We Can Do Better Than Free Credit Monitoring After a Breach

November 19, 2024 at 09:44AM The text discusses the persistent issue of data breaches in cybersecurity, highlighting the author’s experiences. It calls for companies to improve both pre- and post-breach practices, including timely notifications and proactive tools for consumers. Additionally, it suggests implementing industry regulations and financial accountability for companies to better protect consumer data. … Read more

FTC reports 50% drop in unwanted call complaints since 2021

November 15, 2024 at 01:54PM The FTC reported a 50% decline in consumer complaints about unwanted telemarketing calls since 2021, with 1.1 million reports in 2023. The National Do Not Call Registry has 254 million active registrations. Key complaint categories include medical calls and imposters. Ongoing crackdowns aim to combat illegal telemarketing practices. ### Meeting … Read more

Despite Emerging Regulations, Mobile Device, IoT Security Requires More Industry Attention

November 6, 2024 at 02:43PM Internet-connected devices are integral to daily life but pose significant cybersecurity risks. Consumers must remain vigilant against insecure devices and scams, particularly in light of recent regulatory advancements like the EU’s Cyber Resilience Act. Manufacturers need to adapt to evolving security requirements and enhance communication between product and cybersecurity teams. … Read more

Worker surveillance must comply with credit reporting rules

October 26, 2024 at 01:59AM The US Consumer Financial Protection Bureau has issued guidance emphasizing that third-party workforce reports must comply with the Fair Credit Reporting Act’s consent and transparency requirements. Concerns include unchecked surveillance and algorithmic decision-making in employment, necessitating employee consent and accuracy corrections for data used in adverse employment decisions. **Meeting Takeaways:** … Read more

EU Adopts Cyber Resilience Act to Regulate Internet of Things

October 22, 2024 at 08:04AM The Council of the European Union has adopted the Cyber Resilience Act, ensuring connected devices meet new cybersecurity standards before market release. This law enhances existing regulations and provides consumers with clearer options for secure products, featuring a “CE” label for compliance. The act will take effect in 2027. **Meeting … Read more

Smart TVs are spying on everyone

October 9, 2024 at 06:22PM Smart TVs are increasingly monitoring viewers and exploiting their data for targeted advertising, mirroring existing online privacy concerns. A report by the Center for Digital Democracy highlights widespread commercial surveillance practices that undermine consumer privacy and calls for regulatory intervention amid growing corporate lobbying against privacy legislation. **Meeting Takeaways: Smart … Read more

Australian e-tailer digiDirect customers’ info allegedly stolen and dumped online

September 30, 2024 at 08:38PM More than 304,000 customers of Australian tech retailer digiDirect had their data leaked to a cyber crime forum. The breach included personal details such as full names, email addresses, and phone numbers. The company has not yet responded to inquiries, and there’s concern over potential fraudulent use of the stolen … Read more

Security biz Verkada to pay $3m penalty under deal that also enforces infosec upgrade

September 5, 2024 at 12:37AM Verkada will pay $2.95 million to the US FTC following an investigation into their security failings, not related to past incidents but for spam violations. The company also faced allegations of security lapses, including unauthorized access to CCTV footage. The settlement includes requirements to improve security practices and compliance with … Read more

California Approves Privacy Bill Requiring Opt-Out Tools

September 4, 2024 at 06:23AM The California state legislature passed a bill requiring internet browsers and mobile operating systems to offer a mechanism for users to opt out of the sale or sharing of their personal information. The bill now awaits Governor Gavin Newsom’s signature. This will result in a standardized process for opt-out requests, … Read more

National Public Data Confirms Massive Breach

August 19, 2024 at 11:50AM National Public Data (NPD) confirmed a breach exposing personal data from millions of consumers in the US, UK, and Canada. The breach accessed extensive personal information, prompting concerns about identity theft. The incident highlights the need to move away from using social security numbers for identification and the limitations consumers … Read more