Data protection regulations and compliance

Norfolk and Suffolk police hit by FoI-linked data breach

Latest UK police data breach relates to crime suspects, victims and witnesses across East Anglia, and comes just days after a similar incident at the Northern Irish service Continue Reading

By

• Alex Scroxton, Security Editor

Nutanix GPT-in-a-Box aims hyper-converged at AI/ML use cases

Nutanix targets a pre-configured bundle of AI/ML and GPT software with hyper-converged infrastructure and GPT to help organisations safely take advantage of learning networks Continue Reading

By

• Antony Adshead, Storage Editor

PSNI investigating second breach after laptop stolen

Just hours after accidentally disclosing the personal details of 10,000 personnel, the Police Service of Northern Ireland has notified a second data breach after a police issue laptop and documents were stolen from a parked car Continue Reading

By

• Alex Scroxton, Security Editor

UK voter data hacked in cyber attack on election watchdog

An unknown threat actor who attacked the UK’s Electoral Commission had access to data on millions of UK voters for over a year, the watchdog has revealed Continue Reading

By

• Alex Scroxton, Security Editor

Generative AI: Automating storage and backup management

We look at how generative artificial intelligence is being deployed to automate monitoring of repetitive tasks and report on enterprise storage and backup, but also the limits to its implementation Continue Reading

By

• Stephen Pritchard

‘Significant gaps’ in UK AI regulation, says Ada Lovelace Institute

UK government’s plans to diffuse regulatory responsibility for AI among existing regulators will mean the tech is “only partially regulated”, while its data reforms will undercut already-limited existing protections, says Ada Lovelace Institute Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Backup in the age of cloud

The 3-2-1 backup strategy remains relevant in the age of cloud, giving rise to hybrid approaches that combine on-premise and cloud backups to minimise data loss, reduce downtime and improve redundancy Continue Reading

By

• Aaron Tan, TechTarget

MPs launch inquiry into government use of data

The Public Administration and Constitutional Affairs Committee is to investigate the possibility of reforming the way government collects and analyses data, and whether the UK census could be scrapped Continue Reading

By

• Lis Evenstad

EU formally grants data adequacy to US

The European Commission has formally granted the US data adequacy, allowing companies and organisations to freely transfer personal data across the Atlantic via the EU-US Data Privacy Framework. But privacy activist Max Schrems has already committed to legally challenging the decision Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Pros and cons of cryptocurrency

Cryptocurrency benefits include decentralization, lower transaction fees and inflation protection. But it also comes with some challenges. Continue Reading

By

• Kinza Yasar, Technical Writer

Meta’s Threads hits app stores, but no EU launch in sight

Meta’s Twitter competitor makes its debut and signs up millions of users in just 12 hours, but concerns over compliance with the EU’s Digital Markets Act have sunk a pan-European launch for now Continue Reading

By

• Alex Scroxton, Security Editor

UK public increasingly concerned over NHS data sovereignty

Amid security concerns and AI advances, a majority of the British public still trusts the NHS to store and analyse their health data, but would prefer it remains domiciled in the UK Continue Reading

By

• Alex Scroxton, Security Editor

EU judgment sinks Meta’s argument for targeted ads

The EU Court of Justice has issued a significant judgment against Meta, ruling that national anti-trust bodies can investigate GDPR breaches, disrupting the platform’s entire basis for carrying out targeted advertising Continue Reading

By

• Alex Scroxton, Security Editor

How data is beating heart disease

In this week’s Computer Weekly, we find out how a new data strategy is helping the British Heart Foundation to raise money and support medical research. We examine the benefits of using AI in advanced malware detection. And we reveal why the Information Commissioner is under fire for weak responses to serious data breaches. Read the issue now. Continue Reading

ICO under fire for taking limited action over serious data breaches

The ICO has come under fire from lawyers and data protection specialists for just issuing written warnings to two public bodies over serious data breaches that placed people’s lives at risk Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Generative AI: Data privacy, backup and compliance

We look at generative AI and the risks it poses to data privacy for the enterprise, implications for backup, and potentially dangerous impacts on compliance Continue Reading

