The EU Parliament and Council reach agreement on the Cyber Resilience Act, paving the way for passage. The proposed law, considered a first-of-its-kind, will require manufacturers of IoT devices to report serious breaches and conduct risk assessments of their products along with informing customers of unpatched vulnerabilities.
Our most intimate data is shared with healthcare providers and services, so when a breach happens there as it did with Blue Shield of California, people are particularly vulnerable. This breach at one of the state’s largest providers potentially impacts the data of 4.5 million patients and can give access to very sensitive information, including social security numbers, information on family, and where you live as well as medical and insurance data.
Ofcom, the UK’s internet regulator, has issued a draft guidance for porn sites to meet a new legal requirement to prevent children from accessing adult content. The guidance offers a range of options including signing into Open Banking, uploading a copy of their passport with a live selfie to match against, letting the system estimate their age based on a webcam view of their face, and providing credit card details.
CDP mParticle is being acquired by ecommerce platform Rokt for a price of $300 million. It’s the third acquisition of a leading independent CDP in a little over one month, following Uniphore’s purchase of ActionIQ and Contentstack’s purchase of Lytics. All three buyers offer some type of customer-facing technology; apparently they’ve decided that adding real-time profiles from CDP will give them a competitive edge. (See this blog post for more analysis.)