Browse the full DataRidge library of data protection and governance guidance.
Privacy RegulationsScope This guide focuses on cross-border data transfer mechanisms facing legal challenges and the compliance gap due to the delayed ePrivacy Regulation. You ll learn how to audit your current transfer
Breach & Risk AssessmentWhat Happened UK organizations are facing a surge in litigation following cyber incidents. Legal teams report increased exposure in three areas: individual personal data claims under data protection l
Breach & Risk AssessmentThe Challenge On August 28, McKesson confirmed unauthorized access to third-party applications serving its Oncology Multispecialty and Medical-Surgical business units. ShinyHunters, the threat actor c
Privacy RegulationsWhat Changed The U.S. remains the only major economy without comprehensive federal privacy legislation. Rep. Suzan DelBene introduced a federal privacy bill in 2021, gaining support from the U.S. Cham
Get weekly security insights and compliance updates delivered to your inbox.
Privacy RegulationsPurpose of This Checklist California s Privacy Rights Act (CPRA) is now in effect, even as final regulations are still pending. You re dealing with an active law, impending enforcement, and the need t
Privacy RegulationsYou can t audit what you haven t mapped. Cross-border data transfers are a key focus of GDPR enforcement, yet many organizations treat transfer mechanisms as a one-time paperwork exercise. With superv
Privacy RegulationsThe Washington Privacy Act returned for a public hearing on January 15, 2020, with bipartisan support and endorsements from several privacy advocates. However, experts Jevan Hutson and Jennifer Lee te
Privacy RegulationsThe ICO s Age Appropriate Design Code isn t limited to social media platforms and gaming companies. If your service collects data online, you re likely covered, even if children aren t your target dem
Privacy RegulationsUnderstanding the Risk Your interaction with a supervisory authority doesn t end with your final response. Under GDPR Article 82 , every data subject whose personal data you ve mishandled can pursue d
International Data TransfersThe invalidation of the EU-U.S. Privacy Shield on July 16, 2020, didn t just eliminate a transfer mechanism. It exposed how many legal and compliance teams had built their cross-border data strategies
Privacy RegulationsThe Conventional Wisdom You ve heard it in every compliance workshop: Build your privacy program with enough runway. Map your data flows, document your processing activities, train your teams, and imp
Compliance & MonitoringThe Challenge In 2018, a real estate developer named Alastair Mactaggart, with no legislative background, managed to push the California Consumer Privacy Act through a ballot initiative. Two years lat
Privacy RegulationsThe Legislative Wave In early 2021, six U.S. states, Washington, Connecticut, Minnesota, New York, Oklahoma, and Virginia, introduced comprehensive privacy legislation almost simultaneously. Each stat
Privacy RegulationsPrivacy commissioners don t just enforce regulations; they shape them. When the Office of the Privacy Commissioner of Canada issued its preliminary reaction to Bill C-30, it opened a formal consultati
Breach & Risk AssessmentThe Privacy Commissioner s investigation into Human Resources and Skills Development Canada s breach of student loan recipient information follows a familiar pattern: a sensitive data exposure, regula
International Data TransfersThe Schrems II decision left you with a choice: patch your existing transfer mechanisms with supplementary measures , wait for a new adequacy decision , or explore alternative frameworks. Now, a third
Legal Basis & ConsentThe question at hand You re redesigning your consent mechanism. Engineering wants a streamlined experience with minimal clicks. Legal wants clear, granular choices. Your product manager argues that fr
International Data TransfersThese questions keep landing in legal team Slack channels, compliance officer inboxes, and DPO office hours. They re coming from product teams launching new features, procurement officers vetting SaaS
Privacy RegulationsThe Ohio Personal Privacy Act (OPPA) introduces a unique feature not found in Virginia, Colorado, or Connecticut: a safe harbor for businesses that conform to the NIST Privacy Framework . This isn t j
Privacy RegulationsWhat Happened In August 2021, Amazon was hit with an $888 million fine for GDPR violations. This penalty highlighted a growing trend where data protection enforcement intersects with competition regul
