Tag

Data Privacy Laws

posts

Data Breach Notification Requirements: What You Owe

23andMe Proved That Getting Breached Is Bad — But Notifying Wrong Is Worse In late 2023, 23andMe disclosed a breach affecting nearly 7 million users. The breach itself was devastating. But the company's notification missteps — delayed disclosures, shifting blame to users, and inconsistent communications across jurisdictions — turned a security

Data Breach Notification

Data Breach Notification Requirements: A 2024 Guide

In May 2023, the FTC finalized a revised Health Breach Notification Rule that expanded who must report breaches — and shortened the clock to do it. Most organizations I talk to had no idea the change happened. They found out the hard way: staring down a regulatory inquiry with no incident