#GDPR
16 stories taggedGDPR.

The EU's New Cyber Security Law Gives Manufacturers 24 Hours to Report Flaws. Almost No One Is Ready.
The Cyber Resilience Act, which took effect in September, requires companies to report actively exploited vulnerabilities within one day. Security experts say the clock will break every manual process most vendors currently rely on.

Ransomware Group The Gentlemen Claims Attack on German Secure-File Firm FTAPI Software
A criminal gang that has posted dozens of claimed victims in recent months has listed FTAPI Software on its dark-web extortion site. The Munich company serves hospitals, insurers and public agencies across Europe. Nothing has been confirmed.

Eight in Ten UK Gambling Sites May Be Breaking Privacy Law, Study Finds
New research suggests most licensed British bookmakers and online casinos collect personal data from visitors before those visitors have agreed to it, putting them at odds with GDPR rules.

France fines Saint-Étienne hospital €500,000 over breach hitting 727,000 people
A teenage hacker got into a doctor's account and roamed the patient record system for days. Regulators say the hospital's security controls were nowhere near enough.

Rhysida gang claims theft of 5.79TB from Berlin's city government
The ransomware crew says it took 1.44 million files, including water-supply security assessments and plaintext passwords. Berlin's mayor says the city will not pay.

Five engineering habits that actually earn customer trust (and one that is quietly expanding the problem)
A privacy expert argues that compliance checkboxes are the easy part. The hard part is making sure a customer's choice is respected by every system that touches their data, even the ones nobody thinks about.

AI Security Tools Are Only as Good as the Data You Feed Them
Security teams are pouring money into AI-powered defences while quietly starving those systems of the data they need. The result is a blind spot that criminals are already walking through.

Dutch Regulator Fines Uber €825 Million for Firing Drivers by Algorithm
Europe's largest-ever GDPR fine landed on Uber after the Dutch data protection watchdog found that automated software suspended driver accounts, sometimes permanently, with no human ever checking whether the decision was right.

Can you actually stay private online? The case for separate digital identities
Reusing the same email, phone number and card everywhere hands data brokers and criminals a ready-made profile. Compartmentalising your identity blunts that.

OpenAI Wants to Catch Misuse Without Reading Your Chats
A new system called Private Safety Processing looks for patterns of harmful behaviour across multiple conversations, but never shows OpenAI staff the actual messages. Here is what that means, and why it matters.

IAM Compliance: What the Rules Actually Require, and How to Prove It
Regulators increasingly expect continuous evidence that identity controls work, not just paperwork saying they exist.

The EU's New Brussels Team Will Police AI Deepfakes and Label Chatbot Content
Europe's AI Act brings mandatory labelling for AI-generated content and a dedicated enforcement unit to Brussels. Here's what that means for anyone who reads news, uses chatbots, or runs a business online.

Your Bank May Be Sending Your Loan Details to TikTok Without Knowing It
New research finds that tracking tools baked into banking websites are quietly forwarding customers' personal and financial data to advertising platforms, sometimes before anyone clicks 'accept cookies'.

When 80,000 fans log on at once: the cybersecurity headache facing 2026 World Cup stadiums
Tens of thousands of personal phones on one network, payment terminals, body cameras on referees, and sensors inside match balls. Stadium IT teams face a security puzzle that has no clean solution.

Lidl Customers in Three Countries Warned After Supplier Breach Exposes Personal Data
The German discount chain says a file at an outside IT provider was raided, spilling names, phone numbers and dates of birth for online shoppers in Germany, Belgium and the Netherlands.