TikTok Postpones Privacy Policy Update in Europe After Italy Warns of GDPR Breach

Popular video-sharing platform TikTok on Tuesday agreed to pause a controversial privacy policy update that could have allowed it to serve targeted ads based on users’ activity on the social video platform without their permission to do so. The reversal, reported by TechCrunch, comes a day after the Italian data protection authority — the Garante […]

Facebook Hit With $18.6 Million GDPR Fine Over 12 Data Breaches in 2018

The Irish Data Protection Commission (DPC) on Tuesday slapped Facebook and WhatsApp owner Meta Platforms a fine of €17 million (~$18.6 million) for a series of security lapses that occurred in violation of the European Union’s GDPR laws in the region. “The DPC found that Meta Platforms failed to have in place appropriate technical and […]

France Rules That Using Google Analytics Violates GDPR Data Protection Law

French data protection regulators on Thursday found the use of Google Analytics a breach of the European Union’s General Data Protection Regulation (GDPR) laws in the country, almost a month after a similar decision was reached in Austria. To that end, the National Commission on Informatics and Liberty (CNIL) ruled that the transatlantic movement of […]

New 100KB White Rabbit ransomware will encrypt files and send them to GDPR authorities if you don’t pay the ransom

Cybersecurity specialists report the detection of a new ransomware variant apparently operated by FIN8, a dangerous hacking group with financial motivations and a focus on point of sale (PoS) engagement. Dubbed as White Rabbit, this new malicious development was spotted by Michael Gillespie, a ransomware research specialist and founder of the No More Ransom cybersecurity […]

What Does GDPR Mean for Your Organization?

GDPR ,or the General Data Prevention Regulation, is a new law that has been enforced by the European Union since May 25, 2018. The goal of this regulation is to update the Data Protection Directive of 1995; this was was enacted before the widespread use of the internet, which has drastically changed the way data […]

Key Elements and Important Steps to General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) applied on 25 May 2018, this new law applies to all companies that collect and process data belonging to European Union (EU) citizens. This includes companies with operations in the EU and/or a website or app that collects and processes EU citizen data. It expands the rights of individuals to […]

Marriott International Facing More than $120 Million Fine Under GDPR for 2018 Data Breach

Marriott International fined over £99 million ($123 Millon) under the General Data Protection Regulation (GDPR) for failure to protect customer data. Information Commissioner’s Office (ICO) issued a fine notice to Marriott for 2018 data breach, in which approximately 339 million guest records were exposed globally. The fine imposed to Marriott for breaches of data protection […]

Marriott Faces $123 Million GDPR Fine Over Starwood Data Breach

After fining British Airways with a record fine of £183 million earlier this week, the UK’s data privacy regulator is now planning to slap world’s biggest hotel chain Marriott International with a £99 million ($123 million) fine under GDPR over 2014 data breach. This is the second major penalty notice in the last two days […]

British Airways Fined £183 Million Under GDPR Over 2018 Data Breach

Britain’s Information Commissioner’s Office (ICO) today hit British Airways with a record fine of £183 million for failing to protect the personal information of around half a million of its customers during last year’s security breach. British Airways, who describes itself as “The World’s Favorite Airline,” disclosed a breach last year that exposed personal details […]

Privacy Act: 5 Important GDPR Requirements to Remember

In May 2018, the General Data Protection Regulation (GDPR) was enforced by the European Union (EU) to protect its citizens from the misuse of their personal data. This breakthrough regulation completely changed the way that companies would handle personal data and laid down the GDPR requirements that companies worldwide must follow. GDPR compliance must strictly […]

Google Fined $57 Million For Violating GDPR Rules

France’s data privacy watchdog National Commission for Informatics and Liberties (NCIL) has slapped a $57 million fine on Google for not complying with GDPR rules. This is the biggest fine that has been imposed on a tech company after GDPR rules come into effect from May last year. According to CNIL, the fine has been imposed because the tech giant failed to provide […]

2018 Is A Better Year For Customer Data Privacy Due To GDPR

2018 can be summarized as the year when strict implementation of customer data protection policies was felt by the public, regardless of where they are located in the world. This is caused by the compliance of multinational companies to the European Commission’s GDPR (General Data Protection Regulation), which fully took effect starting May 25, 2018. […]

Flaw in GDPR-Themed WordPress Plugin Used to Hijack Websites

A security flaw in a GDPR-themed WordPress plugin has been used by hackers to hijack websites, as per reports. A blog post by Defiant, a company that focuses on WordPress security, discusses this issue pertaining to the popular plugin WP GDPR Compliance in detail. Tomáš Foltýn, security writer at ESET, had also discussed the issue […]

Google Faces GDPR Violation Complaints For Location Tracking

A few months back, Google was largely criticized by Android users when AP news unveiled that Google tracks people’s locations even after toggling off the location button. After facing lawsuits from many individuals, Consumer Groups from seven different European countries have now filed complaints against Google for tracking location activity under the new European Union […]

Data breaches in schools: How should an academic institution report a security incident to comply with the GDPR?

Some recommendations for compliance with the EU’s data security regulation As reported by information security and digital forensics specialists, all organizations that process personal data from residents of the European Community member countries must comply with the European Union’s General Data Protection Regulation (GDPR). The GDPR main mission is to unify data protection measures between […]

Controller and processor responsibilities, a crucial part of the GDPR

Some considerations on controller and processor responsibilities and other concepts present in the European data protection law, such as DPIA and DPO The application of the European Union’s General Data Protection Regulation (GDPR) began in May 2018. Since then, organizations are working on compliance with the high security standards demanded by GDPR, considered to be the most […]