Governance, Risk and Compliance

A European board offers draft guidelines for the right to be forgotten in search engine cases under the EU General Data Protection Regulation (GDPR).

Internet Service Providers (ISPs) would be compelled to inform critical infrastructure owners and operators of vulnerabilities detected on their systems under a proposed bipartisan bill.

Four patients have filed lawsuits against Alabama's DCH Health System. The lawsuits involve alleged HIPAA privacy violnations amid ransomware attacks.

Wawa data breach triggers six customer lawsuits against the U.S. convenience & gas store chain.

Nearly 270 million Facebook users have had their user IDs, phone numbers and names left in an unsecured database accessible on the Internet for anyone to mine, a security researcher said.

Thieves have reportedly stolen personal banking and payroll information of nearly 30,000 current and former Facebook employees, reports say.

Passports and biometric data belonging to California residents are now included in the types of personal information covered by the state’s sprawling Consumer Privacy Act (CCPA).

A Chicago-based futures brokerage has been fined $1.5 million for failing to safeguard its email systems from attacks by cyber criminals.