Browse the full DataRidge library of data protection and governance guidance.
Legal Basis & ConsentWhen TikTok and ByteDance agreed to pay up to $400 million to settle Children s Online Privacy Protection Act allegations, it became one of the largest COPPA recoveries on record. The Justice Departme
Cryptography & EncryptionWhen two-thirds of the public doesn t trust the government with encrypted messages, you re not just building a security architecture. You re building a trust architecture. The UK s recent clash betwee
Breach & Risk AssessmentDaVita, operating over 3,000 kidney dialysis centers across the U.S. and 14 other countries, agreed to pay $15 million to settle class action litigation from a 2025 ransomware attack by the Interlock
Breach & Risk AssessmentYour incident response team has brought systems back online. Your communications team has shifted from crisis mode to recovery language. Your board wants to move on. But if you re measuring breach rec
Get weekly security insights and compliance updates delivered to your inbox.
Breach & Risk AssessmentYour security team runs phishing simulations. Your IT department enforces multi-factor authentication. Your policies require password rotation every 90 days. Yet when Apollo Global Management fell vic
Breach & Risk AssessmentThe conventional wisdom says third-party vendors are the weak link in your security chain. After a breach like the one at Manchester Airports Group , where 8.7 million email addresses leaked from a th
Breach & Risk AssessmentWhat Changed Manchester Airports Group refused to pay ransom after hackers accessed contact information, vehicle registrations, and postcodes for 8.7 million customers. The breach primarily affected e
Breach & Risk AssessmentBefore you repurpose customer data for a new product or analytics initiative, you must document why it s lawful. This template guides you through the compatibility assessment required under GDPR Artic
Breach & Risk AssessmentThe Question at Hand When Manchester Airports Group disclosed that customer data from car park bookings, lounge reservations, and Wi-Fi sign-ups had been accessed by an unauthorized party, it sparked
Cryptography & EncryptionThe Question at Hand Your encryption keys protect everything from employee health records to customer payment data. Within the next decade, quantum computers may render those keys worthless. The quest
Breach & Risk AssessmentWhat Happened In August 2026, attackers breached Manchester Airports Group s (MAG) systems, stealing personal information from about 8.7 million customers at Manchester Airport, London Stansted, and E
Breach & Risk AssessmentUnderstanding the Threat Security teams are grappling with the aftermath of McKesson s disclosure of unauthorized access to third-party applications on August 25, 2026. ShinyHunters claims they used v
Privacy RegulationsPrivacy by design isn t just for new projects anymore. You re dealing with systems built before the GDPR existed, before detailed consent tracking, and before automated decision-making became a regula
Data Subject RightsPrivacy officers often hear that machine unlearning is the solution to AI s GDPR problem. The idea is straightforward: when someone exercises their right to be forgotten , you unlearn their data from
Privacy RegulationsThe California Consumer Privacy Act (CCPA) reached its final legislative form on September 6, 2019. Soon after, the California Privacy Rights Act (CPRA) arrived in 2020, creating a critical decision p
Privacy RegulationsThe Challenge In mid-2020, the U.S. faced a familiar roadblock: federal privacy legislation had stalled. The COVID-19 pandemic and social unrest shifted legislative focus, but the real issues were lon
Privacy RegulationsIf you re tracking the SAFE Data Act , you know the stakes: a unified federal standard could replace the state-by-state patchwork your team manages today. The U.S. Senate Committee on Commerce, Scienc
Compliance & MonitoringWhen X Corp. filed its petition to set aside the 2022 FTC settlement order on June 2, 2025, it wasn t just seeking regulatory relief. The company argued that the order no longer applies because every
Breach & Risk AssessmentWhen 500,000 health records appear for sale on a Chinese e-commerce platform, you re past the point where contract terms matter. The UK Biobank incident reveals what happens when your data governance
Cryptography & EncryptionYour encryption strategy just got a deadline. Google s warning about quantum computers potentially breaking current encryption by 2029 has shifted post-quantum cryptography from a future concern to an
