Remove tag protected-health-information-2
article thumbnail

$10,000,000 civil penalty for disclosing personal data without consent

Data Protection Report

On April 15, 2024, the U.S. As part of the order, the company agreed to post “clearly and conspicuously” on its websites and apps for the next two years: Between October 2019 and [date], we shared the personal of information of consumers visiting our website and apps with other companies without their permission.

article thumbnail

The Week in Cyber Security and Data Privacy: 26 February – 3 March 2024

IT Governance

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data apparently includes users’ full names, phone numbers, addresses, email addresses and partial payment card information. Data breached: 21,100,000 records.