By

• Stephen Pritchard

Podcast: Cloud security, compliance and data classification

The rise of cloud has led to a proliferation of enterprise data and a rise in risk. We talk to Vigitrust CEO Mathieu Gorge about how to ensure compliance in a multicloud world Continue Reading

By

• Antony Adshead, Storage Editor

Oracle opens first EU-based sovereign cloud regions in Germany and Spain

Database software giant is making good on its July 2022 pledge to open a series of sovereign cloud regions to cater to the data protection needs of EU-based enterprises Continue Reading

By

• Caroline Donnelly, Senior Editor, UK

Nakivo adds ransomware scanning and new restore options

Backup maker adds malware scanning with big names in security to immutable backup copy functionality. “Tape’s not dead” either, with restore from the venerable medium now possible Continue Reading

By

• Antony Adshead, Storage Editor

Clop begins naming alleged MOVEit victims

Clop uploaded details of 12 new victims to its dark web leak site late on 14 June, many of them likely linked to the ongoing MOVEit cyber attack Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: Containers, Kubernetes, data protection and compliance

Containers offer benefits to application deployment, but they proliferate, so tracking them for compliance purposes can be a challenge. We talk to Mathieu Gorge, CEO of Vigitrust Continue Reading

By

• Antony Adshead, Storage Editor

Clop’s MOVEit ransom deadline expires

A seven-day deadline set by Clop for victims of its latest attack to contact it to arrange payment passes today Continue Reading

By

• Alex Scroxton, Security Editor

Arnold Clark data leak victims prepare legal action

More than 10,000 people who had their data stolen and leaked in a ransomware attack on the Arnold Clark car dealer network have signed up to a group legal action after facing elevated amounts of fraud Continue Reading

By

• Alex Scroxton, Security Editor

Ofcom data stolen in MOVEit cyber attack

Communications regulator Ofcom says data on employees and regulated communications companies was stolen by the Clop gang Continue Reading

By

• Alex Scroxton, Security Editor

Progress Software releases patch for second MOVEit Transfer vulnerability

Progress Software releases a patch for a second MOVEit Transfer issue, which was uncovered by third-party security specialist Huntress Security during post-incident code scanning Continue Reading

By

• Alex Scroxton, Security Editor

UK and US move closer to transatlantic data bridge deal

The British and American governments have committed, in principle, to a new data bridge agreement that will ease the free flow of personal data across the Atlantic Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: Storage, backup, AI and data classification at RSA 2023

Much discussion at RSA 2023 about artificial intelligence, the risks to data protection, storage and compliance, plus risk and data classification, especially its impacts on access and data management Continue Reading

By

• Antony Adshead, Storage Editor

Clop cyber gang claims MOVEit attack and starts harassing victims

The Clop cyber extortion and ransomware operation is demanding organisations pay a ransom to avoid data stolen via an exploited vulnerability in a file transfer product being leaked Continue Reading

By

• Alex Scroxton, Security Editor

Want to become a data-driven organisation? Start thinking differently about change management

Chatting with a client recently about the importance to a data-driven* organisation of having a good Chief Data Officer, or CDO, we turned to the topic of change management. But halfway through the ... Continue Reading

By

• Bryan Betts, Freeform Dynamics

Almost all ransomware attacks target backups, says Veeam

Some 93% of ransomware attacks go for backups and most succeed, with 60% of those attacked paying the ransom, according to a Veeam survey Continue Reading

By

• Antony Adshead, Storage Editor

Cohesity Turing aims AI tools at backup and ransomware

Backup supplier continues to enrich its ecosystem with more artificial intelligence for backup and ransomware, with chat-like reporting functions and new security partners in its alliance Continue Reading

By

• Antony Adshead, Storage Editor

Generally Accepted Recordkeeping Principles (the Principles)

Generally Accepted Recordkeeping Principles is a framework for managing records in a way that supports an organization's immediate and future regulatory, legal, risk mitigation, environmental and operational requirements. Continue Reading

By

• TechTarget Contributor

Nebulon aims Tripline at ransomware detection in storage

Tripline claims ransomware detection from samples every 30 seconds and works in conjunction with snapshots to deliver recovery from an attack in four minutes Continue Reading

