CDP Institute

Seventy-page guide covers activities, controls, and documentation companies should implement, and has information on how GDPR and other laws align to each other.

The Securities and Exchange Commission announced that Pearson has agreed to pay $1 million to settle charges that it tried to hide and downplay a 2018 data breach that led to the theft of student data and administrator log-in credentials of 13,000 school, district and university customer accounts in the United States.

Apple is expected to introduce a “neural matching” tool to detect if iPhone photo images match child sexual abuse records, according to a security expert at Johns Hopkins Security Institute. There are several concerns, including that this would set precedent that systems can be allowed to scan phones for prohibited content.

A security team at vpnMentor discovered that an Elasticsearch database containing 126 million records had been left open, unsecured and exposed to internet access. The open records contained detailed personal data ranging from job information to home IP addresses.

Nigeria announced a mandate that citizens must link their mobile numbers to a national ID number by October 31, 2021 or risk being blocked from telecommunication services. Citizens and rights groups are objecting to this and to the country’s national ID enrollment due to fears that Nigeria’s lack of data privacy laws will leave data exposed to abuse.

Prepare to purchase goods with a wave of your hand at Amazon’s checkout-free stores! Now, palm-scanning hardware makes it easy for Amazon to capture every detail of your hand and then let a simple palm-signature swoosh buy goods, while helpfully providing data about your shopping history. You can also look forward to receiving targeted ads, offers & recommendations…like it or not.

Leaked documents have revealed that Google fired dozens of employees between 2018 and 2020 for company data misuse, including leaking, stealing, or abusing data of users or other employees. Facebook, meanwhile, has been called out by the Federal Trade Commission (FTC) for making misleading claims on why it cut off the accounts of ad researchers from New York University who were studying political ad use on the platform. Read More – Google Read More – Facebook

The class action against YouTube, Hasbro and others for alleged children’s privacy abuses has been dismissed because the plaintiffs’ lawyers opted not to refile. The case could now go to appellate court.

Following an assessment that found dynamically served ads were promoting gambling and other age-restricted products to children, the UK Advertising Standards Authority (ASA) has recommended better use of targeting tools. ASA’s analysis focused on problems with non-logged in websites and YouTube channels with mixed-age audiences.

The platform detects and blocks identity fraud.

The new vault is offered as cloud API and designed to protect personal privacy.

Plaid was accused of collecting and using consumers’ banking login credentials and then making transaction data available to third parties without proper notice or consent.