Covers the evolving landscape of cybersecurity regulations at federal, state, and international levels. Articles examine new legislation, compliance deadlines, reporting requirements, and how regulatory changes impact security programs across industries including healthcare, finance, and technology.
posts
23andMe Proved That Getting Breached Is Bad — But Notifying Wrong Is Worse In late 2023, 23andMe disclosed a breach affecting nearly 7 million users. The breach itself was devastating. But the company's notification missteps — delayed disclosures, shifting blame to users, and inconsistent communications across jurisdictions — turned a security
The $5.6 Billion Warning the FTC Already Sent You In 2023, the FTC reported collecting over $5.6 billion in consumer refunds from enforcement actions — a significant chunk tied to data security failures. If you think the FTC only goes after big tech, think again. They've pursued
A $5.8 Million Wake-Up Call from the FTC In 2023, the FTC finalized a settlement with Drizly and its CEO after a data breach exposed the personal information of roughly 2.5 million consumers. What made this case unusual wasn't just the fine — it was that the
The FTC Just Fined a Company $5 Billion. Are You Next? In 2019, the FTC levied a record-breaking $5 billion penalty against Facebook for privacy violations. That number made headlines, but here's what most business owners missed: the FTC doesn't just go after tech giants. They
73 Hours: The Window That Cost Uber $148 Million In 2018, Uber paid $148 million to settle with all 50 states and the District of Columbia — not because they got breached, but because they covered it up. The company learned about a massive breach affecting 57 million users and drivers
The FTC Just Fined a Company $1.5 Million — Here's What They Missed In 2023, the FTC finalized its order against Chegg, Inc. for repeated data breaches that exposed personal information of roughly 40 million customers and employees. The company's failures weren't exotic. They
