Privacy and data protection

Max Schrems’s NOYB initiates GDPR action

A privacy NGO led by Austrian lawyer Max Schrems is among the first to file complaints under the GDPR against Google, Instagram, WhatsApp and Facebook Continue Reading

By

• Warwick Ashford, Senior analyst

Former Macedonian PM convicted in corruption case exposed by illegal government surveillance

Information exposed by leaked recordings that were part an illegal mass surveillance campaign orchestrated under the government of former prime minster Nikola Gruevski have led to his conviction for corruption. He was found guilty of rigging a tender and receiving a luxury Mercedes as a bribe. He may still appeal the ruling Continue Reading

By

• Tena Prelec

London CDO: More groundwork needed to gain trust for data use

London’s chief digital officer, Theo Blackwell, says organisations need to do more groundwork if a smarter city is to be real possibility Continue Reading

By

• Brian McKenna, Senior Analyst, Business Applications

Now that’s what I call compliance II

Nobody’s been able to get in contact with Downtime’s marketing manager since our discovery of a GDPR-themed Spotify playlist back in March, but his driving licence was found by the Royal Thai ... Continue Reading

By

• Ryan Priest

MPs slam government for biometrics strategy delay

Science and Technology Committee questions legality of the police’s approach to deleting mugshots of innocent people, and says government’s reasons for four-year delay to a new strategy is “less than convincing” Continue Reading

By

• Lis Evenstad

GDPR may not be perfect, but it’s an important milestone in data protection

It's GDPR day, and TechUK's CEO Julian David writes about what is an important milestone in data protection in the digital world Continue Reading

By

• Julian David, TechUK

GDPR puts people first, says ICO

The day of 25 May 2018 marks the biggest change to UK data protection law in a generation, with benefits for businesses and consumers, according to the UK privacy watchdog Continue Reading

By

• Warwick Ashford, Senior analyst

Data protection as a competitive advantage

By now, many consumers in Asia and elsewhere would have received at least a couple of e-mails from merchants asking for consent to continue receiving marketing messages under Europe’s General Data ... Continue Reading

By

• Aaron Tan, TechTarget

Commitment is the watchword on GDPR D-Day

New rules for protecting European citizens’ personal data are now enforceable by law, and organisations are being advised to focus broadly on commitment rather than narrowly on compliance Continue Reading

By

• Warwick Ashford, Senior analyst

Grab outlines its approach to cyber security

Singapore-based ride-hailing company prefers detective controls rather than preventive ones to deter cyber threats – an approach it claims is less intrusive and costly to implement Continue Reading

By

• Aaron Tan, TechTarget

Stronger rules on data protection by EU institutions agreed

On the eve of the GDPR compliance deadline, European politicians agree new rules to strengthen data protection in EU organisations Continue Reading

By

• Warwick Ashford, Senior analyst

Security experts weigh in on GDPR checklists

Security experts give their views on what final checks businesses should be doing on the eve of the General Data Protection Regulation compliance deadline, while a survey reveals almost half of Brits have not heard of it Continue Reading

By

• Warwick Ashford, Senior analyst

NHS to launch national data opt-out tool

Patients will be able to opt out of having their health and care data shared by using an online tool developed by NHS Digital Continue Reading

By

• Lis Evenstad

CW Nordics: Finland delays e-voting plan

Security concerns have re-emerged to further frustrate the Finnish government’s plans to launch a national e-voting system. Also read about a study by the Stockholm School of Economics that looks at the likely impact of AI, machine learning and robotics on people’s lives. And find out why Norway has accelerated plans to scale up its national cyber security infrastructure. Continue Reading

EU cyber security agencies pledge to up cooperation

Four European cyber security agencies have agreed to increase collaboration in five key areas Continue Reading

By

• Warwick Ashford, Senior analyst

New UK Data Protection Act not welcomed by all

Legislation makes the UK one of the first countries to implement the GDPR in local law, but some have criticised it as a “lost opportunity” Continue Reading

By

• Warwick Ashford, Senior analyst

UK calls for new data-sharing model with EU

The UK has proposed a new data-sharing model to ensure ongoing data protection collaboration and free flow of data between the EU and the UK post-Brexit Continue Reading

By

• Warwick Ashford, Senior analyst

Compliance in the cloud: Avoiding the cloud compliance trap

When you hand over data to a cloud provider, you don’t hand over responsibility for legal and regulatory compliance. Beware of falling into a cloud compliance trap Continue Reading

By

• Stephen Pritchard

Mobile fraud up 680% since 2015, RSA reports

Fake profiles and throw-away devices are transforming social media into a cyber criminal marketplace, a fraud report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Application and device security under the spotlight

