- Published
- Source
- The Hacker News
- Filed under
- Regulation
The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying Grindr users' sensitive data to advertisers. The administrative penalty is the largest issued by the data protection watchdog, arguing the case merited a high fine because of the "very serious" nature of the…
What it means for organisations
- Check whether it applies to you – by sector, size and the services you provide.
- Map it to the controls you already have: most new rules ask for evidence of things you should already do.
- Keep records of decisions, risks and incidents – regulators ask for evidence, not intentions.
More helpICO: guidance for organisations (opens in a new tab)
MyCyberWay training
Compliance · part of our training
Regulation lands on the security team. We teach how it works day to day.
Compliance runs through our programmes: how ISO 27001 and NIST requirements land on daily SOC tasks and audit evidence in Blue Team Analyst, and designing controls to ISO 27001 Annex A, NIST CSF 2.0, CIS v8 and Cyber Essentials Plus in Blue Team Engineer – with risk assessment and a properly written risk register.
- ISO 27001 Annex A and NIST CSF 2.0
- CIS Controls v8 and Cyber Essentials Plus
- Audit evidence with Purview and Intune
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
