Privacy professionals have always needed to have one eye on data security. However, the obligation of data custodians to protect the confidentiality, integrity and availability of the personal information they hold is becoming increasingly complex with its own, sometimes overlapping, sometimes confl...

The U.S. Department of Health and Human Services Office for Civil Rights announced a finalized rule under the Health Insurance Portability and Accountability Act to strengthen privacy protections for reproductive health care. The rule bars disclosure of women's protected health information for obtai...

The U.K. National Cyber Security Centre updated its cyber assessment framework to include a focus on critical infrastructure vulnerabilities. It now includes sections on remote access, privileged operations, user access levels and multifactor authentication.Full story...

IAB Europe published a response to the European Data Protection Board's opinion on the legality of pay-or-consent models for obtaining valid consent to process personal data. IAB Europe said the opinion creates "legal uncertainty for many businesses beyond large online platforms" and the EDPB made "...

Following India's election, the new government plans to introduce an amendment to information technology rules under the Digital Personal Data Protection Act, Business Standard reports. The amendment will reportedly address governance requirements for preventing misinformation created by artificial ...