Browse the full DataRidge library of data protection and governance guidance.
Breach & Risk AssessmentThe Conventional Wisdom Ask any healthcare IT security team how they prevent unauthorized data access, and you ll hear the same checklist: role-based access controls, multi-factor authentication, and
Breach & Risk AssessmentCould your data security program withstand the FTC s scrutiny? The Commission s order against Illuminate Education Inc. offers a clear guide on regulatory expectations. Use this checklist to evaluate
Breach & Risk AssessmentThe problem / why this matters now Your customer database is secure behind firewalls and encryption, but what about your third-party vendors? They often have access to the same data, and you don t con
Breach & Risk AssessmentWhen a vendor incident exposes your customer data, your notification script determines whether you maintain trust or face a regulatory investigation. This template provides a structured approach for G
Get weekly security insights and compliance updates delivered to your inbox.
Breach & Risk AssessmentThe Question at Hand When Partnered Health s 21 clinics experienced a breach affecting medical records across Sydney, Melbourne, and Canberra, they obtained an interim injunction from the New South Wa
Breach & Risk AssessmentWhen France s tax authority disclosed a breach affecting roughly 600,000 individuals and businesses, it faced a challenging decision: notifying victims while the investigation was still underway. The
Breach & Risk AssessmentThe Conventional Wisdom When a major breach makes the news, privacy officers often look to settlement terms for guidance. The 23andMe case is no exception: an $18 million penalty, mandatory risk analy
Breach & Risk AssessmentThe FTC s complaint against Hims Hers highlights a common issue: companies often combine privacy violations with deceptive billing practices, then express surprise when regulators take action. The com
Breach & Risk AssessmentA UK government agency just handed you a blueprint for what not to do. UK Government Investments left management files and 51 officials contact details exposed for 40 hours because one staff member ig
Breach & Risk AssessmentWhen a database holding the work details of 135,000 police officers and criminal justice professionals gets breached, you re not just looking at a data incident. You re looking at a targeting list for
Breach & Risk AssessmentThe Ceva Logistics breach from July 29 to August 1 wasn t notable for its duration or complexity. What made it significant was the impact: eight warehouses compromised, affecting companies like Valve,
Breach & Risk AssessmentWhen the Criminal Records Office (ACRO) discovered unauthorized access to its Kentico CMS between August 2022 and March 2023, exposing sensitive data on over 10,000 individuals, the ICO s reprimand di
Breach & Risk AssessmentThe Challenge SafePal discovered unauthorized access to customer order information, affecting 39,798 customers who placed orders between March 2, 2025, and April 11, 2026. The breach exposed names, em
Breach & Risk AssessmentThe question at hand When MAG disclosed that hackers accessed email addresses, phone numbers, vehicle registration numbers, and postcodes from millions of travelers, the company s first reassurance wa
Breach & Risk AssessmentDaVita, operating over 3,000 kidney dialysis centers across the U.S. and 14 other countries, agreed to pay $15 million to settle class action litigation from a 2025 ransomware attack by the Interlock
Breach & Risk AssessmentYour incident response team has brought systems back online. Your communications team has shifted from crisis mode to recovery language. Your board wants to move on. But if you re measuring breach rec
Breach & Risk AssessmentYour security team runs phishing simulations. Your IT department enforces multi-factor authentication. Your policies require password rotation every 90 days. Yet when Apollo Global Management fell vic
Breach & Risk AssessmentThe conventional wisdom says third-party vendors are the weak link in your security chain. After a breach like the one at Manchester Airports Group , where 8.7 million email addresses leaked from a th
Breach & Risk AssessmentWhat Changed Manchester Airports Group refused to pay ransom after hackers accessed contact information, vehicle registrations, and postcodes for 8.7 million customers. The breach primarily affected e
Breach & Risk AssessmentBefore you repurpose customer data for a new product or analytics initiative, you must document why it s lawful. This template guides you through the compatibility assessment required under GDPR Artic