By

• Antony Adshead, Storage Editor

OVHcloud aims to bring Glacier-like cloud archive to Europe

OVHcloud makes Cold Archive GA with deep archive storage cheaper than AWS’s offer and all based on IBM 3592 tape hardware spread across four sites with Atempo backup Continue Reading

By

• Yann Serra, LeMagIT
• Antony Adshead, Storage Editor

Data classification tools: What they do and who makes them

Data classification is necessary for all organisations for reasons that range from simply putting data on the most cost-efficient media to ensuring legal and regulatory compliance Continue Reading

By

• Stephen Pritchard

Police Scotland receive formal notice about cloud system

Scotland’s biometrics watchdog has issued Police Scotland with an information notice over its deployment of a cloud-based digital evidence system, following disclosure of major data protection concerns by Computer Weekly Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Veritas shows off software SAN for Kubernetes at KubeCON 2023

Veritas InfoScale aims to provide high-performance block access storage despite limitations such as a maximum node count of 16 per cluster Continue Reading

By

• Yann Serra, LeMagIT
• Antony Adshead, Storage Editor

Podcast: Ransomware, data protection and compliance

Ransomware is a huge and ever-present threat, but there are ways to avoid it and to mitigate its effects. We get key practical steps from Mathieu Gorge, CEO of Vigitrust Continue Reading

By

• Antony Adshead, Storage Editor

IT Priorities 2023: Cloud and disaster recovery top storage and backup plans

Cloud storage still the biggest project planned in data storage in 2023, with disaster recovery the most important area in data protection cited by TechTarget/Computer Weekly survey respondents Continue Reading

By

• Antony Adshead, Storage Editor

UK presses on with post-Brexit data protection reform

The revised version of the Data Protection and Digital Information Bill has had its second reading in Parliament as the government presses on with post-Brexit changes, but critics remain sceptical that the EU will be convinced to maintain the UK's data adequacy agreement Continue Reading

By

• Alex Scroxton, Security Editor

CW EMEA: Under attack and stressed out

In this month's CW EMEA, we look at how cyber attacks are taking a toll on security professionals, damaging their mental health and forcing some to quit. We also look at Finland's allure for tech entrepreneurs, how software is enabling a new business model for a Swedish car manufacturer, and the importance of backup testing. Read the issue now. Continue Reading

TikTok fined in UK over unlawful use of children’s data

The ICO has fined TikTok £12.7m for breaches of data protection law, including unlawfully collecting data on children under 13 Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: Cloud storage, data protection and compliance

The lure of cloud storage hides its drawback, namely that you can lose control of it from a compliance perspective. We talk to Mathieu Gorge, CEO of Vigitrust, about how to tame it Continue Reading

By

• Antony Adshead, Storage Editor

France latest to ban TikTok on government devices

Following bans in the UK and US, France has moved to enact restrictions on TikTok, and other social media apps, on government devices Continue Reading

By

• Alex Scroxton, Security Editor

Why Veeam thinks ransomware warranty payouts are unlikely

Veeam Data Platform v12 offers a financial guarantee to customers that can’t restore after ransomware attacks, but the backup supplier is convinced it won’t be making many payouts Continue Reading

By

• Antony Adshead, Storage Editor

Hitachi Energy emerges as victim of Clop gang’s Fortra attack

The power and energy division of Japanese conglomerate Hitachi has disclosed that it has fallen victim to a Clop cyber attack, but insists customer data is safe Continue Reading

By

• Alex Scroxton, Security Editor

Ransomware gangs harass victims to ‘bypass’ backups

Analysis reveals how cyber criminal gangs are turning to extensive, targeted harassment campaigns to force victims to pay up, even if their backups are in good order Continue Reading

By

• Alex Scroxton, Security Editor

Techno-nationalism explained: What you need to know

Techno-nationalism changes the way providers do business and the way users interact with tech. Continue Reading

By

• Ben Lutkevich, Site Editor

Velero wants to become the Kubernetes backup standard

Open source Velero offers modular data protection and disaster recovery functionality via API for Kubernetes container clusters in an effort to become the standard in the field Continue Reading

