tag: Gdpr · 6 items
- Engineer — Skip
- SOC/IR — Skip
- Leader — Learn: Norway’s record GDPR fine against a Microsoft ad unit signals that regulators are treating sensitive-category data flows through ad tech as high-severity violations; useful benchmarking data for board conversations about third-party data-sharing risk and vendor audit scope for ad-tech integrations.
- Engineer — Skip
- SOC/IR — Skip
- Leader — Learn: A Norwegian GDPR enforcement action against Microsoft’s Xandr ad platform for processing sensitive data sourced from Grindr illustrates the downstream regulatory risk embedded in ad tech data pipelines; relevant context when auditing data processing agreements with advertising intermediaries.
- Engineer — Skip
- SOC/IR — Skip
- Leader — Learn: A Swedish regulator fined an IT provider roughly $183K for inadequate security controls after a breach exposing 2.2 million records — useful benchmarking data for demonstrating breach cost and regulatory consequence to leadership or board audiences.
- Engineer — Skip
- SOC/IR — Skip
- Leader — Learn: A landmark €403M DPC enforcement action on location data handling is useful benchmarking data for privacy risk registers and board-level compliance discussions, particularly for organizations with EU user data and similar location-based features.
- Engineer — Skip
- SOC/IR — Skip
- Leader — Learn: A major GDPR enforcement action against a tech giant signals continued regulatory appetite for location data processing — useful context for board discussions on data minimization posture and vendor risk reviews involving location-enabled services.
- Engineer — Skip
- SOC/IR — Skip
- Leader — Learn: The CNIL fine illustrates how regulators quantify enforcement for inadequate data protection controls in healthcare; useful benchmarking data for risk register conversations and demonstrating breach-cost exposure to leadership.