The congressional testimony was supposed to establish a national debate about data privacy and the right of users to protect their data from being sold, used, or analyzed in ways that were never intended. Instead, it has become very clear that regulating privacy is harder than anyone originally expected.
Is facial recognition software secure by design? A question rarely asked is “how safe is the infrastructure that holds and processes all this data?” As long as organizations refuse to audit the security of their suppliers, facial recognition software will remain inherently unsafe, especially in the hands of the police.
A Security Information and Event Management (SIEM) can play an important role in GDPR compliance. It can serve as a centralized point for all data collection and analysis, and offer intelligent insights into malicious behavior so you can be alerted of security incidents before they become an impactful data breach.
Out of all six legal bases for processing offered by the GDPR, consent and legitimate interests are the legal bases most likely to be relied upon to justify direct marketing. Where the direct marketing involves electronic communications, however, is where things get muddy.
In the aftermath of the Cambridge Analytica scandal, many have suggested that Facebook be regulated, fined and perhaps even broken up. After all, if the FTC were to invoke its full power, it could theoretically levy hundreds of millions of dollars of fines, crippling Facebook. But is a big tech company too big to fail?
While the Facebook Cambridge Analytica scandal has created its share of problems for Facebook, it’s clear that the scale and scope of the scandal extends to every corner of Silicon Valley. After all, most tech giants are collecting staggering amounts of user data and comprehensive new privacy regulations seem imminent.
Increased credit card usage has resulted in higher rates of credit card fraud, and financial institutions are bearing the brunt of the financial losses. Recently, fraudsters are committing synthetic identity fraud by cultivating identities and developing credit histories over time leading to the call for new solutions.
GDPR may have a huge impact on small businesses but may not stop government surveillance or cool the unfair advantage of tech giants over smaller industries and smaller players. Are there real improvements to consumer privacy?
Many companies may now be afraid of data monetization because of concerns over potential privacy violations. There is also a growing concern over being legally compliant but still making customers unhappy or uncomfortable. Is differential privacy the answer?
Developing an effective privacy management infrastructure for GDPR compliance seems daunting. How do you prioritize to meet GDPR accountability obligations?









