Privacy Transformation - Issue 160

PRIVACY

Facial recognition technology 'cannot be safely rolled out' in Ireland

Facial recognition technology 'cannot be safely rolled out' in Ireland

The proposed Garda use of facial recognition technology would pose more risks than benefits, according to a digital policy professor.

How GDPR Is Failing

How GDPR Is Failing

The world-leading data law changed how companies work. But four years on, there’s a lag on cleaning up Big Tech.

Insights: DORA, the EU Digital Operational Resilience Act

The aim of this article is to provide readers with an understanding of what DORA is, to illustrate its implementation timescale and to provide an overview of the requirements and next steps whilst we wait for formal approval and implementaiton.

SECURITY & TECH

Apple CEO Tim Cook Worries Losing Privacy Could Change People's Behavior

Apple CEO Tim Cook Worries Losing Privacy Could Change People's Behavior

Apple CEO Tim Cook says he worries that people will become “restrained” and begin thinking and behaving differently as they lose their sense of privacy in a world where digital devices and technology become more and more adept at tracking their movements.

Facebook smart glasses - innovation or privacy invasion?

Facebook smart glasses - innovation or privacy invasion?

Smart glasses that can record pictures and video are currently available to Irish consumers, explains Aaron Heffernan. But are they the future or a serious invasion of privacy?

Be Proactive! Shift Security Validation Left

Be Proactive! Shift Security Validation Left

Shifting security left approach in Software Development Life Cycle (SDLC) means starting security earlier in the process. As organizations realized that software never comes out perfectly and are riddled with many exploitable holes, bugs, and business logic vulnerabilities that require going back to fix and patch, they understood that building secure software requires incorporating and consolidating numerous resources.

Vodafone is launching a whole new method of user tracking

Vodafone is launching a whole new method of user tracking

Every Vodafone user will be getting a fixed ID with all of their activities linked to it.

UK NCSC: Weekly Threat Report

UK NCSC: Weekly Threat Report

The NCSC's Weekly threat report is drawn from recent open source reporting.

DATA BREACH

Verizon DBIR: Ransomware dominated threat landscape in 2021

Verizon DBIR: Ransomware dominated threat landscape in 2021

The 2022 Verizon DBIR highlighted the ongoing problem of ransomware attacks and how they've come to represent a larger number of data breaches.

[Read 2022 Data Breach Investigations Report]

ENFORCEMENT

Meta faces large fine for breaching children’s privacy on Instagram service

Meta faces large fine for breaching children’s privacy on Instagram service

Meta Platforms is facing a potentially large fine from DPC for breaches of children’s data rights.

Spain Hands Google €10 Million GDPR Fine for Violation of “Right To Be Forgotten” Rules

Spain Hands Google €10 Million GDPR Fine for Violation of “Right To Be Forgotten” Rules

Spanish data protection authority AEPD called the two infringements that led to the GDPR fine "very serious." Both relate to Google's transfer of EU citizen data to the US.

More on the latest GDPR enforcement news can be found on:

enforcementtracker.com

RESOURCES

Report: 2022 Data Breach Investigations

Report: 2022 Data Breach Investigations

Reduce risks with insights from the 2022 Data Breach Investigations Report (DBIR) from Verizon.

Draft Bill: American Data Privacy and Protection Act

Draft Bill to provide US consumers with foundational data privacy rights, create strong oversight mechanisms, and establish meaningful enforcement.

Report: Ban HikVision — Big Brother Watch

Report: Ban HikVision — Big Brother Watch

Big Brother Watch's latest report reveals in stark detail how Hikvision and Dahua dominate the UK’s public sector CCTV networks.

CONTRIBUTE

Have an interesting article, book, video, podcast or other resource that you would like to share with fellow privacy practitioners? Please do drop me a note.