Data breach or legal news about data protection and data breaches in the EU.
A recent press release from the Dutch DPA (Autoriteit Persoonsgegevens) emphasizes that Dutch organizations need to do better in providing breach victims with timely information that they need to protect themselves. If the Dutch DPA thinks warnings or alerts sent to victims more than three weeks after a breach is “way too slow,” The Data […]
Datatilsynet is Norway’s Data Protection Authority. Inspection of its website indicates that it has not imposed many monetary penalties in recent years for violations of the Personal Data Act 2000. After 2021, in which it reported 37 actions, it issued only 12 reports in 2023, and only 7 so far in 2024. Here are two […]
TechCrunch reports: Reset your clocks: Meta has been hit with yet another privacy penalty in Europe. On Friday, Ireland’s Data Protection Commission (DPC) announced a reprimand and a €91 million fine — around $101.5 million at current exchange rates — after concluding a multiyear investigation into a 2019 security breach by Facebook’s parent company. […] After investigating, […]
Europol appears to have confirmed a breach first claimed by the threat actor known as IntelBroker, a moderator on BreachForums. IntelBroker’s listing, which was subsequently marked as “SOLD,” claimed to have breached Europol in May of this year, resulting in the exposure of “For Official Use Only” (FOUO) and classified data. The compromised data allegedly […]
The Information Commissioner’s Office has published new data protection fining guidance setting out how it decides to issue penalties and calculate fines. The guidance provides greater transparency for organizations about how the ICO goes about using its fining power. Tim Capel, ICO Director of Legal Service, said: “We believe the guidance will provide certainty and clarity for […]
The Independent reports: China has been accused of a “malign” cyberattack on Britain after it allegedly accessed millions of voters’ personal details during a hack on the election watchdog. The UK is poised to sanction those believed to be involved in Chinese state-backed interference, after deputy prime minister Oliver Dowden sets out details about the alleged incident later on […]
On March 14, 2024, the Court of Justice of the EU (“CJEU”) ruled that EU supervisory authorities have the (corrective) power to order data controllers who have been found to process personal data unlawfully to erase such personal data, even if the data subjects have not requested the erasure. (Case C‑46/23) The CJEU ruled that […]
A December 8 press release from Interpol begins: Read more at INTERPOL.
Inside Privacy writes: Read more at Inside Privacy.
The Telegraph reports: GCHQ is investigating a cyber attack on the London private hospital favoured by the Royal family. The spy agency’s National Cyber Security Centre (NCSC) is probing what King Edward VII’s Hospital described as “an IT security incident” during which a “third-party” obtained confidential medical information such as doctors’ letters and pathology reports relating to some patients. The […]
