#personal data

[ follow ]
#personal-data

FTC Order Will Require Blackbaud to Delete Unnecessary Data, Boost Safeguards to Settle Charges its Lax Security Practices Led to Data Breach

Blackbaud Inc. has reached a settlement with the FTC over charges of lax security that allowed hackers to access personal data.
As part of the settlement, Blackbaud will delete unnecessary personal data, develop an information security program, and notify the FTC of any future data breaches.

Toyota cars collecting and potentially sharing location data and personal information, Choice says

Smart technologies in Toyota cars are collecting personal data and potentially sharing it with insurance companies.
Choice found that Toyota's Connected Services feature collects information such as vehicle location, driving data, and phone numbers and email addresses.

Law firm that handles data breaches was hit by data breach | TechCrunch

Law firm Orrick, Herrington & Sutcliffe experienced a cyberattack that exposed sensitive health information of over 637k data breach victims.
The stolen data includes personal information, health data, online account credentials, and data from other companies that Orrick served as legal counsel during security incidents.

Opinion | What Does True Consent Look Like for Consumers?

Implied vs. express consent in various scenarios
Debates around consent in different spheres of life

FTC Fires Warning Shot At Surveillance Pricing

FTC takes action against surveillance pricing in digital advertising.

NSA finally admits to spying on Americans by purchasing sensitive data

The NSA has admitted to buying records from data brokers detailing Americans' website and app usage.
Senator Ron Wyden is calling on intelligence agencies to stop buying illegally obtained personal data from data brokers.

FTC Order Will Require Blackbaud to Delete Unnecessary Data, Boost Safeguards to Settle Charges its Lax Security Practices Led to Data Breach

Blackbaud Inc. has reached a settlement with the FTC over charges of lax security that allowed hackers to access personal data.
As part of the settlement, Blackbaud will delete unnecessary personal data, develop an information security program, and notify the FTC of any future data breaches.

Toyota cars collecting and potentially sharing location data and personal information, Choice says

Smart technologies in Toyota cars are collecting personal data and potentially sharing it with insurance companies.
Choice found that Toyota's Connected Services feature collects information such as vehicle location, driving data, and phone numbers and email addresses.

Law firm that handles data breaches was hit by data breach | TechCrunch

Law firm Orrick, Herrington & Sutcliffe experienced a cyberattack that exposed sensitive health information of over 637k data breach victims.
The stolen data includes personal information, health data, online account credentials, and data from other companies that Orrick served as legal counsel during security incidents.

Opinion | What Does True Consent Look Like for Consumers?

Implied vs. express consent in various scenarios
Debates around consent in different spheres of life

FTC Fires Warning Shot At Surveillance Pricing

FTC takes action against surveillance pricing in digital advertising.

NSA finally admits to spying on Americans by purchasing sensitive data

The NSA has admitted to buying records from data brokers detailing Americans' website and app usage.
Senator Ron Wyden is calling on intelligence agencies to stop buying illegally obtained personal data from data brokers.
morepersonal-data

Breach impacts European Parliament recruitment data

PEOPLE, the European Parliament's recruitment tool, suffered a data breach affecting temporary staff members.

Iceland's DPA to prioritize monitoring personal data processing

Iceland's data protection authority will monitor the processing of personal data in 2024.
Health technology, insurance companies, and financial software will be observed for data protection.

UK app developers issued warning amid concerns over user privacy

Developers need to make changes to protect personal data
Developers need to keep users informed

Global data protection authorities plan privacy investigation

Global Privacy Enforcement Network investigation of websites with deceptive design models
Clarity of texts and design of interfaces will be judged to see if they are influencing harmful choices with personal data.

Belgium's DPA fines data management company

Belgium's Data Protection Authority has fined Black Tiger Belgium 174,640 euros for violating data protection regulations.
Black Tiger Belgium was found to not be transparent about its data processing of personal data.

