Practical compliance insight on consent management, cookie law, and tracking technologies.
Laws and RegulationsCNIL fined a French hospital EUR 500K after a breach exposed over 700,000 patient and third-party records due to weak authentication and access controls.
Laws and RegulationsThe Hellenic Data Protection Authority s decision against E.E.T.A.A. S.A. and the Ministry of Social Cohesion and Family Affairs raises a tough question: when your processor s outdated systems cause a
Laws and RegulationsChallenging Conventional Wisdom Many believe that if your non-EEA processor employs remote workers in third countries, you ve created a new cross-border data transfer chain needing additional mechanis
Laws and RegulationsWhat Happened In summer 2025, an attacker accessed the Computerised Patient Summary (DPI) at Hôpital Privé de la Loire, a private hospital in France. Using a single compromised user account, the attac
Get weekly security insights and compliance updates delivered to your inbox.
Laws and RegulationsThree data protection authorities, CNIL , the California attorney general, and the FTC, are ramping up enforcement against mobile apps. If your team manages a mobile app that processes personal data,
Laws and RegulationsYou re tracking a new data protection law. Implementation is officially delayed until year-end. Your legal team has scheduled a compliance review for Q4. Then, overnight, the Senate reverses course an
Laws and RegulationsThe European Data Protection Board (EDPB) recently released guidelines on pseudonymization under the GDPR . For enterprise IT and security teams, these guidelines offer a practical roadmap to reduce d
Laws and RegulationsThe UK Data (Access and Use) Act 2025 came into law on June 19. If your organization relies on the EU-UK adequacy bridge for cross-border data flows, you need a systematic way to track whether changes
Laws and RegulationsOverview of the New Enforcement Initiative CalPrivacy has launched a Data Broker Enforcement Strike Force, a team dedicated to investigating violations of data broker registration and consumer privacy
Consent InterfacesScope This guide focuses on validating opt-out mechanisms across web properties, mobile apps, and vendor integrations. It s designed for security engineers and platform teams tasked with ensuring priv
Laws and RegulationsYou can t fix what you don t measure. When the California Privacy Protection Agency conducts an audit on your sector, or when a consumer complaint reaches a state Attorney General, the investigation b
