A New Mexico judge has ordered Meta Platforms to pay $25 billion in civil penalties after a jury found that Facebook repeatedly misled consumers about their personal information and the company's handling of harmful content. The judgment, issued Wednesday, is among the largest financial penalties ever imposed on a U.S. corporation.
Norway's data protection authority received 282 reports of personal data breaches linked to deliberate cyberattacks in the first half of 2026, up from 103 during the same period last year, as intrusions at shared technology suppliers exposed information belonging to multiple organizations.
The European Commission has opened a formal investigation into Booking.com over concerns that fraudulent accommodation listings, phishing scams and undisclosed paid promotions may be exposing travelers to risks the platform has failed to adequately address.
The UK's Information Commissioner's Office (ICO) reprimanded Ogi Networks Limited (ONL) and the Local Government Data Unit – Wales, known as Data Cymru, on October 20 after finding that both organizations had failed to maintain adequate security controls and oversight of accounts on Data Cymru's network.
The Netherlands Data Protection Authority (Autoriteit Persoonsgegevens) has published a downloadable privacy statement template for small and medium-sized enterprises (SMEs) across 10 industries, along with a companion template for a processing register. The templates are voluntary guidance rather than new obligations, but they signal the regulator's baseline expectations for GDPR transparency and record-keeping. Compliance teams should note this benchmark, particularly when assessing SME customers, vendors, and counterparties in the Netherlands.
New Zealand's financial regulators have told banks and other regulated institutions to examine whether their cybersecurity arrangements are keeping pace with advances in artificial intelligence, warning that the technology is creating new problems for corporate oversight and increasing dependence on outside technology providers.
South Korea's privacy regulator received 432 data breach reports in the first six months of 2026, nearly matching the 447 recorded throughout the whole of last year. The increase has prompted a substantial overhaul of how the country intends to investigate breaches, particularly those involving companies responsible for the personal information of millions of people.
Access Login