Security News

Dutch Regulator Fines Uber €290 Million for GDPR Violations in Data Transfers to U.S.
2024-08-26 14:23

The Dutch Data Protection Authority (DPA) has fined Uber a record €290 million ($324 million) for allegedly failing to comply with European Union (E.U.) data protection standards when sending...

Regulators are coming for IoT device security
2024-05-09 05:00

Cybersecurity is a relatively new challenge for many IoT device makers who have traditionally produced non-connected devices. IoT devices are built on a foundation of insecure software-a large portion of the open-source software and the chips used to build devices are poorly secured.

Google cools on cookie phase-out while regulators chew on plans
2024-04-24 14:31

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Home improvement marketers dial up trouble from regulator
2024-01-17 09:30

Another week and yet another couple of pesky cold callers face fines from the UK's data privacy watchdog for "Bombarding" unsuspecting households with marketing messages about home improvements. Poxell, which specializes in energy saving products including double glazing and resin driveways, is being penalized to the tune of £150,000 by the Information Commissioner's Office for making 2.6 million marketing calls between March and July 2022, resulting in 413 complaints to the data regulator.

Data regulator fines HelloFresh £140k for sending 80M+ spams
2024-01-12 11:27

Food delivery company HelloFresh is nursing a £140,000 fine by Britain's data privacy watchdog after a probe found it had dispatched upwards of a staggering 79 million spam email and one million texts in just seven months. The Information Commissioner's Office says the company claimed messages were based on an opt-in statement, yet this statement did not include any reference to the sending of marketing messages via text.

Regulator says stranger entered hospital, treated a patient, took a document ... then vanished
2023-12-01 10:15

NHS Fife is on the wrong end of a stern ticking off by Britain's data regulator after it made a howling privacy error that aided an as yet unknown person who had entered a hospital ward only to walk off with data on 14 patients. Due to a "Lack of checks and formal processes" the unauthorized individual who was not employed by the health service was "Handed" a document containing the personal data of 14 patients, and even helped administer care to one, the ICO investigation found.

Dirty dancing grabs the attention of China's cyberspace regulators
2023-11-02 02:45

China's Cyberspace Administration has punished Alibaba-owned search engine Quark and livestreaming platform NetEase for content it deemed vulgar. Quark was fined ¥500,000 and NetEase was required to suspend updates on a channel specializing in dancing content for seven days.

Regulator, insurers and customers all coming for Progress after MOVEit breach
2023-10-16 02:58

Infosec in brief The fallout from the exploitation of bugs in Progress Software's MOVEit file transfer software continues, with the US Securities and Exchange Commission now investigating the matter, and lots of affected parties seeking compensation. Per the disclosure, it received a subpoena from the SEC on October 2, in which the Commission asked for "Various documents and information relating to the MOVEit Vulnerability."

E.U. Regulators Hit Meta with Record $1.3 Billion Fine for Data Transfer Violations
2023-05-22 17:48

Facebook's parent company Meta has been fined a record $1.3 billion by European Union data protection regulators for transferring the personal data of users in the region to the U.S. In a binding decision taken by the European Data Protection Board, the social media giant has been ordered to bring its data transfers into compliance with the GDPR and delete unlawfully stored and processed data within six months. Meta has been given five months to suspend any future transfer of Facebook users' data to the U.S. Instagram and WhatsApp, which are also owned by the company, are not subject to the order.

TikTok Fined $5.4 Million by French Regulator for Violating Cookie Laws
2023-01-14 05:01

Popular short-form video hosting service TikTok has been fined €5 million by the French data protection watchdog for breaking cookie consent rules, making it the latest platform to face similar penalties after Amazon, Google, Meta, and Microsoft since 2020. The regulator said it conducted several audits between May 2020 and June 2022, finding that the ByteDance-owned company did not offer a straightforward option to refuse all cookies as opposed to just one click for accepting them.