The security of internet-connected devices and associated applications has become a significant concern, prompting suggestions legislation may be required, while the UK government’s recent Secure by Design review suggests several solutions, including legislative measures Continue Reading

By

• Peter Ray Allison

Skills shortage a major cyber security risk

Skill shortages remain a major risk to long-term information security capability and business is still struggling to defend against cyber breaches – but it is getting better at dealing with them, an IISP survey shows Continue Reading

By

• Warwick Ashford, Senior analyst

Facebook is ready for GDPR, says Zuckerberg

Facebook chief Mark Zuckerberg has claimed the social network is ready for GDPR, but failed to give any answers to the most probing questions posed by European MEPs Continue Reading

By

• Warwick Ashford, Senior analyst

Ethics and tech – a double-edged sword

Just because a business activity is legal doesn’t mean it will be acceptable to customers, as the ethical debates in tech are proving Continue Reading

By

• James Kitching, Coffin Mew

Security researchers find fourth CPU flaw

Security researchers have reported another flaw in common microprocessor chips related to the Meltdown and Spectre vulnerabilities Continue Reading

By

• Warwick Ashford, Senior analyst

Sweden’s Telenor makes GDPR consent personal

Telenor Sweden says it has seen market-leading results for General Data Protection Regulation consent after enlisting a customer experience firm to manage the process Continue Reading

By

• Alex Scroxton, Security Editor

Most firms will not be GDPR-ready by compliance deadline

Survey of IT decision-makers shows one-fifth of companies lack continuous encryption capabilities and only half have the systems required for the right to erasure and the right to rectification. Continue Reading

GDPR is here – are you ready?

The EU’s new data protection regulation, GDPR, comes into force this week. In this edition of Computer Weekly, we ask if companies are ready for it and look at what happens if you’re not yet compliant. Our latest buyer’s guide examines digital transformation and the role of the CIO. And we find out how technology is changing the traditional sport of cricket. Read the issue now. Continue Reading

Finland government examines centralised cyber defence

The Finnish government is attempting to centralise its fight against increasing cyber threats to its infrastructure Continue Reading

By

• Gerard O'Dwyer

Google sued for £3.2bn for tracking UK iPhone browsing

A lawsuit by a group called Google You Owe Us is seeking compensation from Google for tracking millions of UK iPhone users’ browsing data Continue Reading

By

• Warwick Ashford, Senior analyst

ICO fines University of Greenwich £120,000

The UK privacy watchdog has issued a monetary penalty against the University of Greenwich for a "serious" security breach Continue Reading

By

• Warwick Ashford, Senior analyst

UK government promises laws to police 'Wild West Internet'

UK government plans laws to make online activity safer after green paper reveals more needs to be done to protect citizens Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

ICO could use new GDPR powers in Facebook probe

UK privacy watchdog is considering using new powers in its investigation of Facebook, while the government is considering new laws to police social media firms Continue Reading

By

• Warwick Ashford, Senior analyst

APAC organisations could lose $1.75tn from cyber attacks

A study by Frost and Sullivan has found that losses from cyber security incidents could account for 7% of the region’s GDP in 2017 Continue Reading

By

• Aaron Tan, TechTarget

NCSC calls for greater interaction with UK business

The UK’s cyber security agency has called for greater interaction with business, particularly when it comes to cyber security incidents Continue Reading

By

• Warwick Ashford, Senior analyst

Most UK marketers GDPR ready, but not all firms have a plan

Most UK marketers believe they are ready for GDPR, but a worrying number believe their employers may not be, as businesses are urged to embrace the positives a week before the compliance deadline Continue Reading

By

• Warwick Ashford, Senior analyst

BYOD in UK SMEs linked to security incidents

Bring your own device practices have been identified as a cyber security risk for six in 10 SMEs in research published a week ahead of the GDPR compliance deadline Continue Reading

By

• Warwick Ashford, Senior analyst

GDPR compliance: Addressing the overlooked in enterprise IT infrastructures

As the GDPR compliance deadline approaches, enterprises need to ensure they have looked beyond the headline-grabbing aspects of the regulation so they do not fall foul of the incoming data protection regulations Continue Reading

By

• Stuart Burns

GDS seeks advice on migration from Public Services Network

The Government Digital Service has started the process of moving public sector organisations away from the Public Services Network Continue Reading

By

• Alex Scroxton, Security Editor

Use GDPR to propel business forward, says ICO

GDPR is about a new way of doing things that businesses can use to their advantage, and cyber security is a key element, according to the Information Commissioner’s Office Continue Reading

