The GDPR (General Data Protection Regulation) is supposed to help individuals keep their information private, but as it turns out, it could also potentially serve to help attackers as well. . In a session at the Black Hat USA conference in Las Vegas, titled, "GDPArrrrr: Using Privacy Laws to Steal Identities", James Pavur, DPhil student and Rhodes Scholar at Oxford University , outlined how he was able to abuse a key component of the GDPR to get access to personally identifiable information for his fiance. Pavur said that there are multiple exploitable properties of GDPR, that a social engineering attacker could seek to exploit. The first is fear of non-compliance, since GDPR prescribes large fines if there is a violation. The link for this article located at Infosecurity is no longer available. . The GDPR was created to protect personal data in the EU, but studies show that malicious actors exploit it using social engineering for identity theft. GDPR exploitation, identity theft awareness, privacy regulations, social engineering tactics, cybersecurity threats. . Brittany Day
States from Maine to California have recently enacted privacy, data security, cybersecurity, and data breach notification laws. We break down what each of these laws entails. . While at the federal level security and privacy legislation are lost in a morass of partisan politics and corporate lobbying delays, states have been moving ahead to push through an impressive number of important bills that help fill in the gaps. A search of the Legiscan database reveals that hundreds of bills that address privacy, cybersecurity and data breaches are pending across the 50 states, territories and the District of Columbia. The most comprehensive piece of state-level legislation across these often-intertwined categories that has been enacted over the past two years is the sweeping California Consumer Privacy Act (CCPA) , enacted and signed into law on June 28, 2018. Inspired by the EUs groundbreaking General Privacy Data Protection Regulation (GDPR) , the legislation aims to give the state's consumers greater control over how businesses collect and use their personal data. . Recent state privacy laws, from Maine to California, challenge businesses to enhance data security practices and comply with new consumer protections on personal data. State Privacy Laws, Data Security Legislation, Cybersecurity Standards, Data Breach Notification. . Brittany Day
Bad facts make bad law, the saying goes. But sometimes, bad people make good law. Consider the following exhibits: a cocaine dealer, a child pornographer, a purveyor of suspect penis-enlargement pills, and two accused hackers.. The courtroom challenges they brought resulted in rulings that dramatically expanded your rights, from helping to keep your email and whereabouts private to reducing gadget searches at the U.S. border and limiting the legal definition of unlawful hacking. You don The link for this article located at Wired is no longer available. . The courtroom challenges they brought resulted in rulings that dramatically expanded your rights, fr. facts, saying, sometimes, people, consider, follo. . LinuxSecurity.com Team
Oh dear, poor Google seem to be catching all kinds of flak over their Wifi Data Collection. The UK Met are already investigating them and they are being pulled to pieces in Germany too with France also weighing in. The latest to jump on the bandwagon is Australia which is stating they have breached the Australian Privacy Act.. It seems they might have dropped the ball big time with this one, although with the amount of money they have I doubt whatever legal restitution is served it won The link for this article located at Darknet UK is no longer available. . Australia alleges that Google violated privacy regulations by collecting Wifi data; potential legal ramifications now hang over the tech behemoth.. Google Privacy, Data Collection Issues, Australian Regulations. . LinuxSecurity.com Team
E-Loan CEO Chris Larsen isn't planning a run for public office, but he's still an advocate for the people. Larsen believes the financial industry is "fundamentally corrupt" and in need of reform - beginning with a strict consumer privacy protection law. . . . . E-Loan CEO Chris Larsen isn't planning a run for public office, but he's still an advocate for the people. Larsen believes the financial industry is "fundamentally corrupt" and in need of reform - beginning with a strict consumer privacy protection law. He's arming his cause with California's century-old ballot initiative process, which gives voters the power to directly enact laws in the state. "The loose privacy rules in place are a catastrophe waiting to happen," Larsen said. Larsen last year contributed $1 million to seed Californians for Privacy Now, an organization that is spearheading an effort to place a consumer financial data protection initiative on the state's 2004 ballot. The group's executive committee includes representatives from AARP, the American Civil Liberties Union, CALPRIG, the Consumer Federation of California, Consumers Union, Privacy Rights Clearinghouse and E-Loan. . E-Loan leader Chris Larsen promotes reforms in consumer privacy and pushes for enhanced legislative safeguards in the finance industry.. Chris Larsen, E-Loan, Consumer Advocacy, Data Protection, Financial Reform. . LinuxSecurity.com Team
