IT Security & Privacy

Google Denies Massive Gmail Breach After 183 Million Passwords Leak Online

Claims that nearly a tenth of Gmail users had their passwords stolen spread quickly across social media this week, prompting Google to step in with an unambiguous response, stating there was no Gmail data breach.

Economists & Regulators Examine GDPR’s Economic Impact at Paris Event

An international forum hosted in Paris this spring brought together more than 450 participants to scrutinize how the EU’s landmark data protection law, the General Data Protection Regulation (GDPR), is shaping innovation, competition, and economic outcomes across Europe and beyond.

Experian Fined €2.7 Million by Dutch Regulator Over GDPR Breaches

The Dutch data protection authority has finalized a €2.7 million fine against Experian Nederland B.V. after concluding the company processed personal data without a lawful basis and failed to properly notify affected individuals. The ruling replaced an earlier decision from December 2023 following Experian’s formal objection.

EPA Gives Water Utilities New Tools to Confront Cybersecurity Risks

As cyber threats continue to test the resilience of U.S. water systems, the Environmental Protection Agency is rolling out new resources to help utilities strengthen digital defenses and keep safe water flowing.

Norwegian Court Upholds Fine Against Adult Dating App Over Data Privacy Violations

Norway's Borgarting Court of Appeal has upheld the $6 million (NOK 65 million) fine against Grindr, ruling that the company unlawfully shared users’ personal data with advertisers without valid consent. The decision, handed down on Tuesday, confirms earlier findings by the Norwegian Data Protection Authority (Datatilsynet) and the Oslo District Court that Grindr breached EU data protection law.

Capita Fined £14 Million for 2023 Data Breach Affecting 6.6 Million People

The UK Information Commissioner’s Office (ICO) has fined outsourcing giant Capita and its pensions subsidiary a combined £14 million for failing to protect personal data in a 2023 cyberattack that exposed the information of 6.6 million people.

EDPB Turns to Transparency for Its 2026 GDPR Enforcement Push

Europe’s data regulators are turning the spotlight on transparency, one of the GDPR’s most fundamental principles. During its October plenary, the European Data Protection Board (EDPB) agreed that its 2026 Coordinated Enforcement Framework (CEF) action will focus on how well organizations are informing people about the use of their personal data under Articles 12, 13, and 14 of the regulation.