Browse the full DataRidge library of data protection and governance guidance.
Breach & Risk AssessmentWhen Thomson Reuters disclosed unauthorized access to its C-Track platform in June 2026, three months after the breach began, the incident exposed court records across at least 12 US states, the US Vi
Breach & Risk AssessmentThe Challenge Manchester Airports Group (MAG) experienced a massive data breach when attackers exfiltrated 550 gigabytes of customer data from a third-party hosted database. This breach exposed 8.8 mi
Privacy RegulationsThese questions come from discussions with privacy officers over the past year. You re not just asking about what happened in 2019, you re trying to figure out what it means for your program in 2020 a
Privacy RegulationsLate 2019 marked a turning point in GDPR enforcement. At the IAPP s Data Protection Congress in Brussels, supervisory authorities from three countries addressed privacy officers with a clear message:
Get weekly security insights and compliance updates delivered to your inbox.
Data Lifecycle & DisposalYou re accountable for compliance decisions. But how often do you consider how the regulations you implement were actually negotiated? The gap between regulatory text and the political process that pr
Compliance & MonitoringYour board approved the privacy budget. Your team attended the training. Everyone agrees customer data matters. So why are access logs still unmonitored and retention schedules still sitting in draft?
Privacy RegulationsThe Conventional Wisdom When COVID-19 hit, many privacy thought leaders advocated for Chief Privacy Officers to have a seat at the executive table. The idea was that during crises, rapid data-sharing
Privacy RegulationsPurpose of the Template When your school collects health screening data at entry points, you re handling sensitive data under GDPR Article 9 and U.S. state laws. This intake form template helps you do
Privacy RegulationsWhat Happened On July 16, 2020, the Court of Justice of the European Union invalidated the EU-US Privacy Shield framework in its Schrems II decision. This ruling highlighted a major issue: organizatio
Cryptography & EncryptionYour data governance team encrypts, rotates keys, and checks compliance boxes. Yet, you might find your protected data readable in backup logs, your key management system granting access to too many p
Privacy RegulationsThe Challenge Uber s technical privacy team faced a common problem for high-growth platforms: embedding privacy controls into product development when engineers and lawyers speak different languages.
Legal Basis & ConsentScope This guide addresses the structural problems with notice-and-consent mechanisms under current privacy frameworks and provides actionable redesign strategies for consent and preference managers.
Data Governance FrameworksYour team s been tasked with designing a privacy experience for younger users. Legal has handed you the COPPA requirements. Your product manager wants a seamless signup process. A board member asks if
Cryptography & EncryptionThe question at hand Your security team wants to roll out asymmetric encryption across the enterprise. Your operations team sees a nightmare of key management overhead. Both have a point. Public-key c
Data Subject RightsConsumer Reports has released the Data Rights Protocol, an open standard for fulfilling data subject rights. If your team manages DSAR operations, this could change your vendor evaluation criteria and
Privacy RegulationsWhat Happened On January 4, 2023, the Irish Data Protection Commission imposed a €390 million fine on Meta for its Facebook and Instagram platforms. This significant enforcement action marks one of th
Data Governance FrameworksThe enforcement landscape shifted in 2023. The EU General Data Protection Regulation turned five, major enforcement actions hit Big Tech companies, and at least seven US states enacted new data protec
Cryptography & EncryptionYou can process encrypted data without decrypting it. That s the promise of homomorphic encryption , and it changes how you think about compliance architecture. Before deploying it, though, you need t
Privacy RegulationsIn every planning meeting, board presentation, and budget negotiation, privacy compliance is often framed as the enemy of innovation. You ve heard it: We can t move fast if we re buried in consent for
Cryptography & EncryptionYou ve deployed automated tools to map your cryptographic assets. The dashboard shows 87% coverage. Your CBOM report goes to the board next month. You feel prepared. You shouldn t. The real decision i
