IT Security & Privacy

ICO Launches Comprehensive Data Protection Audit Framework to Strengthen Organizational Compliance

The Information Commissioner's Office (ICO) recently announced the launch of a groundbreaking audit framework designed to revolutionize how organizations approach data protection compliance. This sophisticated new tool represents a significant advancement in enabling organizations to systematically evaluate and enhance their personal data handling practices.

PSNI Fined Over Major Data Breach Exposing Officer Details

The UK Information Commissioner's Office (ICO) has imposed a £750,000 fine on the Police Service of Northern Ireland (PSNI) following a catastrophic data breach that exposed the personal information of its entire workforce of 9,483 officers and staff.

FCC Reaches Settlement with T-Mobile Over Data Breaches

The Federal Communications Commission (FCC) announced today a groundbreaking settlement with T-Mobile, resolving multiple investigations into significant data breaches that compromised the personal information of millions of American consumers. The agreement, which includes substantial financial penalties and far-reaching cybersecurity commitments, represents a pivotal moment in the FCC's ongoing efforts to bolster data protection within the telecommunications industry.

Ireland Fines Meta €91 Million for GDPR Violations

The Irish Data Protection Commission (DPC) has levied a substantial €91 million fine against Meta Platforms Ireland Limited (MPIL), a subsidiary of Meta Platforms, Inc. The decision, announced on September 27, 2024, marks the culmination of an extensive investigation that commenced in April 2019, following MPIL's disclosure of a critical security oversight involving the storage of user passwords in plaintext format within its internal systems.

23andMe Agrees to $30 Million Settlement Following Data Breach

Ancestry and genetics-testing company 23andMe has reached a $30 million settlement agreement in response to a class-action lawsuit stemming from a data breach that occurred last year. The settlement, which is still pending judicial approval, addresses the company's handling of a security incident that impacted millions of users.

EU Launches Threathunt 2030: Navigating the Future of Cybersecurity Threats

The European Union Agency for Cybersecurity (ENISA) has officially launched the 2024 edition of ‘Threathunt 2030,’ a pivotal conference dedicated to anticipating and addressing future cybersecurity threats. Hosted in Athens, this flagship event brings together leading cybersecurity experts, policymakers, and industry stakeholders to explore the evolving landscape of cyber threats and develop strategies to enhance resilience across the EU.

AT&T Fined $13 Million for Data Mishandling in Vendor Breach Case

AT&T has agreed to pay a $13 million fine after the Federal Communications Commission (FCC) found the telecommunications giant had improperly shared customer billing information with a vendor to create personalized videos. The company also allegedly failed to ensure that this data was destroyed when no longer needed, which ultimately led to a security breach.