Axios reports ransomware groups will find it difficult to carry out data breaches due to increased attention paid to cybersecurity by law enforcement around the world. Law enforcement is working to eliminate the number of computers infected by malware, leaving ransomware groups unable to latch on to weaknesses in the system.Full story
Australia imposed sanctions on a Russian citizen allegedly connected to the Medibank data breach that affected 9.7 million customers, Reuters reports. Authorities imposed cyber sanctions for the first time since enacting the cyber sanctions framework in 2021. The alleged hacker, Aleksandr Ermakov, could face fines and up to 10 years in jail. Full story
As the new year kicks off, legislative efforts to grapple with data protection, privacy and artificial intelligence are underway, or on the horizon, around the world. The IAPP gathered predictions from privacy professionals in 56 jurisdictions in its "Global Legislative Predictions 2024," aiming to help privacy pros see what may play out across the world from professionals on the ground.Full story
The European Data Protection Board's coordinated enforcement action on data protection officers sheds light on the peaks and valleys of DPO compliance under the EU General Data Protection Regulation. But how can companies, DPOs and enforcers leverage the EDPB's findings to improve?
While personal data use within a given company is growing exponentially, so are the various U.S. state comprehensive privacy statutes raising a range of obligations related to data subject access requests.
The Wall Street Journal reports on the different policies some chatbot companies have for storing and using your conversations with them to train generative artificial intelligence. Some privacy professionals advise against putting any sensitive information into a chat to avoid the possibility of a hack or use of your conversation.
The Office of the Privacy Commissioner of Canada released a strategic plan detailing three key priorities the office will focus on for the next three years. The plan focuses on protecting privacy, advocating for privacy in regard to technology and lobbying for additional children's privacy rights.Full story
France's data protection authority, the Commission Nationale de l’Informatique et des Libertés, fined Amazon France Logistique, 32 million euros for allegedly over-surveilling its warehouse employees and keeping data of their actions for longer than was deemed necessary.
The Global Privacy Enforcement Network will conduct an investigation of websites with deceptive design models, or so-called dark patterns, between 29 Jan-2 Feb. The sites will be judged based on the clarity of their texts and the design of their interfaces to see if they are influencing users to make harmful choices with their personal data.Full story
France's data protection authority, the Commission nationale de l'informatique et des libertés, published two practical sheets on data encryption and security in cloud computing. The practical sheets provide an analysis on data encryption methods including end-to-end encryption, and the importance of securing data in the cloud.Full story