By

• Yann Serra, LeMagIT
• Antony Adshead, Storage Editor

Podcast: 2023 compliance and storage outlook

Geopolitical instability casts its shadow as organisations must think about cyber attacks, data location and what to do if things change quickly. We talk to Mathieu Gorge, CEO of Vigitrust Continue Reading

By

• Antony Adshead, Storage Editor

Backup testing: The why, what, when and how

We look at backup testing – why you should do it, what you should do, when you should do it, and how, with a view to the ways in which it will be made easier by forthcoming developments in backup software Continue Reading

By

• Antony Adshead, Storage Editor

Veeam bundles backup products into Veeam Data Platform

Backup and data protection specialist Veeam upgrades and rebrands, with a focus on the challenges of ransomware and rapid recovery, and a claimed 500 new functions Continue Reading

By

• Yann Serra, LeMagIT
• Antony Adshead, Storage Editor

Hycu aims at universal SaaS backup with R-Cloud

Hycu’s R-Cloud aims to provide an API-driven backup product for any software-as-a-service application for enterprise customers, based on a simple low-code development environment Continue Reading

By

• Yann Serra, LeMagIT
• Antony Adshead, Storage Editor

Container storage platforms: Big six approach starts to align

Container storage is a complex but vital task. We survey the big six storage makers and see methods are starting to align around management platforms Continue Reading

By

• Antony Adshead, Storage Editor

Backup maintenance: Make sure backups can deliver

Deploying backup but overlooking the need to make sure it works is a common error. We look at the why and how of backup maintenance to help ensure you can recover from your backups Continue Reading

By

• Stephen Pritchard

Tiger’s hybrid cloud storage targets medical imaging

Tiger Bridge targets vertical sectors that find it hard to migrate to the cloud by allowing data storage in the cloud while using files locally as if stored on-premise Continue Reading

By

• Antony Adshead, Storage Editor
• Yann Serra, LeMagIT

IT’s shift to the cloud: Veeam’s data protection report in detail

With half of servers in the cloud, most backup and nearly all disaster recovery cloud-centric, the shift to the cloud is significant – but container backup is one area that is yet to settle down Continue Reading

By

• Antony Adshead, Storage Editor

Veeam survey finds ransomware blocks digital transformation

Annual report shows secular trend to the cloud and increased use of containers, but prevalence of ransomware attacks means digital transformation is hindered Continue Reading

By

• Antony Adshead, Storage Editor

Atempo plots course to containerised backup with S3 storage

Containerised modularised backup services will allow integration with third-party systems and backup storage unified onto S3 object storage for cost and analytics purposes Continue Reading

By

• Yann Serra, LeMagIT
• Antony Adshead, Storage Editor

Data backup failure: Top 5 causes and tips for prevention

What can you do to prevent data backup failure? Learn how using the 3-2-1 rule, turning to cloud backup and following other practical steps can help protect your data. Continue Reading

By

• Rick Cook
• Nick Cavalancia, Techvangelism
• Stephen J. Bigelow, Senior Technology Editor

The Post Office IT scandal – cock-up or cover-up?

In this week’s Computer Weekly, the second phase of the Post Office IT scandal inquiry revealed further shocking details at every turn – we review the latest evidence. We examine progress of the roll-out of fast broadband connectivity across the UK. And as the Online Safety Bill returns to Parliament, we look at the ongoing arguments about how to keep the internet safe. Read the issue now. Continue Reading

Top 10 storage and backup customer stories of 2022

Here are Computer Weekly’s top 10 storage and backup customer stories of 2022 Continue Reading

By

• Antony Adshead, Storage Editor

Digital Ethics Summit: Who benefits from new technology?

