Why ‘Ghost Assets’ are Killing your GDPR Compliance
IT teams need full visibility into every device, software installation, and user, as well as the ability to document all of the IT resources.
data
Italian DPA fines Clearview AI €20 million
The Italian data protection authority fined the Clearview AI EUR 20 million for GDPR breaches when processing sensitive data.
Facebook’s Meta facing order from Irish regulator to suspend data transfers to US
Wide-ranging privacy case has already led to threats from social media giant.
Family secrets exposed: genetic testing reveals unknown relatives
It’s hard to keep a family secret these days, thanks to the rise of direct-to-consumer (DTC) genetic genealogy services.
NHS Scotland Covid app rebuked for breaching data privacy laws
UK watchdog says app was not clear about how data is used and it may consider ‘further regulatory action’
When are you switching on E2EE, Dutch govt asks Microsoft
You need to switch on E2EE in group meetings, watch out for US Cloud Act, warns impact assessment.
What Is Browser Fingerprinting and How Does It Track You?
Cookies are on the way out—but not enough is being done about browser fingerprinting. So what is it?
TikTok Can Circumvent Apple and Google Privacy Protections
The popular Beijing-based app has “carte blanche” in gathering users’ data, cypersecurity experts say.
French watchdog rules use of Google Analytics illegal
Although Google has adopted additional measures to regulate data transfers in the context of the Google Analytics functionality, these are not sufficient.
What your smart TV knows about you – and how to stop it harvesting data
Smart TVs are always gathering data about you that can be monetised. What can you opt out of – and what can you safely leave alone?
Europe’s Hypocrisy Over Personal Data Privacy Exposed
Inherent hypocrisy is fully revealed by Europol’s mass collection of personal data of European residents contrary to the principles of GDPR.
CNIL sets parameters for processors’ reuse of data for product improvement
The guidance addresses question: when can a processor use personal data for purposes broader than just strictly providing services to the controller?