When Redactions Un-Redact Themselves: The Cornwall Council GDPR Breach Explained
Cornwall Council exposed the personal data of 10 complainants — including home addresses, emails, and phone numbers — after redacted PDFs automaticall...
Compliance & Regulatory Articles
628 articles on privacy laws, security frameworks, and regulatory compliance.
Ofcom Fines 4chan Under the Online Safety Act — 4chan Responds With a Giant Hamster Named Nigel
Ofcom has issued a Confirmation Decision against 4chan for breaching three sections of the Online Safety Act 2023. 4chan's legal response involved a g...
The Delve Scandal: When Your SOC 2 Report Is Just a Template
A YC-backed compliance startup is accused of mass-producing fraudulent SOC 2, ISO 27001, HIPAA, and GDPR reports for hundreds of clients — and has now...
Spain's AEPD Fines Yoti €950,000 for GDPR Violations in Digital ID App
Spain's data protection authority (AEPD) has imposed a €950,000 fine on UK-based digital identity company Yoti for three distinct GDPR violations rela...
CISA Sounds the Alarm: Microsoft Intune Hardening Directive and Critical ICS/Firewall CVEs Demand Immediate Action
CISA has issued an urgent alert urging organizations to harden Microsoft Intune configurations following the devastating March 2026 cyberattack on med...
The TRUMP AMERICA AI Act: What Compliance Officers Need to Know About the Federal AI Framework That Could Replace State Laws
Senator Marsha Blackburn has released the discussion draft of the TRUMP AMERICA AI Act — a sweeping federal AI regulatory framework that would establi...
Alabama Joins the App Store Age Verification Wave: A Complete State-by-State Compliance Guide
Alabama passes app store age verification law joining Louisiana, Texas, and Utah. Complete compliance guide for app developers and store operators....
Brazil's Radical Age Verification Law: Every Operating System Must Comply or Face $9.5M Fines
Brazil's sweeping age verification law now requires all operating systems — including Linux — to verify user ages. Here's what compliance teams need t...
Data Brokers Under Siege: Vermont's Delete Act, New York's Budget Play, and the Tightening Regulatory Noose
Vermont advances California Delete Act-style requirements for data brokers while New York embeds data broker provisions in budget bills. The regulator...
Privacy Bill Sprint: Alabama's Clock Is Ticking, Kentucky Targets Smart TVs, and Hawaii Bans Eavesdropping Data Sales
Three state privacy bills made significant moves this week. Alabama's comprehensive privacy law faces a tight deadline, Kentucky adds smart TV protect...
Gov. Abbott Cracks Down on Chinese Medical Equipment: Texas Orders Sweeping Cybersecurity Review of CCP-Linked Devices in State Hospitals
Texas Governor Greg Abbott has ordered a comprehensive cybersecurity review of Chinese-manufactured medical equipment in state-owned health facilities...
Laurens County Wires $1.5M to Cyber Criminals: How Business Email Compromise Is Bankrupting Local Government
A South Carolina county paid $1.558 million to criminals impersonating a contractor via fraudulent wire transfer instructions. Analysis of how BEC att...
Showing 12 of 628 articles
Load More →