CDP Institute

A security team at vpnMentor discovered that an Elasticsearch database containing 126 million records had been left open, unsecured and exposed to internet access. The open records contained detailed personal data ranging from job information to home IP addresses.

Nigeria announced a mandate that citizens must link their mobile numbers to a national ID number by October 31, 2021 or risk being blocked from telecommunication services. Citizens and rights groups are objecting to this and to the country’s national ID enrollment due to fears that Nigeria’s lack of data privacy laws will leave data exposed to abuse.

Prepare to purchase goods with a wave of your hand at Amazon’s checkout-free stores! Now, palm-scanning hardware makes it easy for Amazon to capture every detail of your hand and then let a simple palm-signature swoosh buy goods, while helpfully providing data about your shopping history. You can also look forward to receiving targeted ads, offers & recommendations…like it or not.

Leaked documents have revealed that Google fired dozens of employees between 2018 and 2020 for company data misuse, including leaking, stealing, or abusing data of users or other employees. Facebook, meanwhile, has been called out by the Federal Trade Commission (FTC) for making misleading claims on why it cut off the accounts of ad researchers from New York University who were studying political ad use on the platform. Read More – Google Read More – Facebook

The class action against YouTube, Hasbro and others for alleged children’s privacy abuses has been dismissed because the plaintiffs’ lawyers opted not to refile. The case could now go to appellate court.

Following an assessment that found dynamically served ads were promoting gambling and other age-restricted products to children, the UK Advertising Standards Authority (ASA) has recommended better use of targeting tools. ASA’s analysis focused on problems with non-logged in websites and YouTube channels with mixed-age audiences.

The platform detects and blocks identity fraud.

The new vault is offered as cloud API and designed to protect personal privacy.

Plaid was accused of collecting and using consumers’ banking login credentials and then making transaction data available to third parties without proper notice or consent.

Questions are being raised about how much data would be collected and the extent to which location tracking would be involved.

Luxembourg’s data protection authority has charged Amazon €746 million ($888 million) for violating EU GDPR data protection rules. Amazon, which is also under scrutiny in Europe for antitrust, claims this is ‘without merit,’ and plans to appeal.

Despite denying wrongdoing, Zoom has agreed to pay $86 million to settle a US class action alleging it violated privacy by sharing personal data of millions of its users with Facebook, Google and LinkedIn. It was also blamed for misrepresenting its security encryption and not stopping hackers from “zoombombing.”