By

• Warwick Ashford, Senior analyst

Report highlights security risk of open source code to business

Increased adoption of open source code is introducing vulnerabilities into commercial software, with many audited codebases containing the Apache Struts flaw that enabled the Equifax breach, a report shows Continue Reading

By

• Warwick Ashford, Senior analyst

Most firms see GDPR as an opportunity

A growing number of organisations consider the GDPR to be an opportunity to improve the way they handle data privacy and security, while leaders are using it as an opportunity for full business transformation, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

US considers UK-style cyber defence model

The US is considering adopting a similar cyber defence model to the UK’s in recognition of the growing threat to all levels of society Continue Reading

By

• Warwick Ashford, Senior analyst

Fintech professional’s tech predictions: 8- Fake personal data.

There will be a law that reduces the number of required fields in online reforms to reduce the amount of unnecessary information given to organisations. Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

SMEs more worried about GDPR’s threat to reputation than fines

SMEs are more worried about the damage GDPR non compliance will do to their reputations than their wallets Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Credential theft a top priority, Rapid 7 report shows

Credential theft is still a top priority for organisations to address in terms of making it more difficult for cyber attackers to gain unauthorised access to their networks, report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Cross-site scripting a top vulnerability, hackers find

Despite the much-publicised advances in cyber attack techniques, a well-known, well-documented and avoidable vulnerability is still the most popular for attackers to exploit – along with others like it that are often overlooked, white hat hackers reveal Continue Reading

By

• Warwick Ashford, Senior analyst

Cage director Rabbani heads for Supreme Court after appeals court rules password demands lawful

Muhammad Rabbani, director of campaigning group Cage, will appeal to the Supreme Court after Court of Appeal rules that police did not act unlawfully by demanding his computer and mobile phone passwords under Section 7 of the Terrorism Act Continue Reading

By

• Bill Goodwin, Computer Weekly

Enterprise cyber threat remediation ineffective, study shows

Enterprise cyber threat remediation needs to improve in several key areas, according to an analysis of common remediation strategies Continue Reading

By

• Warwick Ashford, Senior analyst

BSI launches kitemark for internet of things devices

The British Standards Institution has launched a new kitemark for IoT devices, designed to improve consumer trust in the technology Continue Reading

By

• Alex Scroxton, Security Editor

No need to panic about Efail attacks

Initial reports about vulnerabilities in email encryption technologies have urged organisations to disable encryption tools, but some security experts are taking a more balanced approach Continue Reading

By

• Warwick Ashford, Senior analyst

It’s not too late to get GDPR ready

With the GDPR compliance deadline on 25 May 2018, there is little time to get ready, but it is not too late, according to the IAPP, which provides a checklist to help organisations ensure they are in the best position possible for the deadline Continue Reading

By

• Paul Jordan, International Association of Privacy Professionals (IAPP)

Technology continues to transform crime, warns NCA

The UK’s National Crime Agency warns that developments in technology will continue to transform the future crime landscape, in its latest report on serious and organised crime Continue Reading

By

• Warwick Ashford, Senior analyst

Police Scotland did not inform public of mobile phone searches

Members of the Scottish Parliament heard that Police Scotland did not conduct impact assessments or give explanations to the public when they were accessing private data on their mobile phones Continue Reading

By

• Bill Goodwin, Computer Weekly

EFF welcomes backdoor-blocking US bill

International digital rights organisation welcomes proposed US legislation that will prevent the government from forcing a company to build backdoors into encrypted products and services Continue Reading

By

• Warwick Ashford, Senior analyst

Hacking the internet of things just got easier – it’s time to look at your security

Are you taking security for internet-connected devices seriously enough? Continue Reading

By

• Dan Mosca, PA Consulting

CW Benelux: Rotterdam charts course to become world’s smartest port

The Port of Rotterdam in the Netherlands is using internet of things and artificial intelligence technology from IBM in a bid to become the world’s smartest port. Also read how companies in the Netherlands are only partly ready for the country’s version of the EU’s General Data Protection Regulation (GDPR), and why the European Central Bank thinks cash will remain in use in the Eurozone for a very long time. Continue Reading

Embrace GDPR to remain competitive, says OWI

The EU’s General Data Protection Regulation is set to raise the bar internationally for data protection and should be embraced to remain competitive, says report Continue Reading

By

• Warwick Ashford, Senior analyst

Equifax breach lessons not learned

Businesses are still downloading vulnerable versions of the software that was at the heart of the Equifax data breach and failing to update to safe versions, a security firm has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Breach disclosure time still high, report shows

