In-depth articles on GDPR compliance, DSARs, data governance, and privacy operations.
Security & Breach NotificationWhat happened On October 5, Denmark s government confirmed unauthorized access to the Central Register of Persons (CPR), a national database with records for about 11 million people, including decease
Security & Breach NotificationWhen Daiichi Kosho discovered a malware infection at Nippon Columbia Group had potentially exposed 8,724,000 customer records, the company faced a scenario most privacy teams dread: your data protecti
Security & Breach NotificationWhen Oracle Health reported that its Cerner breach affected 20 million people, many data governance teams dismissed it as a processor issue. But if you re managing an acquisition, a cloud migration, o
Security & Breach NotificationThe Conventional Wisdom When 8.8 million CPR records in Denmark were accessed without authorization, the immediate response was predictable: tighten third-party access controls. Conduct more processor
Get weekly security insights and compliance updates delivered to your inbox.
Security & Breach NotificationWhen ASOS customers received alarming ASOS HACKED alerts on their phones, the issue wasn t a typical hack. Attackers had breached third-party platforms used for customer communications, turning ASOS s
Security & Breach NotificationA private company s compromised access to Denmark s Central Population Register exposed 8.8 million records in September 2024. This breach affected more people than Denmark s entire living population
Security & Breach NotificationWhat Happened Unauthorized parties accessed Denmark s Central Person Register through a small Danish company s legitimate account over a 10-day period in September. This breach exposed names, addresse
Security & Breach NotificationThe Challenge Your organization reports a personal data breach to the CNIL . You ve met the 72-hour notification requirement under Article 33, informed affected individuals, and documented your incide
Security & Breach NotificationWhen the Technical University of Denmark (DTU) revealed that hackers used compromised credentials to access its identity and access management (IAM) system, exposing data on up to 200,000 individuals,
Security & Breach NotificationWhen a processor like Fakturownia suffers a personal data breach affecting more than 600,000 businesses, you need a documented response protocol that your team can execute without improvising under pr
Security & Breach NotificationThe question at hand Your security budget request is on the CFO s desk. You re asking for continuous monitoring tools, automated threat detection, and enhanced software validation processes. The respo
Security & Breach NotificationThe Spanish Data Protection Agency (AEPD) recently received its first notification of a personal data breach allegedly executed by an AI agent powered by a large language model. The agent searched for
Security & Breach NotificationWhat Happened On September 14, Spain s supervisory authority reported the country s first personal data breach executed by an agentic AI system. The AI agent, using a known language model, scanned gen
Security & Breach NotificationEvery privacy officer has heard myths about metadata and personal data. These myths appear in engineering meetings, processor contracts, and sometimes even inform decisions that create real risks. The
Security & Breach NotificationAn autonomous AI agent breached a Spanish company s network, altered personal data records, and extracted invoice information. Spain s supervisory authority confirmed it s their first reported inciden
Security & Breach NotificationA New Threat: AI-Driven Cyber Attacks Should your security and data protection models treat AI-driven attacks as a fundamentally different threat category requiring new defensive architectures, or can
Security & Breach NotificationWhen an external-facing system becomes the entry point for unauthorized data access, you re facing a choice that should have been made months earlier: which API appropriate technical and organisationa
Security & Breach NotificationWhen the CNIL imposed a €500,000 fine on Hôpital Privé de la Loire in 2025, it wasn t due to sophisticated malware. The attacker used a single compromised user account to access data on 524,867 patien
Security & Breach NotificationYou ve inherited a third-party data sharing setup you didn t create, don t fully understand, and can t easily audit. Now you need to fix it before a supervisory authority or class action does it for y
Security & Breach NotificationThe Question at Hand A breach involving 153 million driver s licenses has reignited a debate in privacy circles: should large datasets of personal information fall under regulatory frameworks as stric
