Practical analysis and expert coverage across compliance frameworks, risk management, data privacy, and audit readiness.
Data PrivacyThe Challenge Starting January 1, 2027, California businesses must comply with a new requirement that shifts traditional data governance: honoring deletion requests for personal data they didn t colle
Data PrivacyGoogle Ireland Limited just paid 403 million EUR to answer that question. The Irish Data Protection Commission s decision following its inquiry into Google s location data processing between 25 May 20
Data PrivacyWhen a consumer association filed a complaint against Securitas Direct, the issue wasn t the absence of compliant channels for data subject rights. It was that their signage directed people to a charg
Data PrivacyYou re building your organization s cross-border data transfer compliance program. Kenya s Office of the Data Protection Commissioner published its Guidance Notes for Cross-border Data Transfers on Se
Get weekly security insights and compliance updates delivered to your inbox.
Data PrivacyThe Dutch Data Protection Authority s €825 million fine against Uber for automated driver deactivations is a stark warning. It s a glimpse of the financial risks when organizations view automated deci
Data PrivacyWhat Changed Thomson Reuters disclosed a breach of its C-Track court case management platform on June 30, after unauthorized access persisted from March through June. The incident exposed sealed court
Data PrivacyWhat Happened Meta settled with a coalition of state attorneys general for up to $18 billion over 10 years after claims that Facebook and Instagram harmed children. The case centered on allegations un
Data PrivacyYour compliance team probably believes at least one dangerous myth about AI governance in healthcare. These misconceptions aren t just theoretical, they re creating legal exposure and eroding patient
Data PrivacyThe Challenge Sutter Health and Memorial Care are facing a class action lawsuit for allegedly using AI-powered tools to record physician-patient conversations without proper consent. Patients claim th
Data PrivacyWhat Changed DireWolf claimed responsibility for stealing 253 gigabytes of data from the National Kidney Registry , a Connecticut-based organ transplant facilitator. The breach exposed donor names, me
Data PrivacyWhen DireWolf stole 253 gigabytes from the National Kidney Registry in August 2026, the attack didn t encrypt systems or halt operations. But that distinction matters less than you d think. If your or
Data PrivacyThe $275,000 settlement between Connecticut s Attorney General and TaxAct wasn t just about penalizing past actions. It required a comprehensive governance program for third-party tracking technologie
Data PrivacyWhen attackers steal 6 terabytes of patient records, your legal team will spend weeks figuring out what was taken. Your patients need to hear from you now. AnMed s July cyberattack illustrates the gap
Data PrivacyWhen 3.8 million patient records leave your AWS environment over six days, you need more than an incident response plan . You need a pre-built notification framework that your team can execute under p
Data PrivacyWhat Happened Between March 10 and March 16, 2026, a threat actor accessed CareCloud s Amazon Web Services (AWS) environment, exfiltrating data from its databases. The New Jersey-based EHR vendor, ser
Data PrivacyWhen Heights Finance discovered unauthorized access to its cloud-based platform on May 7, the breach had already exposed Social Security numbers, banking details, and personal data of 734,828 people.
Data PrivacyThese questions come from privacy officers, compliance managers, and practice administrators who ve reached out after reading our analysis of 80,300 healthcare review replies. Many were surprised to l
Data PrivacyThe CNIL s July 20, 2026 exploratory note on agentic AI serves as a warning. When your AI systems autonomously orchestrate tasks, call external services, and maintain persistent memory across sessions
Data PrivacyWhen Britain s ACRO Criminal Records Office discovered it had been breached three times over nearly two years, investigators uncovered something more troubling than the attacks themselves: nobody knew
Data PrivacyThe compliance floor just moved. For years, you could treat COPPA under-13 threshold as your bright line. If your service wasn t directed at children and you didn t have actual knowledge of users unde
