- Published
- Source
- EFF
- Filed under
- Privacy, Law & courts
In a victory for data privacy, a federal court in New York definitively ruled that the Office of Personnel Management (OPM) violated the law when it disclosed millions of federal employee records to DOGE agents. In a summary judgment ruling issued on October 20, 2026, the court found that OPM violated two provisions of the Privacy Act—one restricting disclosure of personal records between agencies and another requiring agencies to protect the security and confidentiality of records. Since the case was…
What it means for organisations
- Know what personal data you hold, where it lives and who can reach it – most obligations start there.
- Collect only what you need, and be able to say why you hold it and for how long.
- Report a serious personal data breach to the ICO within 72 hours of becoming aware of it.
MyCyberWay training
Microsoft SC-401 exam training
Data protection is a security job too.
Tutor-led SC-401 preparation: classify and label sensitive information with Microsoft Purview, prevent leaks with DLP, keep and dispose of data with retention, and investigate insider risk – including data used by AI tools.
- Sensitivity labels and DLP
- Retention and eDiscovery
- Insider risk and DSPM for AI
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
