Browse the full DataRidge library of data protection and governance guidance.
Privacy RegulationsThe Information Commissioner s Office (ICO) has launched a six-week call for evidence on agentic AI data protection risks, ending November 20. This isn t just theoretical. The ICO has secured commitme
Breach & Risk AssessmentWhen ASOS customers received alarming ASOS HACKED alerts on their phones, the fashion retailer faced a critical question: who controls your customer touchpoints when things go wrong? ASOS confirmed th
Breach & Risk AssessmentA small Danish company had legal access to Denmark s Central Register of Persons. For about 10 days in September 2026, attackers used that access to query 8.8 million records. The system charged per l
Breach & Risk AssessmentDenmark s September breach exposed 8.8 million citizen records through a single compromised company account. Over 10 days, attackers ran more than 14 million searches against the national registry bef
Get weekly security insights and compliance updates delivered to your inbox.
Breach & Risk AssessmentDenmark s Central Person Register breach, which exposed 8.8 million records through a company s lawful access, highlights a critical oversight: assuming authorized access is inherently safe. This chec
Breach & Risk AssessmentWhen Denmark s Central Population Register (CPR) breach exposed 8.8 million records through misused third-party access, it highlighted how myths about registry security create vulnerabilities that att
Compliance & MonitoringPurpose of the Template You need a structured plan to inventory, assess, and migrate your cryptographic infrastructure to quantum-resistant algorithms. This template forms the core of the PQC Migratio
Cryptography & EncryptionSecurity teams are buzzing about the new RSA attack making headlines. With your encrypted communications, API authentication, and certificate infrastructure relying on RSA, you need to know what s tru
Privacy RegulationsLeadership Crisis at the ICO In 2025, the UK s data protection regulator faced a leadership crisis when Information Commissioner John Edwards resigned in June after an independent workplace investigat
Breach & Risk AssessmentUnderstanding the Dilemma The recent breach at Times Car, where 6.6 million user accounts were compromised, highlights a critical question for data governance teams: should you hash passwords or encry
Breach & Risk AssessmentThe Challenge On July 16, 2026, the Defense Manpower Data Center (DMDC) discovered a security vulnerability in its file-sharing system. This vulnerability had been exploited since October 2025, leadin
Breach & Risk AssessmentYour customer data platform (CDP) holds millions of records, accessible to marketing teams, analytics tools, and third-party integrations. One misconfigured endpoint can expose everything. Consider th
Breach & Risk AssessmentA 16-year-old researcher recently accessed approximately 17.3 trillion database rows in Microsoft s internal analytics service. The vulnerability wasn t a sophisticated exploit. The service simply did
Breach & Risk AssessmentYour team published aggregate statistics on a public-facing website. The dashboard shows enrollment counts, demographic breakdowns, and service utilization rates. No names or Social Security numbers a
Privacy RegulationsWhen a major GDPR fine is announced, privacy teams often ask: What exactly did they violate? The Ireland DPC s €403 million fine against Google provides clear insights. Here s what practitioners are a
Privacy RegulationsIreland s Data Protection Commission (DPC) fined Google €403 million for GDPR violations from May 25, 2018, to February 4, 2020, specifically around lawfulness, fairness, and transparency in location
Breach & Risk AssessmentIf you re deploying autonomous agents to gather information, research data, or interact with external systems, you need to know when they cross from authorized access into unauthorized probing. The Op
Privacy RegulationsThe Conventional Wisdom Ask any privacy officer about the Google location data fine , and you ll hear the same refrain: They weren t transparent enough. The Irish DPC s €403m penalty against Google is
Breach & Risk AssessmentWhat Happened On August 25, 2025, Miljödata, a Swedish IT systems provider serving 80% of Sweden s municipal work environment and HR systems, suffered a cyberattack that compromised sensitive data for
Breach & Risk AssessmentGoogle s €403 million fine from Ireland s Data Protection Commission isn t just another regulatory headline. It s a detailed examination of how location data processing can fail, even at companies wit
