Browse the full DataRidge library of data protection and governance guidance.
Data ClassificationYou re building a rental application form. Your product team wants to add fields for gender, student status, and citizenship. Your real estate clients say it helps them get a complete picture. Your le
Data Governance FrameworksUnderstanding the Challenge The EU-US Data Privacy Framework (DPF) is under its first legal challenge since replacing the invalidated Privacy Shield. Referred to as the Latombe legal challenge, this c
Breach & Risk AssessmentCould your data security program withstand the FTC s scrutiny? The Commission s order against Illuminate Education Inc. offers a clear guide on regulatory expectations. Use this checklist to evaluate
Access ControlNHS England s decision to grant Palantir staff direct access to identifiable patient data highlights significant governance failures. This move contradicts the health service s 2023 assurance that per
Get weekly security insights and compliance updates delivered to your inbox.
Breach & Risk AssessmentThe problem / why this matters now Your customer database is secure behind firewalls and encryption, but what about your third-party vendors? They often have access to the same data, and you don t con
Data QualityConsumer reporting agencies play a crucial role in determining access to housing, credit, and employment. Errors in their data can lead to more than just compliance issues. RentGrow s $2.25 million se
Breach & Risk AssessmentWhen a vendor incident exposes your customer data, your notification script determines whether you maintain trust or face a regulatory investigation. This template provides a structured approach for G
Breach & Risk AssessmentThe Question at Hand When Partnered Health s 21 clinics experienced a breach affecting medical records across Sydney, Melbourne, and Canberra, they obtained an interim injunction from the New South Wa
Breach & Risk AssessmentWhen France s tax authority disclosed a breach affecting roughly 600,000 individuals and businesses, it faced a challenging decision: notifying victims while the investigation was still underway. The
Compliance & MonitoringThe Challenge Your data governance team might face a significant challenge if your current frameworks treat AI systems like any other data processing activity. While you may have GDPR compliance mecha
Breach & Risk AssessmentThe Conventional Wisdom When a major breach makes the news, privacy officers often look to settlement terms for guidance. The 23andMe case is no exception: an $18 million penalty, mandatory risk analy
Breach & Risk AssessmentThe FTC s complaint against Hims Hers highlights a common issue: companies often combine privacy violations with deceptive billing practices, then express surprise when regulators take action. The com
Data ClassificationWhen hackers stole over 740,000 pieces of data from the UK Department for Education and a police database, the response teams faced a challenge not often covered in breach playbooks. The data wasn t h
Breach & Risk AssessmentA UK government agency just handed you a blueprint for what not to do. UK Government Investments left management files and 51 officials contact details exposed for 40 hours because one staff member ig
Breach & Risk AssessmentWhen a database holding the work details of 135,000 police officers and criminal justice professionals gets breached, you re not just looking at a data incident. You re looking at a targeting list for
Breach & Risk AssessmentThe Ceva Logistics breach from July 29 to August 1 wasn t notable for its duration or complexity. What made it significant was the impact: eight warehouses compromised, affecting companies like Valve,
Breach & Risk AssessmentWhen the Criminal Records Office (ACRO) discovered unauthorized access to its Kentico CMS between August 2022 and March 2023, exposing sensitive data on over 10,000 individuals, the ICO s reprimand di
Breach & Risk AssessmentThe Challenge SafePal discovered unauthorized access to customer order information, affecting 39,798 customers who placed orders between March 2, 2025, and April 11, 2026. The breach exposed names, em
Cryptography & EncryptionThese questions came up in our team channel after the ClarityCheck incident hit the news. A digital investigation service left 9,042,977 facial images, 450.2 gigabytes worth, in an unprotected databas
Breach & Risk AssessmentThe question at hand When MAG disclosed that hackers accessed email addresses, phone numbers, vehicle registration numbers, and postcodes from millions of travelers, the company s first reassurance wa
