Browse the full DataRidge library of data protection and governance guidance.
Breach & Risk AssessmentWhen a threat actor impersonates a government agency and your team fulfills the request, you ve just handed over customer passports, transaction histories, and verification selfies. Revolut learned th
Breach & Risk AssessmentThe Challenge In August, McKesson faced a serious extortion attack when ShinyHunters, a known cybercriminal group, breached the company s systems and stole what they claimed were 284 million documents
Breach & Risk AssessmentA Metabase vulnerability exposed data on 1,079,819 students and parents at Mathspace, with unauthorized access from August 10 to August 27, 2026. Attackers exploited an unpatched SQL injection flaw to
Breach & Risk AssessmentAfter major breaches hit the news, security and privacy teams often wonder, Could that happen here? The Hôpital privé de la Loire incident, where CNIL issued a €500,000 fine after an attacker extracte
Get weekly security insights and compliance updates delivered to your inbox.
Cryptography & EncryptionYour encryption infrastructure faces a critical decision. The Cybersecurity and Infrastructure Security Agency (CISA) and the G7 Cyber Security Working Group have urged organizations to transition to
Privacy RegulationsThe Challenge Uber s technical privacy team faced a common problem for high-growth platforms: embedding privacy controls into product development when engineers and lawyers speak different languages.
Breach & Risk AssessmentWhen attackers claim a 33GB archive of your files, your first 72 hours determine whether you face regulatory penalties, class-action exposure, or both. This guide breaks down the technical and complia
Cryptography & EncryptionMicrosoft s move to transition critical systems to post-quantum cryptography by 2029 is more than just a vendor update. It s a wake-up call for you to identify where cryptography exists in your infras
Cryptography & EncryptionEvery couple of weeks, someone on our team Slack asks: Are we really switching to post-quantum crypto, or is this just vendor noise? Google Cloud s recent roadmap puts a date on it, 2029, and introduc
Privacy RegulationsScope This guide focuses on cross-border data transfer mechanisms facing legal challenges and the compliance gap due to the delayed ePrivacy Regulation. You ll learn how to audit your current transfer
Privacy RegulationsYou can t audit what you haven t mapped. Cross-border data transfers are a key focus of GDPR enforcement, yet many organizations treat transfer mechanisms as a one-time paperwork exercise. With superv
Privacy RegulationsThe Conventional Wisdom You ve heard it in every compliance workshop: Build your privacy program with enough runway. Map your data flows, document your processing activities, train your teams, and imp
Breach & Risk AssessmentThe Privacy Commissioner s investigation into Human Resources and Skills Development Canada s breach of student loan recipient information follows a familiar pattern: a sensitive data exposure, regula
Privacy RegulationsThe EU AI Act introduces a risk-based framework that complements your existing GDPR obligations. If you re a Data Protection Officer, you re facing a practical question: do you extend your current dat
Privacy RegulationsThe European Data Protection Board (EDPB) is becoming increasingly central to your data protection strategy. With the EU s Digital Omnibus package proposing amendments to the GDPR and Anu Talus leadin
Breach & Risk AssessmentWhen your mobile banking platform exposes customer data mid-deployment, you face an immediate decision: roll back the update, suspend the service, or monitor and contain. The wrong choice worsens the
Breach & Risk AssessmentWhen ShinyHunters demanded approximately $55 million from McKesson Corporation in late August, they exposed more than just stolen data. They highlighted a widespread misunderstanding of third-party ri
Access ControlNHS England s decision to grant Palantir staff direct access to identifiable patient data highlights significant governance failures. This move contradicts the health service s 2023 assurance that per
Breach & Risk AssessmentThe Question at Hand When Partnered Health s 21 clinics experienced a breach affecting medical records across Sydney, Melbourne, and Canberra, they obtained an interim injunction from the New South Wa
Breach & Risk AssessmentThe Ceva Logistics breach from July 29 to August 1 wasn t notable for its duration or complexity. What made it significant was the impact: eight warehouses compromised, affecting companies like Valve,