Experts at the 2022 Digital Ethics Summit say expedited development cycles and obviously over-hyped PR material, in tandem with the public’s near-total exclusion from conversations around technology, is creating distrust towards the tech sector Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

NHS gets new guidance on public benefits of data sharing

NHS national data guardian Nicola Byrne has published new guidance on how health and social care bodies should approach the task of evaluating public benefit when using data for purposes beyond individual care Continue Reading

By

• Alex Scroxton, Security Editor

EU issues draft data adequacy decision in favour of US

The European Commission has concluded that the United States does ensure an adequate level of protection for personal data transferred from the European Union and will now launch the process towards the adoption of an adequacy decision Continue Reading

By

• Alex Scroxton, Security Editor

Cloud-based fingerprint system for UK police nears completion

Police Digital Service announces that a new cloud-based fingerprint system developed under its Transforming Forensics programme is nearly complete, but data protection concerns around the use of US-based cloud providers remain Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Cohesity doubles down on cyber-defence failings via backup

Datahawk service and Data Security Alliance bring clean data restores, ransomware artefact detection, data vaulting and data audit for a clearer understanding of attack impact Continue Reading

By

• Antony Adshead, Storage Editor

Unstructured data not exempt from compliance requirements

Concerned about regulatory compliance? Data protection teams must be familiar with all regional and industry regulations to back up unstructured data in a compliant manner. Continue Reading

By

• Brien Posey

Panzura partners with AWS on ransomware counter-measures

Panzura might have slipped beneath the waves, but it’s come back reinvigorated, and now boasts integration with AWS with ransomware protection and Outposts hardware Continue Reading

By

• Yann Serra, LeMagIT

Data management, backup becoming the CISO's responsibility

More and more CISOs are taking on responsibility for wider data management strategies, and this trend looks set to grow next year Continue Reading

By

• Alex Scroxton, Security Editor

Meta faces UK lawsuit over surveillance business model

The High Court case against Meta could set a precedent for millions of UK users to object to their personal data being collected and processed for advertising purposes Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Your staff are the frontline in your ransomware fight

As part of a solid cyber defence plan, the CISO must make sure that the frontline within the organisation is prepared for an attack, says Theodore Wiggins of Airbus Protect Continue Reading

By

• Theodore Wiggins, Airbus Protect

Ransomware, storage and backup: Impacts, limits and capabilities

We look at the impact of ransomware on storage and backup, how storage and data protection can best be used to combat ransomware, and how they fit in the fight against it Continue Reading

By

• Stephen Pritchard

Met Police removes nearly two-thirds of people from gangs matrix

Legal action by human rights group Liberty forces Met Police to overhaul its gangs violence matrix database Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

The next decade in enterprise backup

Backup set to adapt to deliver more security, ransomware protection and flash-speed restores, and deal with the complexity of multi-, hybrid cloud and container-based operations Continue Reading

By

• Stephen Pritchard

All means all when it comes to encryption

Nigel Thorpe, technical director at SecureAge, makes the case for encrypting everything all of the time when it comes to protecting data Continue Reading

By

• Nigel Thorpe

Dropbox code compromised in phishing attack

Cloud storage service says malicious actors successfully accessed some of its code within GitHub, but insists customer data is secure Continue Reading

By

• Alex Scroxton, Security Editor

How to build consumer trust with a privacy-by-design approach

Undertaken with the right mindset and technology, privacy by design delivers value to consumers and builds trust for the long term Continue Reading

By

• Emilie Gazeau

The risk of losing our EU data adequacy agreement is real

While some may welcome the government’s ambition to shake up the UK’s data protection regime, Westminster should be wary of drifting too far from the path charted by our US and European partners Continue Reading

By

• Sarah Pearce

ICO warns against using biometrics for ‘emotional analysis’

ICO warning highlights risk of ‘systemic bias’ and discrimination associated with organisations using biometric data and technologies for emotion analysis Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

ALPHV/BlackCat ransomware family becoming more dangerous

Researchers from Symantec share fresh insight into the ongoing development of the ransomware-as-a-service family known variously as ALPHV, BlackCat and Noberus Continue Reading

By

• Alex Scroxton, Security Editor

CISOs should spend on critical apps, cloud, zero-trust, in 2023

Faced with a global recession next year, security buyers should try to direct investment towards technology that protects customer-facing and revenue-generating workloads, say analysts Continue Reading

By

• Alex Scroxton, Security Editor

Data classification: What it is and why you need it

To be compliant, to ensure data is optimally protected, that it is available, that it can be analysed and that it is stored most cost-effectively – these are reasons why data classification is vital to organisations Continue Reading

