PrivacySignal
Analysis ← Front page
Breach

Personal data breaches: FAQs now available

EDPS · · EU · Data Breaches

The European Data Protection Supervisor has published a FAQ document on personal data breach notification, covering risk assessment, mandatory notification forms, phased reporting, mitigation, and how to inform affected individuals. The guidance is aimed at helping data controllers and processors meet their notification obligations.

Why this matters: Breach notification rules sound simple until you are actually in one. Timing is tight, the risk assessment is judgment-heavy, and getting the process wrong can mean a second problem on top of the first. This FAQ gives controllers and processors clearer footing on the steps the EDPS expects. If your organization handles EU institutional data, this is now the practical reference for how to document and report when something goes wrong.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · AI governance · Compliance · General readers · Policy

#breach#gdpr#regulation#privacy
Read the original at EDPS → Browse the archive

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Logged Is Not Authorized

Georgia law restricts police use of license plate data to law enforcement purposes. A new lawsuit alleges deputies searched a man's vehicle five times while he was suing their sheriff. Two recorded reasons were "info" and "37." The system accepted both.

· 6 min read Read →
Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Breach
CyberScoop · · US Federal

Researchers uncover Volt Typhoon’s covert, ephemeral network

The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks. The post Researchers uncover Volt Typhoon’s covert, ephemeral network appeared first on CyberScoop.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach Critical
BleepingComputer · · International

Volt Typhoon hides zero-day attacks using 'Silent Train' framework

Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
DataBreaches.net · · International

JPN: Times Car reporting ¥5.5 billion loss has firms bracing for data breach fallout

Times Car, a Japanese car-sharing company, is reporting a ¥5.5 billion loss following a September data breach that exposed personal information — including driver's license data — of 1.46 million customers. The incident is prompting broader concern among Japanese companies about the financial consequences of weak cybersecurity practices.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

#breach#privacy Read original →
Breach
BleepingComputer · · International

Even after PHP2Shell, blast radius matters more than a CVSS score

PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important as fixing vulnerabilities to reduce the damage from a breach. [...]

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai#security Read original →
Breach
DataBreaches.net · · International

KR: Bithumb discloses data leak after internal system breach; One of three financial firm breaches reported that day

CoinTelegraph reports: South Korea’s crypto exchange Bithumb is investigating the extent of a data leak caused by a hack of its internal mobile system earlier this week, Yonhap News Agency reported Wednesday. Bithumb discovered the breach of its in-house mobile system — the platform used by employees to communicate internally — on Tuesday and notified...

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
DataBreaches.net · · International

Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat

Sead Fadilpašić reports: Japanese internet giant GMO Group has told its customers to scan their computers for viruses, back up all of their data, disconnect the devices from the internet and then shut them down. The announcement, which literally told customers, “unplug any cords connected to your PC,” was made in response to a cyberattack...

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →