Browse the full DataRidge library of data protection and governance guidance.
Legal Basis & ConsentGM's $220M settlement over unauthorized driving data sales underscores the urgent need for robust consent management and compliance with privacy standards.
Breach & Risk AssessmentStaffordshire Police's data breach exposed a domestic abuse victim’s address, showing that ICO reprimands without fines may not prevent sensitive data risks.
Cryptography & EncryptionExplore how local governments can select vendor oversight models to protect citizen data, balancing risk, legal compliance, and monitoring for breach prevention.
Breach & Risk AssessmentJapan's telecom breaches exposed millions of records, revealing critical detection delays and third-party risks that amplify data exposure and phishing threats.
Get weekly security insights and compliance updates delivered to your inbox.
Breach & Risk AssessmentThis checklist details the critical 72-hour steps universities must take after a data breach to comply with GDPR and protect sensitive information.
Breach & Risk AssessmentResearch platforms repeatedly fail output controls, risking sensitive health data. Manual reviews, clear authority, and sanctions are vital to prevent breaches.
Breach & Risk AssessmentConduent's breach exposed 62M records and led to an $80M settlement, highlighting that cyber insurance covers costs but not delayed breach detection or trust loss.
Breach & Risk AssessmentCapcom's 11.7 million account breach exposed critical IAM weaknesses, stressing the need for MFA and real-time detection to protect centralized authentication systems.
Privacy RegulationsState-level fines can exceed federal caps, highlighted by Meta's $25B penalty. This guide covers consent controls to meet strict consumer protection laws.
Breach & Risk AssessmentThe Capcom breach exposed over 11 million accounts, underscoring the critical need for robust incident response and effective user notification strategies.
Breach & Risk AssessmentA 12-year-old test account using 'Password1' enabled attackers to breach Data Cymru, exposing personal data of 3,300 children and families.
Breach & Risk AssessmentWhen Nikkei Inc. disclosed its third breach in a month, exposing 1.83 million records after hackers used stolen credentials to access a development system in the cloud, the pattern became impossible t
Breach & Risk AssessmentThe Conduent settlement, with its $80 million penalty for a breach affecting 62.2 million people, wasn t an isolated incident. It s the predictable outcome of recurring mistakes organizations make in
Breach & Risk AssessmentThe UK s Legal Aid Agency discovered attackers had exfiltrated around 250,000 records dating back to 1978. This breach included nearly five decades of personal data that should never have been accessi
Breach & Risk AssessmentThe common advice is to bring in third-party cybersecurity experts as soon as you discover unauthorized access to customer data. Burger King Japan followed this approach after attackers accessed 11.18
Breach & Risk AssessmentWhen CenterPoint Energy took a month to disclose unauthorized access to customer data, it highlighted a common issue: many organizations lack structured breach response protocols. If you manage critic
Breach & Risk AssessmentWhy Approval Matters The ICO s recent enforcement action against the Metropolitan Police Service (MPS) highlights a critical issue: vendor onboarding without proper approval. Between March 2023 and Se
Breach & Risk AssessmentWhat Happened On September 10, an attacker accessed Denmark s Central Register of Persons (CPR) using credentials from Pays ApS, an IT company with legitimate access. The attacker used the password 12
Breach & Risk AssessmentThe Challenge Between July 2018 and April 2020, Xandr managed real-time advertising auctions within Grindr, exposing Norwegian users sensitive data, including sexual orientation, to thousands of compa
Breach & Risk AssessmentScope This guide focuses on the security controls and procedures needed when your organization acquires electronic health record systems. It covers legacy server management, credential security, migra
