data protection

The U.S. Department of Transportation announced its first industry-wide review of data security and privacy policies across the largest U.S. airlines. The DOT said in a press release Thursday that…

DOT to investigate data security and privacy practices of top US airlines

Featured Article

Users say Glassdoor added real names to user profiles without their consent

One user said Glassdoor pulled her full name from an email and added it to her profile. Another user said it wasn’t clear how Glassdoor got his data.

Users say Glassdoor added real names to user profiles without their consent

Featured Article

How to verify a data breach

Over the years, TechCrunch has extensively covered data breaches. In fact, some of our most-read stories have come from reporting on huge data breaches, such as revealing shoddy security practices at startups holding sensitive genetic information or disproving privacy claims by a popular messaging app. It’s not just our sensitive…

How to verify a data breach

Two years ago, the Irish government fixed a vulnerability in its national COVID-19 vaccination portal that exposed the vaccination records of around a million residents. But details of the vulnerability…

A bug in an Irish government website that exposed COVID-19 vaccination records took 2 years to publicly disclose

Apple said it will no longer give over records of users’ push notifications to law enforcement unless the company receives a valid judge’s order. In its law enforcement guidelines updated…

Apple will no longer give police users’ push notification data without a warrant

Credit scoring companies operating in the European Union could be facing tighter curbs under the bloc’s privacy laws following a ruling issued by the Court of Justice (CJEU) today. The…

Credit scoring firms face curbs after landmark EU data protection ruling

Israeli startup Mine made a name for itself a few years ago with a tool designed for consumers to quickly run an audit of their data privacy situation. One scan…

Mine digs up $30M for its no-code approach to vetting data privacy

Featured Article

Hackers are exploiting ‘CitrixBleed’ bug in the latest wave of mass cyberattacks

Security researchers say hackers are mass-exploiting a critical-rated vulnerability in Citrix NetScaler systems to launch crippling cyberattacks against big-name organizations worldwide. These cyberattacks have so far included aerospace giant Boeing; the world’s biggest bank, ICBC; one of the world’s largest port operators, DP World; and international law firm Allen &…

Hackers are exploiting ‘CitrixBleed’ bug in the latest wave of mass cyberattacks

A security researcher said he discovered millions of Chinese citizen identity numbers spilling online after an e-commerce store left its database exposed to the internet. Viktor Markopoulos, a security researcher…

Online store exposed millions of Chinese citizen IDs

Ontario’s government-funded birth registry has confirmed a data breach affecting some 3.4 million people who sought pregnancy care, including the personal health data of close to two million newborns and…

Decade of newborn child registry data stolen in MOVEit mass-hack

Ashwini Vaishnaw, the IT minister of India, resubmitted an updated data privacy bill in the lower house of the Indian parliament on Thursday, months after introducing its last draft and…

India resurrects data privacy bill following abrupt pullback last year

The troves of data collected by today’s modern connected cars has long been viewed as a cash cow — a yet untapped opportunity that could boost profits for automakers. Now…

This California agency wants to know what happens to all that connected car data

After Google cut all but three of the projects at its in-house incubator Area 120 and shifted it to work on AI projects across Google, one of the legacy efforts…

Checks, the AI-powered data protection project incubated in Area 120, officially ‘exits’ to Google

Betterdata, a Singapore-based startup that uses programmable synthetic data to keep real data secure, announced today it has raised $1.55 million. The seed round, which it says was oversubscribed, was…

Betterdata uses synthetic data to keep real data safe

Featured Article

Today’s startups should terrify you

A steady stream of new startups pitch their ideas, concepts, products and services on a daily basis to TechCrunch reporters: Startups that claim to predict when employees might want to leave for a new job; that think they can detect depression using someone’s voice; that experiment by using chatbots on…

Today’s startups should terrify you

Online pharmacy GoodRx has agreed to pay $1.5 million in civil penalties for years of sharing the health information of consumers with third parties like Facebook, Google and Criteo for…

FTC slaps $1.5M fine on GoodRx for sharing users’ health data with Facebook and Google

In late April, police in Nebraska received a tip saying 17-year-old Celeste Burgess had given birth to a stillborn baby and buried the body. Officers soon learned that her mother,…

How US police use digital data to prosecute abortions

India has proposed a new comprehensive data privacy law that will mandate how companies handle data of its citizens, including permitting cross-border transfer of information with certain nations, three months…

India proposes permitting cross-border data transfers with certain countries in new privacy bill

Compliance with privacy and security frameworks like SOC 2, HIPAA and GDPR has become a central component not just of how organizations build trust with their users, but of how…

Laika laps up $50M for its automated security compliance platform

Companies are facing hundreds of millions of dollars in fines these days for failing to comply with data protection and data privacy rules, and that’s driving wave of organizations, and their…

DataGuard locks down $61M for data protection as a service

A non-binding opinion issued today by an influential advisor to the Europe Union’s top court could foreshadow a major regional development at the intersection of privacy and competition regulation —…

Advisor to Europe’s top court backs antitrust watchdogs looking at privacy

Indonesia’s parliament has introduced a data privacy law as its first motion months after encountering several breaches in the Southeast Asian country. On Tuesday, the Indonesian legislators passed the personal…

Indonesia passes much-anticipated data privacy law to put bad actors behind bars

It’s not the crime, it’s the cover up… The scandal-hit company formerly known as Facebook has fought for over four years to keep a lid on the gory details of…

Unsealed docs in Facebook privacy suit offer glimpse of missing app audit

Featured Article

Adtech’s compliance theatre is headed to Europe’s top court

For those watching the slow motion unpicking of surveillance advertising in the European Union here’s a fresh development on the long and winding road to a long-overdue legal reckoning: Multiple grounds for appeal lodged by industry body, the IAB Europe, against a breach finding earlier this year against its self-proclaimed…

Adtech’s compliance theatre is headed to Europe’s top court

A fat fine — of €405 million — is headed Instagram’s way after European Union privacy regulators came to a decision on a long-running complaint related to how the social…

Instagram fined €405M in EU over children’s privacy

As Twitter navigates a grueling legal battle with Elon Musk and his plans to acquire the company, yet another executive is leaving, according to a report by Insider, which Twitter…

Twitter’s VP of engineering to depart for Meta amid cybersecurity concerns, Musk takeover

Privacy breaches are not only bad for users, but also costly for tech companies. For example, GDPR fines now total $1.7 billion, and earlier this year Twitter had to pay…

Privado is ‘Grammarly for code privacy issues’

The explosive Twitter whistleblower complaint that was made public yesterday — detailing a raft of damning allegations across security, privacy and data protection issues (among others) by Twitter’s former former…

Twitter faces privacy scrutiny from EU watchdogs after Mudge report

Google is facing a fresh privacy complaint in Europe over ads it inserts into its Gmail email service in the guise of emails. Privacy advocacy group, noyb, has filed the…

Google faces ‘spam ads’ ePrivacy complaint in France

The world has gotten a lot more serious about privacy and data protection, but in many cases business models that rely on personalization of one kind or another have struggled…

Ravel emerges from stealth with privacy-first data tools based on scalable homomorphic encryption