U.S. Sens. Ron Wyden, D-Ore., and Ed Markey, D-Mass., sent a letter to the Federal Trade Commission asking for an investigation into automakers for allegedly providing law enforcement with location data collected from vehicles. Several automakers have allegedly disclosed user locations at the reques...

France's data protection authority, the Commission nationale de l'informatique et des libertés, introduced a self-assessment tool for binding corporate rules. The tool allows companies that transfer personal data outside of the EU to "check the level of maturity of the project in relation to the req...

Finland's District Court of Western Uusimaa sentenced hacker Aleksanteri Kivimäki to six years in prison for a cyberattack that stole the data of 33,000 Vastaamo therapy patients, Yleisradio Oy reports. Kivimäki was also charged with aggravated blackmail after he threatened to "spread the sensitive ...

The U.S. Federal Trade Commission updated the Health Breach Notification Rule. The revised rule includes updated definitions to "underscore application" to health apps and "similar technologies not covered by (the Health Insurance Portability and Accountability Act)." Changes to the consumer and age...

Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, announced the authorization of the Security Incident Communication Regulation, which aims to strengthen cybersecurity practices and increase transparency. The RCIS requires organizations to report security incidents th...