TOTAL: {[ getCartTotalCost() | currencyFilter ]} Update cart for total shopping_basket Checkout

Daily Dashboard | Student reveals flaws in companies' DSAR responses Related reading: The AI Act's debiasing exception to the GDPR



BBC News reports Oxford Ph.D. student James Pavur revealed more details about how companies inadvertently revealed personal information during bogus data subject access requests. Pavur tried to pry the personal information of his fiancée from 150 organizations. He ended up scraping 60 pieces of personal information from the companies, including previously breached usernames and passwords, a list of past purchases, 10 digits of her credit card number along with its expiration date and issuer, and her past and present addresses. In some instances, Pavur used forged identification documents, including a postmark and a bank statement, that companies accepted in exchange for access to information.
Full Story


If you want to comment on this post, you need to login.