IT Security & Privacy

Cybersecurity is a constant challenge, and as digital infrastructures evolve, so do the risks. The release of ENISA’s NIS360 2024 report provides a timely and important snapshot of how well Europe’s critical sectors are handling their cybersecurity responsibilities under the NIS2 Directive. This report doesn’t just throw out data, it digs deep into where sectors stand, where they’re excelling, and, more importantly, where they need to improve.

It’s not every day a fashion brand gets caught up in the tangled web of data privacy violations, but here we are. Todd Snyder, the well-known clothing retailer, has been slapped with a $345,178 fine by the California Privacy Protection Agency (CPPA) after failing to meet the standards set by the California Consumer Privacy Act (CCPA).

The Personal Information Protection Commission (PIPC) has taken a closer look at Hangzhou DeepSeek Artificial Intelligence (DeepSeek), a company that’s been under scrutiny ever since its R1 Large Language Model (LLM) AI chatbot launched earlier this year. What started as a routine review into the privacy practices of DeepSeek’s services has resulted in a series of recommendations that are shaking up how the company handles user data and cross-border transfers.e

The French data protection authority, the CNIL (Commission Nationale de l'Informatique et des Libertés), has released its 2024 annual report, showcasing a year marked by significant strides in personal data protection. The report highlights key achievements in inspections, sanctions, public awareness, artificial intelligence (AI) development, and cybersecurity, underscoring the CNIL’s critical role in safeguarding privacy in France.

Cybersecurity is no longer just an IT problem, it’s a business problem. And yet, despite all the headlines and constant warnings, a concerning gap remains between the leaders of organizations and the people tasked with defending them from cyber threats. New research from Ernst & Young LLP (EY) has uncovered this alarming disconnect, revealing how the divide between C-suite executives and Chief Information Security Officers (CISOs) is putting organizations at risk.

The European Data Protection Board (EDPB) has released its 2024 Annual Report, showcasing the organization’s significant contributions to safeguarding personal data in an evolving digital landscape. The report highlights key milestones, including the adoption of a new strategy, an increase in consistency opinions under the General Data Protection Regulation (GDPR), and continued guidance on emerging issues like AI, facial recognition, and cross-border data transfers.

In the vast and sprawling digital landscape, where our lives are lived in bits and bytes, we often forget how much of our personal data is at risk, until something shatters that illusion of safety. In the early months of 2025, that illusion was pierced when a massive data breach at X (formerly Twitter) exposed over 200 million user records. Names, email addresses, screennames, user IDs, and profile images, fragments of millions of lives, were laid bare for anyone to see.