Comcast's $117.5 Million Xfinity Settlement: The Cost of a Vulnerability Left Open
Comcast agreed to pay $117.5 million to resolve claims from the October 2023 Xfinity breach that exposed the data of more than 30 million customers. T...
Compliance & Regulatory Articles
752 articles on privacy laws, security frameworks, and regulatory compliance.
LabCorp's $35 Million AMCA Settlement: When Your Vendor's Breach Becomes Your Liability
LabCorp agreed to a $35 million settlement over the American Medical Collection Agency breach that exposed data on more than 10 million of its patient...
23andMe Breach Claimants to Receive $46.75 Million: Genetic Data, Bankruptcy, and a Settlement Built on the Wreckage
The administrator of 23andMe's bankruptcy plan agreed to pay $46.75 million to victims of the 2023 breach that exposed genetic and personal data of ro...
Spectrum Class Action: 40 Million Records, One Vishing Call, and the CPNI Question Charter Now Faces
A wave of class-action lawsuits accuses Charter Communications of failing to safeguard the data of Spectrum customers after a vishing attack let hacke...
Novo Nordisk Clinical Trial Data Breach: Why 'Pseudonymized' Is Not 'Anonymous' Under GDPR
Novo Nordisk disclosed that patient data from some clinical trials was copied externally in a cyberattack. The data was pseudonymized, not anonymized ...
South Korea Fines Coupang a Record $409 Million: Inside the Largest Data Breach Penalty in PIPC History
South Korea's Personal Information Protection Commission hit e-commerce giant Coupang with a record fine of more than $409 million after a breach expo...
From Chips to Models: How AI Became a Controlled Commodity, and What Compliance Teams Should Expect Next
The export-control shutoff of Fable 5 and Mythos 5 did not come out of nowhere. It is the latest step in a four-year arc that began with semiconductor...
When a Jailbreak Becomes a National-Security Event: Vulnerability Disclosure Governance for Frontier AI
A single, informal claim that someone had jailbroken Anthropic's Mythos 5 reportedly helped move the U.S. government to place the model under export c...
The Government Off-Switch: A Vendor-Risk and Continuity Playbook for the Age of Revocable AI Models
When the U.S. forced Anthropic to disable Fable 5 and Mythos 5 worldwide, paying enterprise customers lost the model with effectively no notice. Stand...
When Washington Switched Off an AI Model: Fable 5, Mythos 5, and the Export-Control Precedent That Should Worry Every Compliance Team
Anthropic released its most capable models, Fable 5 and Mythos 5, on June 9. Seventy-two hours later, a letter from Commerce Secretary Howard Lutnick ...
The Quiet Post-Quantum Deadline: On September 21, 2026, Your FIPS 140-2 Certificates Stop Counting for Federal Sales
Most post-quantum coverage focuses on a distant 'Q-Day.' The nearer, more concrete deadline is procurement: on September 21, 2026, every FIPS 140-2 ce...
OCR's HIPAA Risk Analysis Initiative Is Evolving in 2026 — And It's Coming for Risk Management Next
HHS's Office for Civil Rights has now brought a dozen enforcement actions under its HIPAA Risk Analysis Initiative, and the agency has signaled the pr...
Showing 12 of 752 articles
Load More →