IT Security & Privacy

Staffing Company Agrees to $2.7M Settlement for Alleged Cybersecurity Lapses in COVID-19 Contact Tracing

Insight Global LLC, a prominent staffing firm headquartered in Atlanta, has reached a $2.7 million settlement to resolve allegations of violating the False Claims Act due to inadequate cybersecurity measures during COVID-19 contact tracing efforts. The settlement, announced by the Department of Justice (DOJ), marks a significant step in ensuring government contractors fulfill their cybersecurity obligations, particularly in handling sensitive health information.

Kaiser Permanente Reports Major Data Breach Affecting 13.4 Million Patients

Kaiser Permanente, one of the nation's largest not-for-profit health plans, has disclosed a major data breach impacting the personal information of 13.4 million members.

ChatGPT Faces Privacy Complaint in Austria Over Alleged GDPR Violations

OpenAI, the company behind the wildly popular AI chatbot ChatGPT, is facing a privacy complaint in Austria over alleged violations of the European Union's General Data Protection Regulation (GDPR).

Fortifying Cyber Defenses: A Mandate for State & Local Governments

The cybersecurity landscape is a battleground, and state and local governments find themselves on the frontlines. Cyber threats loom larger than ever, escalating in frequency and sophistication as we progress through 2024. While high-profile breaches often dominate headlines, state and local agencies are not exempt from the relentless barrage of attacks aimed at compromising sensitive citizen data and disrupting critical operations. This pivotal moment demands decisive action to fortify data privacy and security measures.

Czech DPA Slaps Avast with $15M Fine for GDPR Violations

The Czech data protection authority imposed a whopping 351 million CZK fine on Avast Software, a cybersecurity firm, for unlawfully sharing personal data of millions of its antivirus users with a subsidiary company.

Change Healthcare Cyberattack Raises Compliance Concerns for UnitedHealth Group

The recent malicious cyberattack on Change Healthcare, a major provider of revenue cycle management and data solutions for the healthcare industry, has brought significant compliance risks and challenges to UnitedHealth Group, the parent company of Change Healthcare.

EDPB’s Vision 2024-2027: Navigating Data Protection in a Dynamic Digital Era

The European Data Protection Board (EDPB) unveiled its ambitious strategy for the forthcoming years, setting the stage for a nuanced approach to data protection in an ever-evolving digital landscape. Far beyond a mere blueprint, this strategy embodies a visionary response to contemporary data protection needs, propelled by collaboration and foresight.