Browse the full DataRidge library of data protection and governance guidance.
Breach & Risk AssessmentScope This guide focuses on incident response and security measures for cloud-based identity verification platforms handling government-issued IDs. It s aimed at security engineers managing third-part
Privacy RegulationsA recent opinion from CJEU Advocate-General Maciej Szpunar signals a potential shift in how European courts evaluate bulk metadata collection. The key question is no longer whether you collect metadat
Breach & Risk AssessmentThe IDscan.net breach exposed 153 million drivers licenses on the dark web. If you re using a vendor for identity verification, their security posture becomes your liability. The FBI is investigating,
Privacy RegulationsThese questions come from discussions with privacy officers over the past year. You re not just asking about what happened in 2019, you re trying to figure out what it means for your program in 2020 a
Get weekly security insights and compliance updates delivered to your inbox.
Privacy RegulationsThe Conventional Wisdom When COVID-19 hit, many privacy thought leaders advocated for Chief Privacy Officers to have a seat at the executive table. The idea was that during crises, rapid data-sharing
Privacy RegulationsPurpose of the Template When your school collects health screening data at entry points, you re handling sensitive data under GDPR Article 9 and U.S. state laws. This intake form template helps you do
Privacy RegulationsWhat Happened On July 16, 2020, the Court of Justice of the European Union invalidated the EU-US Privacy Shield framework in its Schrems II decision. This ruling highlighted a major issue: organizatio
Privacy RegulationsIn every planning meeting, board presentation, and budget negotiation, privacy compliance is often framed as the enemy of innovation. You ve heard it: We can t move fast if we re buried in consent for
Cryptography & EncryptionPrivacy officers are hearing a lot about quantum threats right now. Most of it s wrong. Google Cloud has published a three-phase roadmap through 2028, with the first deadline in 2027. The timeline is
Privacy RegulationsWhat Changed California s legislature is processing several amendments to the California Consumer Privacy Act (CCPA) before its 2020 effective date. Mary Stone Ross, co-author of the CCPA ballot initi
Privacy RegulationsThe Legislative Wave In early 2021, six U.S. states, Washington, Connecticut, Minnesota, New York, Oklahoma, and Virginia, introduced comprehensive privacy legislation almost simultaneously. Each stat
Legal Basis & ConsentThe question at hand You re redesigning your consent mechanism. Engineering wants a streamlined experience with minimal clicks. Legal wants clear, granular choices. Your product manager argues that fr
Privacy RegulationsThe era of a unified U.S. state privacy law has ended. In 2024, seven states passed new privacy laws, bringing the total to 19. These laws diverged from the Washington State Privacy Act framework that
Privacy RegulationsYour team manages data across borders. If India or Vietnam is part of your processing footprint, or on your expansion roadmap, you now face two new compliance regimes with hard deadlines and specific
Data Governance FrameworksUnderstanding the Challenge The EU-US Data Privacy Framework (DPF) is under its first legal challenge since replacing the invalidated Privacy Shield. Referred to as the Latombe legal challenge, this c
Breach & Risk AssessmentWhen a vendor incident exposes your customer data, your notification script determines whether you maintain trust or face a regulatory investigation. This template provides a structured approach for G
Breach & Risk AssessmentWhen France s tax authority disclosed a breach affecting roughly 600,000 individuals and businesses, it faced a challenging decision: notifying victims while the investigation was still underway. The
Breach & Risk AssessmentWhen a database holding the work details of 135,000 police officers and criminal justice professionals gets breached, you re not just looking at a data incident. You re looking at a targeting list for
Cryptography & EncryptionWhen two-thirds of the public doesn t trust the government with encrypted messages, you re not just building a security architecture. You re building a trust architecture. The UK s recent clash betwee
Breach & Risk AssessmentBefore you repurpose customer data for a new product or analytics initiative, you must document why it s lawful. This template guides you through the compatibility assessment required under GDPR Artic
