The US Attorney’s Office of the Northern District of California published the press release that it entered in a non-prosecution agreement with Uber, which has admitted to concealing a massive data breach from six years ago. Uber settled any civil liability for USD 148m for all 50 States. As a result of the breach which...
“Human factors always play a significant role in data breaches.” These simple but wise words resonated in our review of a recent investigation report published by the Privacy Commissioner in Hong Kong on 13 June 2022 regarding the loss of physical files containing sensitive personal data by Town Health Medical & Dental Services Limited (“Town...
A release of the US Department of Justice reports that the US and UK intend to bring into force the Agreement on Access to Electronic Data for the Purpose of Countering Serious Crime (“Data Access Agreement”), which was signed in 2019, on Oct. 3, 2022. It will be the first agreement of its kind, allowing...
Aljazeera reports that the Cyberspace Administration of China (CAC) has fined Didi with about USD 1.2bn for “egregious” violations of data security rules, since it found that it had illegally collected customer information since 2015 and handled data in a way that endangered national security. Among the breaches sanctioned by CAC are illegal storage of...
The US National Institute of Standards and Technology (NIST) has updated its cybersecurity guidance for the health care industry, with the purpose of helping health care organizations protect patients’ personal health information. The new report is titled Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide and focuses on issues...
The Constitutional Court of South Korea has unanimously ruled as unconstitutional the law that authorized mobile carriers to share personal data with law enforcement agencies without notifying the user. The court also ruled that the law violates the right to self-determination of personal information. Earlier, the South Korean’s Telecommunications Business Act allowed mobile carriers to...
The Indian Government has reported that the Indian Computer Emergency Response Team (CERT-In) has accounted more than 670 thousand data breaches since the beginning of 2022. Since 2019, the cyber incidents trend has been on a steady increase rising concerns over the awareness and preparedness of Indian entities against this phenomenon. Read more on the...
American Headquarters:
PrivacyRules Ltd.
151 West 4th Street
Suite 200
Cincinnati, OH 45202, USA
European Office:
Via dei Della Robbia 112
50132, Firenze
Italy (IT)
