Facebook password leak has exposed up to 600 million user's plaintext passwords to company employees. And this appears to have been ongoing since 2012. Will this add more fuel on the antitrust fire? Read More
Data Protection
Data protection news, insights and resources to help data protection leaders stay on top of developments, and to understand and address the challenges faced by their organization.
Recent study shows that 72% of U.S. small businesses support improvements to privacy regulations yet 52% also believe that there will be a negative impact to their business. And only 15% believe that policy makers will pass regulations that do not adversely affect small businesses. Read More
The features that make blockchain so attractive to enterprises are also the very features that could lead to headaches like “blockchain privacy poisoning", which Gartner has named as one of the biggest risks facing organizations over the next few years. Read More
Singapore has recently introduced a discussion paper on data portability to will not only improve options and outcomes for consumers, but will also improve transparency in data collection. Will the ease of proliferation of this personal data among more companies lead to a simple statistical increased likelihood of data and identity theft? Read More
While proposed amendments to narrow the scope of the CCPA might tempt financial services organizations to put CCPA compliance on the backburner, that instinct might prove to be flawed for quite a few reasons. Read More
The Ohio law represented a novel approach to data protection by providing safe harbor if the entity’s cyber security program conforms to industry recognized cybersecurity frameworks or federal regulations cited in the Act. Read More
Big tech companies are pushing for watered-down privacy regulations that would largely permit them to continue doing business as usual. There is reason to suspect that these tech companies now view federal privacy regulations as a way to construct barriers and moats around their core business. Read More
The €50 million fine against Google is a sign that GDPR grade transparency is here to stay. Legalistic privacy policies will always be with us of course, but the privacy world is currently primed to embrace a new “layered notice” paradigm for delivering privacy information to users on their terms. Read More
Germany set a new precedent with an antitrust ruling against Facebook, forcing the company to make major changes to their data collection practices – German users are to be given a greater degree of notice and choice in how their data is used. Read More
The Google GDR fine has demonstrated that most historical data, analytics & AI, and decentralized processing is illegal under the GDPR. Companies must focus on more than consent to legally process analytics and AI when those processes cannot be described with the required specificity and voluntariness at the time of data collection. Read More