- Published
- Source
- The Hacker News
- Reported by
- 3 publishers
- Filed under
- Privacy, Regulation
WhatsApp's help pages carried hidden instructions for its support chatbot that told it not to recommend a data protection authority or regulator to users who could no longer delete their accounts, even though WhatsApp's own privacy policy for Europe tells users they can complain to one. The text sat in the pages' code, never shown on screen, until it was removed by October 18. Whether the…
What it means for organisations
- Know what personal data you hold, where it lives and who can reach it – most obligations start there.
- Collect only what you need, and be able to say why you hold it and for how long.
- Report a serious personal data breach to the ICO within 72 hours of becoming aware of it.
Also reported by 2 more publishers
MyCyberWay training
Compliance · part of our training
Regulation lands on the security team. We teach how it works day to day.
Compliance runs through our programmes: how ISO 27001 and NIST requirements land on daily SOC tasks and audit evidence in Blue Team Analyst, and designing controls to ISO 27001 Annex A, NIST CSF 2.0, CIS v8 and Cyber Essentials Plus in Blue Team Engineer – with risk assessment and a properly written risk register.
- ISO 27001 Annex A and NIST CSF 2.0
- CIS Controls v8 and Cyber Essentials Plus
- Audit evidence with Purview and Intune
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
