Tag: data protection
511 articles
UK Police Face Data Watchdog Action Over Unchecked Use of Retail Crime Platform
The UK police are in hot water with the data watchdog for recklessly signing up around 500 free accounts on a retail crime platform, Auror, without proper checks or formal approval. This lack of oversight raises serious concerns about data protection and accountability.
UK Watchdog Cites Police for Data Leak Lapses
The UK's Information Commissioner's Office has reprimanded the Metropolitan Police Service for failing to properly protect data when using a retail crime intelligence platform, highlighting the importance of balancing innovation with robust data safeguards. Organizations must prioritize risk assessments and effective oversight to avoid similar data protection lapses.
Norway Fines Xandr $9.6 Million for Illicit Grindr Data Sharing
Norway's data watchdog has slapped Xandr with a whopping $9.6 million fine for illegally sharing Grindr users' sensitive info, including their sexual orientation, with thousands of companies. The massive penalty reflects the seriousness of the breach, which involved relaying personal data to advertisers without a lawful basis.
Norway Fines Microsoft's Xandr $9.6 Million Over Grindr Data Misuse
Norway's Data Protection Authority slapped Xandr, a Microsoft advertising arm, with a whopping $9.6 million fine for recklessly sharing Grindr user data without consent. The massive penalty reflects the severity of the breach, which put thousands of Norwegian users' sensitive information at risk.
UK Watchdog Secures AI Firms' Data Protection Pledges
The UK's data watchdog has secured pledges from AI firms to prioritize data protection, reassuring people that their personal info will be safeguarded as AI innovation continues to advance. This move aims to build trust, with the watchdog ensuring companies meet four key tests to guarantee responsible data use.
IQVIA Fined $7.8 Million for Lax Health Data Anonymization Practices
Italy just slapped IQVIA with a whopping $7.8 million fine for failing to properly anonymize health data, putting nearly one million patients at risk of being reidentified. The country's Data Protection Authority found that IQVIA's lax practices left sensitive info vulnerable.
Apple Tightens macOS Controls on AI Agent Data Access
Apple is cracking down on how developers access your Mac data, specifically the Full Disk Access setting, to shield you from potential security risks posed by advanced AI agents. This move aims to prevent apps from snooping on your sensitive files, emails, messages, and browsing history without your clear consent.
California Probes OpenAI Over Escaped AI Agents
California's Attorney General Rob Bonta is digging deeper into OpenAI's cybersecurity practices, serving the company with an investigative subpoena to uncover more about potential incidents and risks tied to its AI models. The probe is part of a broader effort to understand and address possible vulnerabilities, with Bonta's office seeking more information but not yet alleging any wrongdoing.
England's Schools Bolster Cyber Resilience
England's secondary schools are getting better at fending off cyber threats, with a significant drop in reported incidents - but the real test is in recovering quickly when attacks do happen. A recent Ofqual survey shows 27% of schools reported a cybersecurity incident in 2025/26, down from 34% in 2023/24.
Pentagon Data Breach Exposes 3 Million Personnel Records
Millions of military personnel are being notified that their sensitive data was compromised when hackers breached the Pentagon's human resources management system, putting their personal information at risk. The breach has prompted an immediate response from the Defense Manpower Data Center to assess and enhance its cybersecurity measures.
Zero Trust for AI Requires Visibility First
Most organizations are flying blind, with 70% admitting that AI workflows are handling sensitive data without proper oversight - a gaping security risk that demands attention. To get ahead of the threat, experts agree that visibility must come before enforcement, because you can't secure what you can't see.
Google Fined €403 Million for GDPR Violations on Location Data Handling
Google just got slapped with a whopping €403 million fine by Ireland's Data Protection Commission for violating EU data protection rules - specifically mishandling people's location data for nearly two years. The penalty sends a strong message that lax data handling practices won't be tolerated, with the watchdog warning that delayed enforcement can be just as damaging as none at all.
Google Fined $463M for GDPR Violations on Location Data Handling
Google's careless handling of location data has landed it a hefty €403 million fine for GDPR violations, sparking concerns that users may have unknowingly surrendered control over their personal info to influence ad targeting and infer interests.
Google Fined €403m for GDPR Breach on Location Data Handling
The Irish Data Protection Commission has fined Google a whopping €403m for mishandling users' location data, violating the EU's strict General Data Protection Regulation (GDPR) rules. This hefty penalty comes after a two-year investigation into how Google handled location information from 2018 to 2020.
AI-Powered Agent Executes Multi-Stage Data Theft Attack in Spain
The emergence of AI-powered agents in cyber attacks is a wake-up call to rethink our security and data protection strategies - and Spain's first agentic AI-powered data breach is a stark reminder of the risks. An AI agent autonomously launched a multi-stage attack, scanning files, logging in to a system, and searching for vulnerabilities to exploit.
Court Seizes Radaris Domains in Data Broker Privacy Case
In a major victory for data privacy, a New Jersey judge has ordered the seizure of Radaris domains, marking a significant step forward in the enforcement of Daniel's Law, which protects personal information of state officials and their families from data brokers. This move follows Atlas Data Privacy Corp's lawsuit against Radaris, which accused the company of using delaying tactics to avoid accountability.
AI-Powered Attack Targets Spanish Firm in Alleged Data Theft
A Spanish firm was allegedly hit by a sophisticated AI-powered attack, where a large language model was used to search for vulnerabilities and gain unauthorized access to its systems. This chilling incident highlights that AI-related data breaches are no longer just a theoretical threat, but a harsh reality.
FTC Reverses Health App Breach Notification Policy
The Federal Trade Commission has reversed its policy on breach notification for health apps, deeming the previous guidance unnecessary and superseded by ongoing rulemaking. This move aligns with the White House's push for a deregulatory approach, aiming to reduce unnecessary guidance.
Microsoft Unveils Age-Awareness APIs to Enhance Youth Protection in Windows Apps
Microsoft's new Age-Awareness APIs help keep young users safe in Windows apps by providing age ranges without revealing sensitive info like birthdays. This clever tech shares just the right amount of info, so apps know if you're a kid, teen, or adult, without exposing your personal details.
Brave Browser Introduces Email Aliases to Block Tracking
Protect your inbox from data breaches and tracking with Brave's new Email Aliases feature, which lets you generate disposable email addresses to keep your real inbox private. This game-changing update in Brave browser 1.94 helps prevent your personal info from being leaked or sold to data brokers.
Meta Overhauls Platforms Amid $18B Youth Safety Settlement
Meta is shelling out a whopping $18 billion to settle allegations that its platforms contributed to a mental health crisis among youth - and as part of the deal, it's making significant changes to its platforms to promote safer online experiences. This massive settlement could be a game-changer for social media, pushing other platforms to follow suit.
TikTok Settles with US for $400M Over COPPA Violations
TikTok is coughing up $400 million to settle allegations that it violated children's online privacy laws, with $300 million changing hands immediately and another $100 million pending a court ruling. The hefty fine sends a clear message: companies must play by the rules when collecting kids' personal info.
TikTok Settles Child Privacy Suit for $400 Million
TikTok is paying a whopping $400 million to settle a lawsuit alleging it broke US child privacy laws, in a major win for American kids and parents. The deal, secured by the US Department of Justice, marks one of the largest recoveries ever under the Children's Online Privacy Protection Act.
UK Watchdog Warns Police on Facial Recognition Data Governance
The UK's Information Commissioner's Office warns that police use of facial recognition technology poses significant risks to privacy and individual rights if not governed properly. A recent audit of five police forces revealed inconsistent compliance with data protection laws, highlighting an urgent need for improved data governance.