By

• Stephen Pritchard

Home Office selects CGI as strategic delivery partner

IT services supplier will act as strategic delivery partner for the Home Office’s plans to modernise and join up UK law enforcement’s digital capabilities Continue Reading

By

• Sebastian Klovig Skelton, Data & ethics editor

Hibs push for the backup premier league with Acronis

Hibernian FC signs Acronis to get top division data protection and make the most of ticketing information and match footage as it tries to gain more value from the data it holds Continue Reading

By

• Antony Adshead, Storage Editor

Cyber security training ‘boring’ and largely ignored

Two-thirds of employees don’t bother to pay attention to cyber security training – and the fault does not lie with them Continue Reading

By

• Alex Scroxton, Security Editor

No More Ransom initiative helps 1.5 million people in six years

One and a half million people have now taken advantage of free ransomware decryption tools offered by a joint European project Continue Reading

By

• Alex Scroxton, Security Editor

Transatlantic PET contest open for entries

A joint UK-US innovation prize challenge for developers of privacy-enhancing technologies has opened for entries Continue Reading

By

• Alex Scroxton, Security Editor

ICO wants to ‘empower people through information’

Information Commissioner’s Office sets out commitment to safeguard the information rights of the most vulnerable people in UK society Continue Reading

By

• Alex Scroxton, Security Editor

NHS trust cuts costs and refresh cycle with Wasabi cloud storage

Imperial College NHS Trust expects to saves 30% in storage costs and cut back on five-year refresh headaches in a move that has seen backup and archive data move to the Wasabi cloud Continue Reading

By

• Antony Adshead, Storage Editor

Ransomware and backup: Overcoming the challenges

Ransomware attacks that exfiltrate data don’t nullify the value of backups to restore from, but the challenges – such as not restoring corrupted data – require careful planning Continue Reading

By

• Stephen Pritchard

Accountability in algorithmic injustice

Computer Weekly looks at the growing number of injustices involving algorithms and automated decision-making, and what can be done to hold governments and companies accountable for the failures of computer systems they deploy Continue Reading

By

• Andrew Kersley

ICO to cut back on fines for public sector data breaches

Information commissioner John Edwards sets out a revised approach to how the ICO handles data breaches in the public sector, saying fining victims risks punishing the public twice over Continue Reading

By

• Alex Scroxton, Security Editor

Backup maintenance: Five key points to consider

Effective backups need to ensure all data is protected, and to track media and software changes. We look at five key things to consider Continue Reading

By

• Stephen Pritchard

Veritas aims at autonomous backup discovery and provisioning

Veritas bets on a backup platform that can discover all enterprise data – on-premise and in the cloud – and make its own decisions about the optimal place to store copies Continue Reading

By

• Yann Serra, LeMagIT
• Antony Adshead, Storage Editor

What will the Data Reform Bill mean for UK businesses operating in the EU?

Following the government’s response to the Data Reform Bill consultation, Peter Galdies of DQM GRC looks at what might lie ahead for UK organisations working in the European Union Continue Reading

By

• Peter Galdies

Government responds to Data Reform Bill consultation

Westminster claims its new data laws will boost British benefits, protect consumers, and seize the ‘benefits’ of Brexit Continue Reading

By

• Alex Scroxton, Security Editor

Podcast: SaaS data protection vulnerability and how to manage it

We talk to backup and data management supplier Cohesity about the added vulnerabilities of software-as-a-service data in a hybrid cloud environment and how best to manage multiple data sources Continue Reading

By

• Antony Adshead, Storage Editor

Health data strategy to exorcise ghosts of GPDPR

Government publishes a revised data in health strategy, with an emphasis firmly on preserving the integrity and privacy of patients’ confidential information Continue Reading

By

• Alex Scroxton, Security Editor

Cloud-to-cloud backup: When native cloud protection is not enough

There is a certain amount of protection built into cloud services, but it has its limits and full data protection requires that cloud data is secured with cloud-to-cloud backup Continue Reading

By

• Stephen Pritchard