Data Privacy
Job Seekers Make for Vulnerable Targets
Teri Robinson | | bad actors, Data Privacy, Identity Theft, job, Job Seekers, job sites, leaks, resumes
A resume may not appeal to a prospective employer but it’s pure gold for a bad actor. With job search platforms selling data to third parties, job seekers need to take steps ...
Security Boulevard
Dutch Privacy Complaints Jump Over 75% in 2025
What happened The Dutch privacy and data protection authority, Autoriteit Persoonsgegevens, received more than 13,500 complaints in 2025 about individuals or organizations that may not have complied with the General Data Protection ...
Conflicting Messages on Messages: Tx AG Sues Meta About WhatsApp Encryption Claims
Mark Rasch | | consumer protection, Cybersecurity, Data Privacy, encryption, end-to-end encryption, government warrants, lawsuit, Meta, WhatsApp, Zero Knowledge
To a cryptographer, those distinctions are elementary. To an ordinary user, they are usually invisible. When a messaging app says “your messages are encrypted,” many users hear something much stronger: “nobody else ...
Security Boulevard
Eight Years In, GDPR Changed Everything
Teri Robinson | | AI systems, Compliance, consumer trust, Data Governance, data localization, Data Privacy, EU AI Act, GDPR, identity governance, Regulatory Enforcement
Eight years ago, following a full-on panic, GDPR went into effect. And what has emerged in the years since is a much-needed benchmark for governance. Will the act remain relevant as AI ...
Security Boulevard
Five Years of US Privacy Breach Data Tell a Story Security Leaders Cannot Ignore
In April 2026 alone, the ShinyHunters extortion group breached ADT (5.5 million customers), Amtrak (2.1 million confirmed records), and McGraw-Hill (13.5 million student and educator accounts). All three attacks followed the same ...
Cybersecurity Lessons from the Canvas Data Breach
Tom Eston | | bug bounty, Business Continuity, canvas, Cyber Crime, Cybersecurity, Data breach, Data Privacy, Digital Privacy, Disaster Recovery, education-technology, Episodes, Incident Response, Instructure, Penetration Testing, Podcast, Privacy, ransom payment, Ransomware, ShinyHunters, surveillance, Weekly Edition
In this episode we discuss the recent cyber attack targeting Instructure’s widely used learning platform, Canvas, and the major late-breaking development that Instructure reached an “agreement” with the ShinyHunters cybercriminal group after ...
Erie County Puts the Kibosh on Biometric Data Collection by Retailers
Teri Robinson | | AI Governance, biometric data, Biometrics Transparency and Privacy Act, Cybersecurity, Data Privacy, deepfakes, Erie County, facial recognition, New York, Synthetic identity fraud, Wegmans
Remember that face—retailers like grocery chain Wegmans are using facial recognition to identify miscreants, but legislators in Erie County New York says that’s not cool. They recently passed Biometrics Transparency and Privacy Act than ...
Security Boulevard
Data Privacy Leaks – The Drip, Drip, Drip of Exposure
Mark Rasch | | Article III standing, Behavioral Telemetry, CCPA, data architecture, Data Leakage vs. Data Breach, Data Privacy, GDPR, infostealer malware, Lifecycle Governance, metadata, Personally Identifiable Information (PII), Privacy Policy Drafting, Regulatory Compliance, TransUnion LLC v. Ramirez
Beyond the "headline breach," modern enterprises face a persistent threat: steady-state data leakage. Learn why traditional privacy definitions fail and how "authorized" data flows in workplace apps create continuous legal and operational ...
Security Boulevard
Telco Privacy Violation? Fine! No, Telco Privacy Violation, Fine. Supreme Court to Determine if FCC Can Charge Telcos for Data Breaches
Mark Rasch | | Administrative Law, Article III Courts, Civil Penalties, constitutional law, CPNI (Customer Proprietary Network Information), Data Misuse, Data Privacy, Enforcement Architecture, fcc, Jarkesy v. SEC, Jury Trial, regulatory fines, Seventh Amendment
The intersection of constitutional law and cybersecurity enforcement, specifically the Seventh Amendment right to a jury trial in regulatory data privacy cases. Central Conflict: Whether federal agencies (like the FCC, SEC, or ...
Security Boulevard
Privacy-Preserving Data Analytics: Stop Collecting What You Do Not Need
There is an almost reflexive habit in data engineering: whenever you instrument an event, you attach a user ID. It feels natural. User IDs are how you join tables, track behavior, and ...
Security Boulevard

