Browse the full DataRidge library of data protection and governance guidance.
Breach & Risk AssessmentScope This guide outlines the technical controls and operational practices needed to prevent credential exposure in client-side JavaScript and secure API endpoints from unauthorized access. It focuses
Breach & Risk AssessmentWhen ShinyHunters demanded approximately $55 million from McKesson Corporation in late August, they exposed more than just stolen data. They highlighted a widespread misunderstanding of third-party ri
Breach & Risk AssessmentThe Conventional Wisdom Ask any healthcare IT security team how they prevent unauthorized data access, and you ll hear the same checklist: role-based access controls, multi-factor authentication, and
Data ClassificationYou re building a rental application form. Your product team wants to add fields for gender, student status, and citizenship. Your real estate clients say it helps them get a complete picture. Your le
Get weekly security insights and compliance updates delivered to your inbox.
Data Governance FrameworksUnderstanding the Challenge The EU-US Data Privacy Framework (DPF) is under its first legal challenge since replacing the invalidated Privacy Shield. Referred to as the Latombe legal challenge, this c
Breach & Risk AssessmentCould your data security program withstand the FTC s scrutiny? The Commission s order against Illuminate Education Inc. offers a clear guide on regulatory expectations. Use this checklist to evaluate
Access ControlNHS England s decision to grant Palantir staff direct access to identifiable patient data highlights significant governance failures. This move contradicts the health service s 2023 assurance that per
Breach & Risk AssessmentThe problem / why this matters now Your customer database is secure behind firewalls and encryption, but what about your third-party vendors? They often have access to the same data, and you don t con
Data QualityConsumer reporting agencies play a crucial role in determining access to housing, credit, and employment. Errors in their data can lead to more than just compliance issues. RentGrow s $2.25 million se
Breach & Risk AssessmentWhen a vendor incident exposes your customer data, your notification script determines whether you maintain trust or face a regulatory investigation. This template provides a structured approach for G
Breach & Risk AssessmentThe Question at Hand When Partnered Health s 21 clinics experienced a breach affecting medical records across Sydney, Melbourne, and Canberra, they obtained an interim injunction from the New South Wa
Breach & Risk AssessmentWhen France s tax authority disclosed a breach affecting roughly 600,000 individuals and businesses, it faced a challenging decision: notifying victims while the investigation was still underway. The
Compliance & MonitoringThe Challenge Your data governance team might face a significant challenge if your current frameworks treat AI systems like any other data processing activity. While you may have GDPR compliance mecha
Breach & Risk AssessmentThe Conventional Wisdom When a major breach makes the news, privacy officers often look to settlement terms for guidance. The 23andMe case is no exception: an $18 million penalty, mandatory risk analy
Breach & Risk AssessmentThe FTC s complaint against Hims Hers highlights a common issue: companies often combine privacy violations with deceptive billing practices, then express surprise when regulators take action. The com
Data ClassificationWhen hackers stole over 740,000 pieces of data from the UK Department for Education and a police database, the response teams faced a challenge not often covered in breach playbooks. The data wasn t h
Breach & Risk AssessmentA UK government agency just handed you a blueprint for what not to do. UK Government Investments left management files and 51 officials contact details exposed for 40 hours because one staff member ig
Breach & Risk AssessmentWhen a database holding the work details of 135,000 police officers and criminal justice professionals gets breached, you re not just looking at a data incident. You re looking at a targeting list for
Breach & Risk AssessmentThe Ceva Logistics breach from July 29 to August 1 wasn t notable for its duration or complexity. What made it significant was the impact: eight warehouses compromised, affecting companies like Valve,
Breach & Risk AssessmentWhen the Criminal Records Office (ACRO) discovered unauthorized access to its Kentico CMS between August 2022 and March 2023, exposing sensitive data on over 10,000 individuals, the ICO s reprimand di
