Browse the full DataRidge library of data protection and governance guidance.
Legal Basis & ConsentThese questions landed in my inbox last week after our team ran a workshop on lawful basis selection. Every one came from a practitioner who d hit the same wall: consent sounds clean on paper, but it
Privacy RegulationsThe European Data Protection Board (EDPB) is becoming increasingly central to your data protection strategy. With the EU s Digital Omnibus package proposing amendments to the GDPR and Anu Talus leadin
Breach & Risk AssessmentA year into mandatory data breach reporting, many organizations are still getting the basics wrong. It s not because the regulations are unclear, GDPR Article 33 and similar frameworks are explicit, b
Privacy RegulationsCalifornia s Delete Request and Opt-Out Platform (DROP) went live on January 1, 2026, with over 215,000 registrants and more than 500 registered data brokers. If your organization operates as a data b
Get weekly security insights and compliance updates delivered to your inbox.
Privacy RegulationsWhen supervisory authorities share case files and coordinate enforcement actions, your compliance gaps become visible across multiple jurisdictions simultaneously. Regulatory enforcement cooperation i
Privacy RegulationsYour legal team approved your tracking implementation six months ago. Since then, plaintiffs attorneys have filed class actions using legal theories that didn t exist when you got sign-off. This is th
Privacy RegulationsThe Challenge When the Global Privacy Enforcement Network (GPEN) conducted a coordinated sweep of mobile applications, the Office of the Privacy Commissioner (OPC) contacted developers whose apps had
Privacy RegulationsThe era of a unified U.S. state privacy law has ended. In 2024, seven states passed new privacy laws, bringing the total to 19. These laws diverged from the Washington State Privacy Act framework that
Privacy RegulationsThe Conventional Wisdom Privacy and legal teams in 2024 have been trying to get ahead of regulatory changes. The goal is to build frameworks before enforcement arrives, anticipate requirements, and st
Privacy RegulationsThe European Commission s proposed delay in regulating high-risk AI systems under the EU AI Act offers a crucial opportunity. For your data governance team, this isn t a chance to relax. It s a deadli
Compliance & MonitoringUnderstanding the Problem This isn t about a single breach. It s about the ongoing failure when privacy controls look good on paper but don t work across your systems. Imagine a customer updates their
Breach & Risk AssessmentWhen your mobile banking platform exposes customer data mid-deployment, you face an immediate decision: roll back the update, suspend the service, or monitor and contain. The wrong choice worsens the
Cryptography & EncryptionThe 2030 federal deadline for post-quantum cryptography isn t just a target. It s a critical shift that will expose every shortcut your team takes now. Many organizations will stumble through this tra
Privacy RegulationsYour team manages data across borders. If India or Vietnam is part of your processing footprint, or on your expansion roadmap, you now face two new compliance regimes with hard deadlines and specific
Breach & Risk AssessmentYour security team just confirmed unauthorized access to customer data. You don t yet know how many records, which fields, or whether the attacker is still in your environment. The clock on your 72-ho
Breach & Risk AssessmentWhat Changed On June 26, Nissan revealed a critical remote code execution flaw in Oracle PeopleSoft, CVE-2026-35273, had been exploited as a zero-day. This breach exposed Social Security numbers, bank
Breach & Risk AssessmentThese questions come from conversations with data governance and privacy teams after Manchester Airports Group disclosed a third-party database breach that exposed about 8.7 million customers details.
Breach & Risk AssessmentScope This guide outlines the technical controls and operational practices needed to prevent credential exposure in client-side JavaScript and secure API endpoints from unauthorized access. It focuses
Breach & Risk AssessmentWhen ShinyHunters demanded approximately $55 million from McKesson Corporation in late August, they exposed more than just stolen data. They highlighted a widespread misunderstanding of third-party ri
Breach & Risk AssessmentThe Conventional Wisdom Ask any healthcare IT security team how they prevent unauthorized data access, and you ll hear the same checklist: role-based access controls, multi-factor authentication, and