Companies are getting faster at disclosing breaches, but the average is still too high in the light of the GDPR and other breach disclosure regulations, a report shows Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Five tips for killing the campers on your network

Why is reducing cyber attacker dwell time important and how should this be tackled? Continue Reading

By

• Adrian Davis, (ISC)²

Financial sector cyber-related laws are a bellwether, says Deloitte

As the regulatory landscape becomes more complex, organisations should look to the financial sector to see what else is coming, as well as focus on three key areas of GDPR compliance, according to Deloitte Continue Reading

By

• Warwick Ashford, Senior analyst

Fintech professional’s tech predictions: 7- support for disconnecting from the connected world

Young people will start disconnecting from connected world as risks outweigh benefits Continue Reading

By

• Karl Flinders, Chief reporter and senior editor EMEA

Virtual tripwire to keep elephant poachers out of Zambian national park

Cisco and Dimension Data are working to protect Zambia’s at-risk elephant population after a successful pilot project in South Africa Continue Reading

By

• Alex Scroxton, Security Editor

Majority of security professionals favour shorter disclosure deadline

Google’s Project Zero unit’s 90-day deadline for software suppliers to disclose vulnerabilities has always been controversial, but a survey reveals that most security professionals feel even that is too long Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: More time equals more opportunity for cyber attackers

Why is reducing cyber attacker dwell time important and how should this be tackled? Continue Reading

By

• Rory Alsop

Security pros must avoid hype, demonstrate value, says RBS CISO

Security professionals must avoid over-hyping cyber threats, and penetration testers need to reinvent themselves to demonstrate value to businesses to remain relevant, says RBS CISO Continue Reading

By

• Warwick Ashford, Senior analyst

Twitter password security bug underlines need for industry change

Twitter has revealed that a bug in its systems resulted in some passwords being stored in a log in clear text, underlining the need for alternative authentication methods, say industry commentators Continue Reading

By

• Warwick Ashford, Senior analyst

Fibre network breakthrough has implications for data security

Researchers have devised a new protocol that they claim vastly extends the range of quantum key distribution over fibre networks Continue Reading

By

• Alex Scroxton, Security Editor

City Police use Lego simulation to teach businesses cyber security

City of London Police are offering to train business leaders and IT security in cyber security using a Lego simulation that is surprisingly close to real life Continue Reading

By

• Bill Goodwin, Computer Weekly

Redscan warns of GDPR phishing scams

Cyber criminals are using fake GDPR-related privacy notices to trick recipients into disclosing personal data and spread malware, a security firm warns Continue Reading

By

• Warwick Ashford, Senior analyst

Cambridge Analytica closure will not halt probe, says ICO

The London-based data mining firm at the heart of the Facebook data exploitation scandal has announced it is closing, but the ICO says the probe into its actions will still go ahead Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Containment should be top priority in cyber breaches

Why is reducing cyber attacker dwell time important, and how should this be tackled? Continue Reading

By

• Paddy Francis

Fresh blow for Facebook as court refuses stay in Max Schrems legal action

Facebook has lost a legal attempt to delay the Irish High Court from seeking answers from the European Court of Justice over the legality of EU-US data transfers Continue Reading

By

• Bill Goodwin, Computer Weekly

ARM aims to boost physical security of IoT

Chipmaker ARM announces microprocessor aimed at improving the physical security capabilities of devices making up the internet of things Continue Reading

By

• Warwick Ashford, Senior analyst

Workday to continue investing heavily in APAC

Cloud applications supplier has increased its investments in the region by more than 50% in the past year, and is looking to maintain its double-digit growth in international markets Continue Reading

By

• Aaron Tan, TechTarget

Security industry welcomes City of London Police cyber initiative

The security industry has welcomed plans to fight cyber crime in the heart of London using a community-based approach, but says more investment in cyber security skills is required Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Reducing cyber attacker dwell time is critical

Why is reducing cyber attacker dwell time important, and how should it be tackled? Continue Reading

By

• Simon Persin, Turnkey Consulting

Password practices still poor despite increased threats

Despite growing cyber threats and heightened global awareness of hacking and data breaches, password behaviours remain poor and UK users are in denial, a study has revealed Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Reducing dwell has never been more important

Why is reducing cyber attacker dwell time important, and how should this be tackled? Continue Reading

By

• Petra Wenham

Getting cyber security innovation to market is key, says NCSC

Getting cyber security innovation to market is an important area of focus, according to the National Cyber Security Centre, which runs a cyber accelerator programme and recently stated a Dragons Den style security innovation pitch at the 2018 CyberUK conference Continue Reading

