Find the Right GRC Solution

Search and compare GRC technology built for the problems you’re trying to solve

IT Security & Privacy

Microsoft-Owned Xandr Hit With Record $9.6 Million Norwegian Privacy Fine

Norway's data protection authority has fined Microsoft-owned advertising technology company Xandr approximately $9.6 million (NOK 92 million) for unlawfully processing and sharing sensitive personal information belonging to users of the dating app Grindr.

Australian Privacy Regulator Investigates Developer Behind HeyCyan Smart Glasses App

Australia's privacy regulator has opened an investigation into the developer of an application used in inexpensive smart glasses sold through Kmart, Big W Marketplace and Amazon, after the company failed to answer questions about how the devices collect and handle personal information.

Ofcom Investigates Meta Over Instagram Instants Safety Assessments

Britain's communications regulator has opened an investigation into whether Meta failed to carry out required safety assessments before introducing Instagram Instants, a feature that allows users to share photos and videos that disappear after being viewed.

Hackers Use Chinese AI Agent to Breach South Korean Banks, Steal Data on 68,000 People

Hackers used a Chinese-developed artificial intelligence agent to attack some of South Korea’s largest banks and steal personal information belonging to 68,000 people, according to The Wall Street Journal, in an intrusion now under investigation by the country’s national police.

Free Wi-Fi Isn't Really Free: The Risk We Accept Every Time We Connect

We have all done it. You are at an airport waiting for a flight. Your train journey is going to take another two hours. You have just checked into a hotel, or perhaps you are sitting in a café trying to get some work done. Your mobile signal isn't great, so you look at the available networks and see exactly what you need: free Wi-Fi.

Croatian Privacy Regulator Fines Gambling Operator €2.59 Million Over Fingerprint Collection

A gambling operator in Croatia offered its casino customers a shortcut. Instead of producing an identity card on every visit, players could use an RFID chip or their fingerprints to identify themselves more quickly. For 34,933 players, consent to biometric processing was recorded. But when Croatia’s Personal Data Protection Agency examined how that system actually worked, it found that the operator was collecting more than it said it was collecting.

Italy’s Privacy Regulator Fines IQVIA €7 Million Over Health Data of 1 Million Patients

Italy’s privacy regulator has fined IQVIA Solutions Italy €7 million over a database containing the health information of roughly 1 million patients, finding that data the company regarded as anonymous could, in fact, be traced back to individuals.