Companies have long prioritized cybersecurity as a key risk to their operations, but AI’s ability to increase the number, speed, severity, and types of attacks has prompted the U.K.’s regulator to set out five practical steps that organizations can take to strengthen their resilience against AI-powered threats and cyberattacks.
Data Privacy
China’s data scrutiny puts financial firms’ day-to-day compliance to the test
China is tightening personal information protections and urging businesses that handle personal data to strengthen compliance. Violations could result in million-dollar fines, depending on the case.
Remember the GDPR scramble? The EU Anti-Corruption Directive clock is already running.
This isn’t just a European story. GDPR caught global businesses off guard. This is for everyone. The directive is already in force. And like GDPR before it, the organisations caught off guard won’t be the ones who didn’t know about it. They’ll be the ones who assumed it didn’t apply to them.
In largest CCPA fine ever, GM pays $12.75M to settle California privacy allegations
General Motors (GM) has agreed to pay $12.75 million to settle allegations that it violated California’s Consumer Privacy Act (CCPA) by selling drivers’ location and other data, California Attorney General Rob Bonta announced. GM allegedly collected the data through consumers’ use of OnStar, a program installed in GM cars, which can provide directions or summon […]
Companies should brace for scrutiny, fines after EDPB’s latest GDPR investigation
The European Data Protection Board has made checking organizations’ compliance with the GDPR’s transparency requirements a key area of focus for the coming year under its Coordinated Enforcement Framework.
Virginia bans sale of personal location data
Businesses operating in Virginia are barred from selling consumers’ precise location data, under legislation signed into law Tuesday by Gov. Abigail Spanberger.
Navigating APAC data privacy laws: A compliance roadmap
Fragmented regulations across the APAC region are forcing compliance teams to rethink strategies that worked under GDPR.
Disney pays $2.75M to California for alleged privacy violations
Disney has agreed to pay $2.75 million to settle allegations by California that its streaming service sold the personal information of subscribers without their permission.
FTC warns brokers to stop selling U.S. military member data to foreign adversaries
Thirteen data brokers have been warned by the Federal Trade Commission to come into compliance with a 2024 law prohibiting the selling of the personal data of U.S. residents to foreign adversaries.
FTC puts GM’s puts connected vehicle data practices under compliance spotlight
The U.S. Federal Trade Commission finalized its order against General Motors and its OnStar subsidiary over the improper usage of geolocation and driving behavior data of drivers.