Garante releases guidance fitness tracker privacy

Users should disable unnecessary tracking options
Regularly deleting data and enabling multifactor authentication are recommended

Garante releases guidance fitness tracker privacy

Users should disable unnecessary tracking options
Regularly deleting data and enabling multifactor authentication are recommended
@JamesJalaPayneo highlighted
from Therecord
11 months ago
Privacy professionals

Your car is probably harvesting your data. Here's how you can wipe it

Amico is the founder and CEO of Privacy4Cars, the outfit behind a free app that lets individuals erase the astonishing amount of personal data - including text messages, biometrics and geolocation - that many automakers collect, store and often share with law enforcement, insurers and even data brokers.
...
Last month a Seattle-based federal judge declined to revive a class action lawsuit alleging four auto manufacturers had broken Washington state privacy laws by gathering and storing customers' private text messages and mobile phone call logs.
...
The judge ruled the practice did not meet the threshold for an illegal privacy violation under state law, which requires plaintiffs prove that "his or her business, his or her person, or his or her reputation" has been threatened by the harvesting of private data.

Your car is probably harvesting your data. Here's how you can wipe it

Andrea Amico created Privacy4Cars, a free app that helps individuals erase personal data collected by automakers
The app allows consumers to pull a full report on the data their car is collecting using the vehicle identification number.
#Privacy4Cars

Your car is probably harvesting your data. Here's how you can wipe it

Andrea Amico created Privacy4Cars, a free app that helps individuals erase personal data collected by automakers
The app allows consumers to pull a full report on the data their car is collecting using the vehicle identification number.

Your car is probably harvesting your data. Here's how you can wipe it

Andrea Amico created Privacy4Cars, a free app that helps individuals erase personal data collected by automakers
The app allows consumers to pull a full report on the data their car is collecting using the vehicle identification number.

Your car is probably harvesting your data. Here's how you can wipe it

Andrea Amico created Privacy4Cars, a free app that helps individuals erase personal data collected by automakers
The app allows consumers to pull a full report on the data their car is collecting using the vehicle identification number.

Your car is probably harvesting your data. Here's how you can wipe it

Andrea Amico created Privacy4Cars, a free app that helps individuals erase personal data collected by automakers
The app allows consumers to pull a full report on the data their car is collecting using the vehicle identification number.
morePrivacy4Cars
SuzanneMSmalley11 months ago
Cars collect an astonishing amount of data ranging from retina scans to text messages' contents (unencrypted!) But Privacy4Cars offers an easy way to wipe data retroactively via a free app and also check your vehicle to find out what data your car (1/2)
https://t.co/Hw3zP4TMFQ

Your car is probably harvesting your data. Here's how you can wipe it

Andrea Amico created Privacy4Cars, a free app that helps individuals erase personal data collected by automakers
The app allows consumers to pull a full report on the data their car is collecting using the vehicle identification number.
#data breach

Line operator says 440,000 personal records leaked in data breach

LY Corp. reported a massive data breach that affected up to 440,000 items of personal data, including over 300,000 linked to Line messaging app users.
The leaked data did not include sensitive information such as bank accounts, credit cards, or chat messages.
The breach was caused by malware infecting a subcontractor's computer owned by LY Corp.'s South Korea-based affiliate.

Welltok data breach exposes data of 8.5 million US patients

Healthcare SaaS provider Welltok experienced a data breach exposing the personal data of nearly 8.5 million patients in the U.S.
The breach was caused by a hack of the company's file transfer program.

Welltok data breach exposes data of 8.5 million US patients

Healthcare SaaS provider Welltok experienced a data breach exposing the personal data of nearly 8.5 million patients in the U.S.
The breach was caused by a hack of the company's file transfer program.

The 23andMe Data Breach Keeps Spiraling

Genetic testing company 23andMe has revealed more details about a data breach that occurred in October, but the situation remains unclear and creates uncertainty for users.
Hackers were able to access a small percentage of user accounts, approximately 14,000, but the number doesn't include those impacted by data scraping from the company's social sharing service.
The attackers collected the personal data of about 5.5 million people who opted into DNA Relatives and an additional 1.4 million users who had their Family Tree profile information accessed.

Line operator says 440,000 personal records leaked in data breach

LY Corp. reported a massive data breach that affected up to 440,000 items of personal data, including over 300,000 linked to Line messaging app users.
The leaked data did not include sensitive information such as bank accounts, credit cards, or chat messages.
The breach was caused by malware infecting a subcontractor's computer owned by LY Corp.'s South Korea-based affiliate.