A group of American companies is attempting this week to persuade the European Union to relax its rules governing data protection, claiming they are bad for business. The 10 companies, who dub themselves the Global Privacy Alliance (GPA) and whose members include IBM, Oracle and VeriSign, believe that the EU has put too much emphasis on the protection of individuals' privacy, and not enough on ensuring the free flow of information between companies. . . .. A group of American companies is attempting this week to persuade the European Union to relax its rules governing data protection, claiming they are bad for business. The 10 companies, who dub themselves the Global Privacy Alliance (GPA) and whose members include IBM, Oracle and VeriSign, believe that the EU has put too much emphasis on the protection of individuals' privacy, and not enough on ensuring the free flow of information between companies. The GPA wants several significant changes to be made to EU privacy laws--the simplification of the cross-border flow of data, possibly through industry self-regulation rather than legislation; the harmonization of EU privacy regulation between member states; the relaxation of restrictions on data sharing between affiliate companies, and the exclusion of 'business contact data' from such laws. The link for this article located at ZDNET is no longer available. . U.S. corporations urge the EU to relax privacy regulations that impact data movement and commercial activities as anxieties rise.. Data Protection, EU Regulations, Privacy Laws. . LinuxSecurity.com Team
Five years ago, when the Organization for Economic Cooperation and Development (OECD) released their guidelines for cryptography policy, crypto advocates cheered and declared victory. After a hard fought battle, we had forced the OECD to back away from the U.S. government's . . . . Five years ago, when the Organization for Economic Cooperation and Development (OECD) released their guidelines for cryptography policy, crypto advocates cheered and declared victory. After a hard fought battle, we had forced the OECD to back away from the U.S. government's efforts to restrict encryption worldwide. After the guidelines, countries around the world issued crypto policies that called for the free and unfettered use of encryption products to promote e-commerce and protect privacy. Eventually, even the U.S. gave up anddropped most export controls. In the last EPIC Cryptography and Privacy survey, written in 2000, there were only a handful of nations that still restricted crypto, like Burma, Belarus, and Russia -- countries you really didn't want to go to anyway. We expected a golden era of privacy and security, with encryption allowing us to protect our computers and communications from attacks, make purchases with digital cash, and anonymously browse the net. Once crypto was out in the world it would become ubiquitous and could never be restricted again. We even got complacent. We moved onto new battles. It's time to wake up again. Worldwide, there is now a movement back towards restrictions in the name of fighting cybercrime and terrorism. And we are losing again. The link for this article located at SecurtyFocus is no longer available. . As nations navigate cryptocurrency regulations, they seek to balance cybersecurity and financial integrity, enforcing controls to promote transparency and combat fraud. cryptography policy, encryption regulations, global security trends. . LinuxSecurity.com Team
New Zealand telecommunications network operators and Internet service providers will be legally obligated to install a system that will allow police or the secret service to eavesdrop on phone calls or e-mail messages, the New Zealand government has confirmed. . . .. New Zealand telecommunications network operators and Internet service providers will be legally obligated to install a system that will allow police or the secret service to eavesdrop on phone calls or e-mail messages, the New Zealand government has confirmed. Many will also have to pay for the capability, Associate Minister of Justice Paul Swain said today. The changes to New Zealand's telecommunications laws were tabled last year. The legislation - the Telecommunications (Interception Capability) Bill - is being drafted right now, the minister said. The link for this article located at Newsbytes is no longer available. . In New Zealand, service providers must implement surveillance capabilities for law enforcement and monitoring activities.. Telecommunications Legislation, Eavesdropping Compliance, Internet Privacy Laws. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.