Browse the full DataRidge library of data protection and governance guidance.
Breach & Risk AssessmentConduent's breach exposed 62M records and led to an $80M settlement, highlighting that cyber insurance covers costs but not delayed breach detection or trust loss.
Breach & Risk AssessmentThe Capcom breach exposed over 11 million accounts, underscoring the critical need for robust incident response and effective user notification strategies.
Breach & Risk AssessmentScope This guide focuses on the security controls and procedures needed when your organization acquires electronic health record systems. It covers legacy server management, credential security, migra
Privacy RegulationsLeadership Crisis at the ICO In 2025, the UK s data protection regulator faced a leadership crisis when Information Commissioner John Edwards resigned in June after an independent workplace investigat
Get weekly security insights and compliance updates delivered to your inbox.
Breach & Risk AssessmentWhat Happened On August 25, 2025, Miljödata, a Swedish IT systems provider serving 80% of Sweden s municipal work environment and HR systems, suffered a cyberattack that compromised sensitive data for
Privacy RegulationsWhat Happened On August 10, 2026, the California Privacy Protection Agency issued an order against LocateSmarter, LLC, an Iowa-based data broker, for violations of both California s data broker law an
Breach & Risk AssessmentWhen identity verification vendors handle millions of documents, you d expect them to secure those systems like a vault. Yet, lawsuits are filed, the FBI is investigating, and 153 million driver s lic
Data Lifecycle & DisposalYou re accountable for compliance decisions. But how often do you consider how the regulations you implement were actually negotiated? The gap between regulatory text and the political process that pr
Privacy RegulationsWhat Happened On January 4, 2023, the Irish Data Protection Commission imposed a €390 million fine on Meta for its Facebook and Instagram platforms. This significant enforcement action marks one of th
Breach & Risk AssessmentThe Challenge Between December 2 and December 18, 2025, an unauthorized actor accessed Amazon Web Services infrastructure belonging to Aesto Health, a healthcare data management provider. Aesto stores
Access ControlThe question at hand NIS2 compliance teams face a resource allocation problem. Article 21 lists ten security requirements, from supply chain due diligence to incident response protocols. All carry the
Privacy RegulationsThe California Consumer Privacy Act (CCPA) keeps evolving. If your team is building a compliance program around a regulation that s being amended mid-implementation, you re not just managing privacy r
Breach & Risk AssessmentWhat Happened UK organizations are facing a surge in litigation following cyber incidents. Legal teams report increased exposure in three areas: individual personal data claims under data protection l
Privacy RegulationsWhat Changed The U.S. remains the only major economy without comprehensive federal privacy legislation. Rep. Suzan DelBene introduced a federal privacy bill in 2021, gaining support from the U.S. Cham
Privacy RegulationsPurpose of This Checklist California s Privacy Rights Act (CPRA) is now in effect, even as final regulations are still pending. You re dealing with an active law, impending enforcement, and the need t
Privacy RegulationsUnderstanding the Risk Your interaction with a supervisory authority doesn t end with your final response. Under GDPR Article 82 , every data subject whose personal data you ve mishandled can pursue d
International Data TransfersThe invalidation of the EU-U.S. Privacy Shield on July 16, 2020, didn t just eliminate a transfer mechanism. It exposed how many legal and compliance teams had built their cross-border data strategies
Compliance & MonitoringThe Challenge In 2018, a real estate developer named Alastair Mactaggart, with no legislative background, managed to push the California Consumer Privacy Act through a ballot initiative. Two years lat
Privacy RegulationsPrivacy commissioners don t just enforce regulations; they shape them. When the Office of the Privacy Commissioner of Canada issued its preliminary reaction to Bill C-30, it opened a formal consultati
International Data TransfersThese questions keep landing in legal team Slack channels, compliance officer inboxes, and DPO office hours. They re coming from product teams launching new features, procurement officers vetting SaaS
