Browse the full DataRidge library of data protection and governance guidance.
Breach & Risk AssessmentThis checklist details the critical 72-hour steps universities must take after a data breach to comply with GDPR and protect sensitive information.
Breach & Risk AssessmentWhen Nikkei Inc. disclosed its third breach in a month, exposing 1.83 million records after hackers used stolen credentials to access a development system in the cloud, the pattern became impossible t
Breach & Risk AssessmentThe common advice is to bring in third-party cybersecurity experts as soon as you discover unauthorized access to customer data. Burger King Japan followed this approach after attackers accessed 11.18
Privacy RegulationsThe Information Commissioner s Office (ICO) has launched a six-week call for evidence on agentic AI data protection risks, ending November 20. This isn t just theoretical. The ICO has secured commitme
Get weekly security insights and compliance updates delivered to your inbox.
Breach & Risk AssessmentDenmark s September breach exposed 8.8 million citizen records through a single compromised company account. Over 10 days, attackers ran more than 14 million searches against the national registry bef
Privacy RegulationsWhen a major GDPR fine is announced, privacy teams often ask: What exactly did they violate? The Ireland DPC s €403 million fine against Google provides clear insights. Here s what practitioners are a
Breach & Risk AssessmentThe Question at Hand When Gyazo s image upload server was compromised on September 11, the company detected suspicious activity the same evening and blocked access by early September 12. Yet, 23.62 mi
Breach & Risk AssessmentScope This guide focuses on incident response and security measures for cloud-based identity verification platforms handling government-issued IDs. It s aimed at security engineers managing third-part
Privacy RegulationsA recent opinion from CJEU Advocate-General Maciej Szpunar signals a potential shift in how European courts evaluate bulk metadata collection. The key question is no longer whether you collect metadat
Breach & Risk AssessmentThe IDscan.net breach exposed 153 million drivers licenses on the dark web. If you re using a vendor for identity verification, their security posture becomes your liability. The FBI is investigating,
Privacy RegulationsThese questions come from discussions with privacy officers over the past year. You re not just asking about what happened in 2019, you re trying to figure out what it means for your program in 2020 a
Privacy RegulationsThe Conventional Wisdom When COVID-19 hit, many privacy thought leaders advocated for Chief Privacy Officers to have a seat at the executive table. The idea was that during crises, rapid data-sharing
Privacy RegulationsPurpose of the Template When your school collects health screening data at entry points, you re handling sensitive data under GDPR Article 9 and U.S. state laws. This intake form template helps you do
Privacy RegulationsWhat Happened On July 16, 2020, the Court of Justice of the European Union invalidated the EU-US Privacy Shield framework in its Schrems II decision. This ruling highlighted a major issue: organizatio
Privacy RegulationsIn every planning meeting, board presentation, and budget negotiation, privacy compliance is often framed as the enemy of innovation. You ve heard it: We can t move fast if we re buried in consent for
Cryptography & EncryptionPrivacy officers are hearing a lot about quantum threats right now. Most of it s wrong. Google Cloud has published a three-phase roadmap through 2028, with the first deadline in 2027. The timeline is
Privacy RegulationsWhat Changed California s legislature is processing several amendments to the California Consumer Privacy Act (CCPA) before its 2020 effective date. Mary Stone Ross, co-author of the CCPA ballot initi
Privacy RegulationsThe Legislative Wave In early 2021, six U.S. states, Washington, Connecticut, Minnesota, New York, Oklahoma, and Virginia, introduced comprehensive privacy legislation almost simultaneously. Each stat
Legal Basis & ConsentThe question at hand You re redesigning your consent mechanism. Engineering wants a streamlined experience with minimal clicks. Legal wants clear, granular choices. Your product manager argues that fr
Privacy RegulationsThe era of a unified U.S. state privacy law has ended. In 2024, seven states passed new privacy laws, bringing the total to 19. These laws diverged from the Washington State Privacy Act framework that