Welltok data breach exposes data of 8.5 million US patients

Healthcare SaaS provider Welltok experienced a data breach exposing the personal data of nearly 8.5 million patients in the U.S.
The breach was caused by a hack of the company's file transfer program.

Welltok data breach exposes data of 8.5 million US patients

Healthcare SaaS provider Welltok experienced a data breach exposing the personal data of nearly 8.5 million patients in the U.S.
The breach was caused by a hack of the company's file transfer program.

The 23andMe Data Breach Keeps Spiraling

Genetic testing company 23andMe has revealed more details about a data breach that occurred in October, but the situation remains unclear and creates uncertainty for users.
Hackers were able to access a small percentage of user accounts, approximately 14,000, but the number doesn't include those impacted by data scraping from the company's social sharing service.
The attackers collected the personal data of about 5.5 million people who opted into DNA Relatives and an additional 1.4 million users who had their Family Tree profile information accessed.
moredata breach

Genetic testing firm 23andMe admits hackers accessed DNA data of 7m users

Nearly 7 million people have been affected by a security breach at 23andMe that exposed DNA ancestry information.
Hackers accessed personal data of 0.1% of customers, but also had access to files containing profile information of other users.

Genetic testing firm 23andMe admits hackers accessed DNA data of 7m users

Nearly 7 million people have been affected by a security breach at 23andMe that exposed DNA ancestry information.
Hackers accessed personal data of 0.1% of customers, but also had access to files containing profile information of other users.

Genetic testing firm 23andMe admits hackers accessed DNA data of 7m users

Nearly 7 million people have been affected by a security breach at 23andMe that exposed DNA ancestry information.
Hackers accessed personal data of 0.1% of customers, but also had access to files containing profile information of other users.

Navigating the DPDI Bill: A transformative shift ahead | Computer Weekly

The DPDI Bill aims to reshape the UK's data protection framework by proposing changes to laws like the UK GDPR and DPA 2018.
Key amendments include redefining 'personal data', expanding the scope of 'scientific research', and pre-approving instances for streamlined processing of legitimate interests.
Other changes address new purposes for data, guidance for handling vexatious requests, and safeguards for automated processing decisions.
futureofprivacy1 year ago
????GDPR's Article 25 introduced a relatively novel obligation for controllers: data protection by design and by default.

Our team in Europe analyzed various cases & guidelines from 16 EEA Member States, the UK, & the @EU_EDPB as it relates to #Article25. https://t.co/XuG7AmwayQ

New FPF Report: Unlocking Data Protection by Design and by Default: Lessons from the Enforcement of Article 25 GDPR - Future of Privacy Forum

1. Data protection by design and by default is an important part of GDPR compliance, and understanding Article 25’s requirements is key to implementing such measures.
2. Recent enforcement actions by EU data protection authorities provide valuable lessons on how data controllers should go about meeting their obligations under Article 25.
futureofprivacy1 year ago
We looked at 92+ cases & guidelines to analyze enforcement trends regarding #Article25 #DataProtectionByDesign under the #GDPR. These cases involve varying degrees of complexity in the processing of personal data, from mundane to cutting-edge technology. https://t.co/XuG7AmwayQ

New FPF Report: Unlocking Data Protection by Design and by Default: Lessons from the Enforcement of Article 25 GDPR - Future of Privacy Forum

1. Data protection by design and by default is an important part of GDPR compliance, and understanding Article 25’s requirements is key to implementing such measures.
2. Recent enforcement actions by EU data protection authorities provide valuable lessons on how data controllers should go about meeting their obligations under Article 25.
futureofprivacy1 year ago
#ICYMI: Identify divergent enforcement trends, particularly in how #DPAs interpret the preventive nature of #dataprotection by design and by default, as well as its interrelation with privacy enhancing technologies, in this #FPFGlobal???? Report. https://t.co/XuG7AmwayQ

New FPF Report: Unlocking Data Protection by Design and by Default: Lessons from the Enforcement of Article 25 GDPR - Future of Privacy Forum

1. Data protection by design and by default is an important part of GDPR compliance, and understanding Article 25’s requirements is key to implementing such measures.
2. Recent enforcement actions by EU data protection authorities provide valuable lessons on how data controllers should go about meeting their obligations under Article 25.
[ Load more ]