IT Security & Privacy

According to the latest Allianz Risk Barometer, cyber incidents have secured the top spot as the most significant worry for companies worldwide in 2024. Ransomware attacks, data breaches, and IT disruptions are key concerns, reflecting the escalating threat landscape in the digital sphere. Business interruption closely follows as the second major risk, emphasizing the intertwined nature of modern global business operations.

The Dutch Data Protection Authority (DPA) has levied a hefty €10 million ($11 million) fine against Uber for violating privacy regulations related to the personal data of its drivers. The DPA's investigation revealed that Uber failed to specify in its terms and conditions how long it retained drivers' personal data and the security measures in place when transmitting the data to undisclosed entities outside the European Economic Area (EEA).

California Attorney General Rob Bonta has announced a comprehensive investigative sweep, targeting businesses associated with popular streaming apps and devices. The focus of this initiative is to assess and ensure compliance with the California Consumer Privacy Act (CCPA). The Attorney General's office is issuing letters to businesses operating streaming services, alleging a failure to adhere to the CCPA's stringent regulations, particularly emphasizing the opt-out requirements for businesses engaged in the sale or sharing of consumer personal information.

The French data protection authority, CNIL, has fined Amazon France Logistique €32 million for serious violations of the General Data Protection Regulation (GDPR). The penalty comes after several investigations prompted by employee complaints and media reports about the company's practices in its large warehouses.

VF Corp, the parent company overseeing renowned sneaker brand Vans, has reported a significant data breach impacting approximately 35.5 million consumers. The cybersecurity incident, identified on December 13, 2023, disrupted global customer orders through the company's e-commerce platform, causing delays in order fulfillment and resulting in the cancellation of certain product orders.

In a move towards bolstering international cooperation on privacy and data security enforcement, the Federal Trade Commission (FTC) has officially signed on to participate in the Global Cooperation Arrangement for Privacy Enforcement (Global CAPE). This multilateral arrangement facilitates collaboration, investigative assistance, and information-sharing among privacy authorities worldwide.

In a recent advisory, the Autorité des marchés financiers (AMF), the French financial regulatory authority, has raised concerns about a surge in fraudulent activities involving the unauthorized use of its name. The warning is targeted at both regulated and unregulated entities under the AMF's jurisdiction, cautioning them against falling victim to sophisticated scams.