Remove tag personally-identifiable-information
article thumbnail

$10,000,000 civil penalty for disclosing personal data without consent

Data Protection Report

The claims related to the company’s sharing personal data without consumer consent and making it very difficult for consumers to cancel their subscriptions to this telehealth service. As indicated in the paragraph quoted above, the company collected some very sensitive personal information.

article thumbnail

Burger King forgets to put a password on their systems, again

Security Affairs

The fast food giant Burger King put their systems and data at risk by exposing sensitive credentials to the public for a second time. It’s not the first time Burger King has leaked sensitive data. Among other sensitive data, the file contained credentials for a database.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

China: Navigating China Episode 19: China’s new Data Security Law: what multinational businesses need to know

DLA Piper Privacy Matters

China’s Data Security Law (“ DSL ”) has come into force and takes effect on 1 September 2021. The DSL applies to data in general, and forms part of the broader China data framework. The DSL confirms – rather than changes – data localisation requirements. Authors: Carolyn Bigg , Venus Cheung, Fangfang Song.

article thumbnail

A new Magecart campaign hides the malicious code in 404 error page

Security Affairs

Researchers from the Akamai Security Intelligence Group uncovered a Magecart web skimming campaign that is manipulating the website’s default 404 error page to hide malicious code. ” The attack chain of this campaign consists of three main parts: loader, malicious attack code, and data exfiltration. .”

Retail 110
article thumbnail

Guest Post -- GDPR Compliance starts with Data Discovery

AIIM

You might also be interested in: Mitigate Data Privacy and Security Risks with Machine Learning. The Privacy and Security Dichotomy. GDPR and Cross Border Data Flows between the EU and the US: Current State of the Law. Compliance starts with data discovery. Privacy by Design: The Intersection of Law and Technology.

GDPR 102
article thumbnail

Keep Your Business Data Safe and Secure With Onehub

OneHub

Data security is one of the most important factors to consider when choosing how to store and share your business files. Some company decision-makers are hesitant to upgrade to cloud storage and file sharing due to concerns about protecting sensitive information. That’s a devastating price tag for many companies.

article thumbnail

Newly Proposed SEC Cybersecurity Risk Management and Governance Rules and Amendments for Public Companies

Data Matters

Securities and Exchange Commission (SEC) proposed new cybersecurity rules to enhance and standardize disclosures regarding cybersecurity risk management, strategy, governance, and incident reporting by public companies. an incident in which a malicious actor has demanded payment to restore company data that was stolen or altered.