...your ROPAs together with data flow maps and DPIAs (data protection impact assessments). We asked Andy Snow, a DPO (data protection officer) and data privacy trainer, to explain how to...
...How security incidents are occurring In compiling our monthly lists, we distinguish between data breaches caused by an organisation accidentally leaking information (‘data breaches’) and those that are the result...
...download: Data Breach Dashboard For a quick, one-page overview of this month’s findings, please use our Data Breach Dashboard: Note: To make these numbers as informative as possible, we’ve used...
...non-compliant merchants. Compliance obligations for merchants also increase significantly in the event of a breach. Moreover, cardholder data breaches are also a breach of the EU GDPR (General Data Protection...
...incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks:...
...with data past the retention period How to create a data retention policy What is a data retention policy? A data retention policy is a set of rules and guidelines...
...security breach. Data exfiltration 53% of breached organisations are known to have had data exfiltrated. An additional 30% may have had data exfiltrated. 18% have either concluded that no records...
...data subjects whether they are processing the subject’s personal data. If so, controllers must provide the data subjects with a copy of that personal data (providing it does not adversely...
...special category (sensitive) data? Special category data is a subset of personal data that is afforded extra protections because of its sensitive nature. This includes data revealing: Racial or ethnic...