Ireland's Data Protection Commission ruled Yahoo violated EU law by failing to protect the information of its users prior to its 2014 data breach, Politico reports. The breach affected 500 million users, 39 million of whom came from Europe. The DPC determined the tech company failed to meet the data protection standards within EU law but did not administer a financial penalty. Yahoo will instead be required to take “specific and mandatory actions” to ensure its data processing complies with EU rules. “The DPC will be engaging closely with Yahoo (now Oath EMEA) to monitor the quick and comprehensive implementation of these actions and if necessary will issue enforcement notices to secure compliance,” the DPC said in a statement.
Full Story