Over a decade, the SEC’s enforcement has not improved cybersecurity outcomes but has burdened firms with compliance.

Cybersecurity 263

Cybersecurity Risk Government Compliance 263