CDP Institute

If you’re a U.S. business, it’s virtually certain, according to the ISMS.Online State of Information Security report which found 100% of their survey respondents in the US reporting they’d been fined for data breaches or violation of data protection rules. The survey, which polled 1,500 security professionals from the US, as well as the UK and Australia found 38% of respondents said managing third-party and vendor risk was their biggest challenge. Managing compliance come in a close second at 33%.

When sea sponges are violating privacy, it’s bad! California’s Attorney General has agreed to a settlement with Tilting Point Media LLC following an investigation into their mobile game, “SpongeBob: Krusty Cook-Off” that found it violated the California Consumer Privacy Act (CCPA) and the Children’s Online Privacy Protection Act (COPPA). This because the company used an age screen that didn’t ask for age in a “neutral manner,” so encouraged children to enter an older age. The company will pay $500,000 in civil penalties and will be prohibited from selling and sharing... Read More >

Possible you can opt out depending on where you live, but not much protection for US users (who don’t have federal privacy protection – see above).

The attack impacted about 200 federal and regional government agencies.