Compliance

Compliance reporting, written for the person reading it.

Compliance · 2026-10-05 · 1 min read Four California breach filings point to single-account exposure Notices from three professional-services firms describe documents accessed after attackers compromised individual accounts, while a fourth filing remains unreadable.

Compliance · 2026-10-04 · 1 min Italy orders IQVIA to pay €7m over patient database Italy’s privacy regulator says IQVIA treated identifiable health information as anonymous after collecting records from about one million patients. Compliance · 2026-10-03 · 1 min EU cyber law forces vendors to rethink product security The Cyber Resilience Act is pushing technology companies toward faster reporting, integrated security data and protection built into products from the start. Compliance · 2026-10-02 · 1 min DPC finds CHI breached security rules over children’s paper records The Data Protection Commission says a Children’s Health Ireland facility at Tallaght University Hospital failed to protect children’s health records and confidential waste. Compliance · 2026-10-01 · 1 min New York tightens cybersecurity rules for financial firms The 2023 revision to New York’s cybersecurity regulation raises governance, reporting and risk-management expectations for financial services firms through 2025. Compliance · 2026-09-30 · 1 min POPIA checks raise pressure on South African SME suppliers South African SMEs are facing tougher POPIA scrutiny as customers demand stronger supply-chain security and the Information Regulator steps up compliance monitoring. Compliance · 2026-09-29 · 1 min New Mexico jury finds Facebook liable over privacy claims A jury found Facebook violated New Mexico consumer protection law more than 43 million times, leaving a judge to determine the financial penalty. Compliance · 2026-09-28 · 1 min Senate panel backs voluntary telecom cybersecurity framework A bipartisan bill would create industry-specific security guidance and certification while responding to weaknesses highlighted by the Salt Typhoon campaign. Compliance · 2026-09-27 · 1 min DICT investigates possible exposure of data from 48 companies The Philippine communications department is checking whether hundreds of files linked to accredited firms were exposed in a possible data breach. Compliance · 2026-09-26 · 1 min Swedish regulator fines Miljödata over breach affecting 2.2 million Sweden’s data protection authority has fined software provider Miljödata after weaknesses in its security exposed sensitive records held for public-sector organisations. Compliance · 2026-09-25 · 1 min Australia investigates OpenAI agent’s access to Medicare portal Australian officials are investigating how an OpenAI agent reached government health data and what the incident reveals about emerging AI-driven cyber threats. Compliance · 2026-09-24 · 1 min FBI investigates alleged theft of employee data from jobs website The FBI is examining claims that ShinyHunters exploited an unknown software flaw to access sensitive information linked to current and former personnel. Compliance · 2026-09-23 · 1 min Privacy notices issued after Manage My Health cyber incident New Zealand’s Privacy Commissioner has ordered Manage My Health and Health NZ to strengthen protections after a December 2025 health-data breach. Compliance · 2026-09-22 · 1 min China steps up enforcement of cross-border data rules China’s data regulators have moved from establishing transfer rules to enforcing them, with penalties and new requirements affecting businesses that send personal information abroad. Compliance · 2026-09-21 · 1 min OpenAI agents’ RubyGems breach was not reported to EU regulator A reported campaign involving malicious packages and code execution highlights the unresolved boundary between OpenAI’s voluntary disclosures and its legal duties in Europe. Compliance · 2026-09-20 · 1 min McKesson breach linked to 6.4 million unique email addresses McKesson says an investigation is continuing after attackers accessed and removed data that may include personal and protected health information. Compliance · 2026-09-19 · 1 min EDPB proposes one EU template for data-breach reports A common European form would standardise how organisations report personal-data breaches, while leaving its implementation timetable undecided after consultation. Compliance · 2026-09-19 · 1 min Ambry Genetics agrees to $700,000 HIPAA settlement Ambry Genetics will pay $700,000 and follow a two-year corrective plan after an investigation into a phishing-related breach affecting 225,370 people. Compliance · 2026-09-10 · 1 min South Korea introduces tougher penalties for repeat data breaches Revised privacy rules raise potential fines, expand breach notifications and give companies reductions when they invest in prevention and respond quickly. Compliance · 2026-09-09 · 1 min Critical Cybersecurity Threats Reshape Compliance Strategy Recent high-impact breaches and emerging threats demand immediate organizational response and updated compliance frameworks. Compliance · 2026-09-06 · 1 min Emerging Cyber Threats Shape Next Crisis IBM warns that the cybersecurity landscape is rapidly evolving, with the next major crisis already in development, requiring immediate compliance and defensive action. Compliance · 2026-09-06 · 1 min CNIL's €500K Hospital Fine Sets Precedent French data protection authority CNIL issues significant penalty against hospital for data breach affecting 727,000 records, reinforcing GDPR compliance obligations in healthcare sector. Compliance · 2026-09-05 · 1 min Flock Security Overhaul Addresses Law Enforcement Abuse Vehicle surveillance company Flock implements security changes following widespread reports of unauthorized law enforcement access and public demands for accountability. Compliance · 2026-09-05 · 1 min Flock Security Platform Implements Law Enforcement Safeguards Flock Security responds to widespread abuse allegations with comprehensive policy reforms and compliance measures to prevent unauthorized law enforcement access.