By

• Warwick Ashford, Senior analyst

Security industry welcomes NHS move to Windows 10

Representatives of the security industry have welcomed the announcement that the NHS will be migrating to Windows 10 as part of a multi-million pound deal with Microsoft, but warn that the move will not be without its challenges Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: GDPR compliance one good reason to cut attacker dwell time

Why is reducing cyber attacker dwell time important, and how should this be tackled? Continue Reading

By

• Maxine Holt, Omdia

Only 5% of charities are ready for GDPR, survey shows

A survey shows relatively few charities are prepared for new data protection regulations, highlighting several areas for improvement Continue Reading

By

• Warwick Ashford, Senior analyst

Most organisations unprepared for GDPR, survey finds

Despite the vast majority of businesses agreeing that GDPR affects them, only 5% say they are fully prepared for it, according to a BSI survey Continue Reading

By

• Zach Emmanuel, Computer Weekly

DWP to spend nearly £15m on GDPR

A single government department plans to spend nearly £15m on preparing for new European data protection legislation, a report reveals Continue Reading

By

• Warwick Ashford, Senior analyst

Government given six months to rewrite snoopers’ charter

The government has until 1 November 2018 to rewrite a key section of the Investigatory Powers Act 2016, after the high court declared them unlawful in a judicial review brought by human rights group Liberty Continue Reading

By

• Bill Goodwin, Computer Weekly

GDPR and the right to erasure: hiding in the shadows or welcome shade?

The European Union's new data protection laws introduce a right to be forgotten – but what does it means for corporate IT? Continue Reading

By

• Mark O’Halloran, Coffin Mew

British banks target Israeli security technology

British banks are turning to Israel’s high-tech sector to protect against cyber attacks Continue Reading

By

• Bill Goodwin, Computer Weekly

Facebook posts strong first quarter despite privacy scandal

The data exploitation scandal that hit Facebook has not yet had an adverse impact on advertising revenues or user activity, according to first quarter financial results Continue Reading

By

• Warwick Ashford, Senior analyst

Security Think Tank: Reduce attacker dwell time with defence in depth

Why is reducing cyber attacker dwell time important and how should this be tackled? Continue Reading

By

• Mike Gillespie

EC calls on online platforms to develop common code of practice to tackle ‘disinformation’

The European Commission says online platforms such as social media and video sites, have not done enough to tackle unethical use, and calls on them “to decisively step up their efforts to tackle online disinformation” Continue Reading

By

• Lis Evenstad

NCSC shows support for common standards for secure communication

The UK cyber security authority is supporting an industry drive towards common standards for secure communication by joining an industry organisation that aims to achieve this goal Continue Reading

By

• Warwick Ashford, Senior analyst

Digital economy research projects to get funding

Research projects aimed at building trust, privacy and security in the use of personal data and digital technologies are to receive funding Continue Reading

By

• Warwick Ashford, Senior analyst

EC sets out plans for sharing health data across borders

The European Commission wants to introduce EU-wide standards for health records, and allow EU citizens to access and share their patient information securely across member states Continue Reading

By

• Lis Evenstad

Government urges UK businesses to beef up cyber crime defences

Government is urging UK organisations to defend against cyber crime, as newly released figures show that large numbers of businesses and charities suffered at least one cyber attack in the past year Continue Reading

By

• Warwick Ashford, Senior analyst

Most firms will not be GDPR-ready by compliance deadline

Survey of IT decision-makers shows one-fifth of companies lack continuous encryption capabilities and only half have the systems required for the right to erasure and the right to rectification Continue Reading

By

• Warwick Ashford, Senior analyst

Employees still in the dark about data protection

With just a month to go before the GDPR compliance deadline, many employees still don’t know how to protect confidential data, a study shows Continue Reading

By

• Warwick Ashford, Senior analyst

One month to GDPR compliance deadline

With one month to go before the deadline for compliance with EU’s General Data Protection Regulation, organisations should ensure they are able to meet minimum requirements to defend against adverse scrutiny Continue Reading

By

• Warwick Ashford, Senior analyst

London plans to be a smarter city

In this week’s Computer Weekly, we meet the first ever chief digital officer for London, Theo Blackwell, and find out about his plans for making the capital a smarter city. SAP has overhauled its controversial indirect licensing policy – we look at the implications for users. What are the jobs of the future in retail as the sector is transformed by technology? We ask the experts. Read the issue now. Continue Reading

Global cyber crime worth $1.5tn a year, study reveals

Cyber criminal operations worldwide are generating revenues that equal the GDP of Russia though a web of profit that involves legitimate businesses, research has revealed Continue Reading

By

• Warwick Ashford, Senior analyst