Norway's data protection authority has fined Microsoft-owned advertising technology company Xandr approximately $9.6 million (NOK 92 million) for unlawfully processing and sharing sensitive personal information belonging to users of the dating app Grindr.
Australia's privacy regulator has opened an investigation into the developer of an application used in inexpensive smart glasses sold through Kmart, Big W Marketplace and Amazon, after the company failed to answer questions about how the devices collect and handle personal information.
Britain's communications regulator has opened an investigation into whether Meta failed to carry out required safety assessments before introducing Instagram Instants, a feature that allows users to share photos and videos that disappear after being viewed.
Hackers used a Chinese-developed artificial intelligence agent to attack some of South Korea’s largest banks and steal personal information belonging to 68,000 people, according to The Wall Street Journal, in an intrusion now under investigation by the country’s national police.
We have all done it. You are at an airport waiting for a flight. Your train journey is going to take another two hours. You have just checked into a hotel, or perhaps you are sitting in a café trying to get some work done. Your mobile signal isn't great, so you look at the available networks and see exactly what you need: free Wi-Fi.
BaFin President Mark Branson used a keynote speech to signal a strategic recalibration of German financial supervision toward greater proportionality, simplified rules, and faster, risk-focused intervention, particularly for troubled institutions. Compliance teams should note the emphasis on governance and risk culture over pure quantitative metrics, as well as expanded supervisory resources in cybersecurity, AML, conduct supervision, and forensic investigations. This signals heightened scrutiny of firms with weak governance structures, dominant management figures, or non-core business activities.
The Data Protection Commission has fined the Health Service Executive EUR 645,000 following an inquiry into systemic failures in the storage and retention of paper records containing sensitive medical data, triggered by two 2023 breach notifications. The decision underscores that GDPR security and storage-limitation obligations apply equally to physical records as to digital systems, and highlights breach notification and data subject communication failures as separately sanctionable infringements. Compliance teams, especially in healthcare and other sectors managing legacy paper archives, should treat this as a warning to audit offsite and legacy storage facilities.
Access Login