Ransomware group RansomHub claimed it is selling U.S. citizen's medical and financial records following a cyberattack on Change Healthcare, Wired reports. Emsisoft Threat Analyst Brett Callow said it is likely an attempt to collect additional ransom payments from the health care companies involved i...

The Colorado General Assembly approved an amendment to the Colorado Privacy Act for the protection of sensitive biometric and "neural data," The New York Times reports. The law aims to protect consumers from devices that collect data from brain activity. State Rep. Cathy Kipp, D-Colo., said while th...

Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, is soliciting public feedback on what personal data should be considered high risk as part of a study on the topic. Public input closes 16 May.Full story...

The U.K. Information Commissioner's Office released guidance for health care organizations to ensure patients are aware of how their personal data is collected and stored. The guidance aims to promote and improve "practical steps to developing effective transparency information."Full story...

Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, announced it established its Integrity Program as well as the Commission for Integrity, Transparency and Access to Information. The commission will oversee the Integrity Program to focus on "coordinating, monitoring, s...