Browse the full DataRidge library of data protection and governance guidance.
Breach & Risk AssessmentWhen the Criminal Records Office (ACRO) discovered unauthorized access to its Kentico CMS between August 2022 and March 2023, exposing sensitive data on over 10,000 individuals, the ICO s reprimand di
Breach & Risk AssessmentThe Challenge SafePal discovered unauthorized access to customer order information, affecting 39,798 customers who placed orders between March 2, 2025, and April 11, 2026. The breach exposed names, em
Cryptography & EncryptionThese questions came up in our team channel after the ClarityCheck incident hit the news. A digital investigation service left 9,042,977 facial images, 450.2 gigabytes worth, in an unprotected databas
Breach & Risk AssessmentThe question at hand When MAG disclosed that hackers accessed email addresses, phone numbers, vehicle registration numbers, and postcodes from millions of travelers, the company s first reassurance wa
Get weekly security insights and compliance updates delivered to your inbox.
Legal Basis & ConsentWhen TikTok and ByteDance agreed to pay up to $400 million to settle Children s Online Privacy Protection Act allegations, it became one of the largest COPPA recoveries on record. The Justice Departme
Cryptography & EncryptionWhen two-thirds of the public doesn t trust the government with encrypted messages, you re not just building a security architecture. You re building a trust architecture. The UK s recent clash betwee
Breach & Risk AssessmentDaVita, operating over 3,000 kidney dialysis centers across the U.S. and 14 other countries, agreed to pay $15 million to settle class action litigation from a 2025 ransomware attack by the Interlock
Breach & Risk AssessmentYour incident response team has brought systems back online. Your communications team has shifted from crisis mode to recovery language. Your board wants to move on. But if you re measuring breach rec
Breach & Risk AssessmentYour security team runs phishing simulations. Your IT department enforces multi-factor authentication. Your policies require password rotation every 90 days. Yet when Apollo Global Management fell vic
Breach & Risk AssessmentThe conventional wisdom says third-party vendors are the weak link in your security chain. After a breach like the one at Manchester Airports Group , where 8.7 million email addresses leaked from a th
Breach & Risk AssessmentWhat Changed Manchester Airports Group refused to pay ransom after hackers accessed contact information, vehicle registrations, and postcodes for 8.7 million customers. The breach primarily affected e
Breach & Risk AssessmentBefore you repurpose customer data for a new product or analytics initiative, you must document why it s lawful. This template guides you through the compatibility assessment required under GDPR Artic
Breach & Risk AssessmentThe Question at Hand When Manchester Airports Group disclosed that customer data from car park bookings, lounge reservations, and Wi-Fi sign-ups had been accessed by an unauthorized party, it sparked
Cryptography & EncryptionThe Question at Hand Your encryption keys protect everything from employee health records to customer payment data. Within the next decade, quantum computers may render those keys worthless. The quest
Breach & Risk AssessmentWhat Happened In August 2026, attackers breached Manchester Airports Group s (MAG) systems, stealing personal information from about 8.7 million customers at Manchester Airport, London Stansted, and E
Breach & Risk AssessmentUnderstanding the Threat Security teams are grappling with the aftermath of McKesson s disclosure of unauthorized access to third-party applications on August 25, 2026. ShinyHunters claims they used v
Privacy RegulationsPrivacy by design isn t just for new projects anymore. You re dealing with systems built before the GDPR existed, before detailed consent tracking, and before automated decision-making became a regula
Data Subject RightsPrivacy officers often hear that machine unlearning is the solution to AI s GDPR problem. The idea is straightforward: when someone exercises their right to be forgotten , you unlearn their data from
Privacy RegulationsThe California Consumer Privacy Act (CCPA) reached its final legislative form on September 6, 2019. Soon after, the California Privacy Rights Act (CPRA) arrived in 2020, creating a critical decision p
Privacy RegulationsThe Challenge In mid-2020, the U.S. faced a familiar roadblock: federal privacy legislation had stalled. The COVID-19 pandemic and social unrest shifted legislative focus, but the real issues were lon
