Privacy

US Senator Wyden Proposes Bill That Could Jail Executives Over Repeated Data Privacy Violations

U.S. Democratic Senator Ron Wyden released an early draft of a bill today that would subject company CEOs and senior executives to tough penalties including 10 to 20 years of imprisonment for failing to protect consumer data. more

Berners-Lee Warns About the Danger of Concentration Regarding Growing Dominance of Tech Giants

World Wide Web founder Tim Berners-Lee speaking during an interview this week, warned Silicon Valley technology giants have grown so dominant they may need to be broken up. more

First Round of GDPR Fines Coming by the End of the Year, Says EU Data Regulator

The EU's privacy regulator is predicting that the first round of enforcement actions under the new General Data Protection Regulation (GDPR) will be exercised in the coming months. more

Facebook Security Vulnerability Allowed Attackers to Steal User Access Tokens Affecting 50 Million

Facebook alerted users today that its engineering team on Tuesday had discovered a security issue affecting almost 50 million accounts. more

New Zealand’s Domain Name Commission Wins Injunction in a Lawsuit Against DomainTools

New Zealand's Domain Name Commission today won a motion for preliminary injunction in a US lawsuit against the company DomainTools. more

Study Finds GDPR Has Had Minimal Impact on Spam and Domain Registrations

Contrary to concerns regarding the effect of GDPR, "not only has there not been an increase in spam, but the volume of spam and new registrations in spam-heavy generic top-level domains (gTLDs) has been on the decline." more

Special Interests Circulating Draft Legislation to Cut Short ICANN’s Whois Policy Process

Special interests who oppose privacy are circulating draft legislation to cut short ICANN's Whois policy process, warns Milton Mueller in a post published today in Internet Governance Project. more

DomainTools Sued for Misusing New Zealand’s .NZ Domain Name Registration Information

Domain Name Commission Limited ("DNCL"), New Zealand's overseer for the country's .NZ domain, has filed a lawsuit against the domain name service company DomainTools. more

Anti-Phishing Working Group Proposes Use of Secure Hashing to Address GDPR-Whois Debacle

The AntiPhishing Working Group (APWG) in a letter to ICANN has expressed concern that the redaction of the WHOIS data as defined by GDPR for all domains is "over-prescriptive". more

European Data Regulators Throw ICANN Back to the Drawing Board for a Third Time on Whois Privacy

In a letter to ICANN, the chair of the European Data Protection Board (EDPB) makes it plain that even the organization's "interim" plan is fundamentally flawed, reports Kieren McCarthy in the Register. more

ACLU Released Guide for Developers on How to Respond to Government Demands That Compromise Security

It is not uncommon for government agents to force technology companies to create or install malicious software in products in order to help them with surveillance. The American Civil Liberties Union (ACLU) has released a guide for developers that is intended to help preserve security and customers' privacy. more

ICANN Files Legal Action Against Domain Registrar for Refusal to Collect WHOIS Data

Germany-based ICANN-accredited registrar EPAG owned by Tucows has informed ICANN that it plans to stop collecting Whois contact information from its customers as it violates the GDPR rules. more

Major US Telcos Selling Customer Location Information to Third Party Companies, Reports Krebs

While it is a known fact that mobile phones are giving away the approximate location of users' whereabouts for better call quality and emergency calls, security reporter Brian Krebs says major mobile providers in the U.S. are overstepping the boundaries. more

Internet Platforms Collecting User Data are Digital Sweat Factories, Says EU’s Data Protection Chief

"The digital information ecosystem farms people for their attention, ideas and data in exchange for so called 'free' services," says Giovanni Buttarelli, the European data protection supervisor. more

Researchers Discover Over 1.5 Billion Files Exposed Through Misconfigured Data Services

Many administrators misconfigure cloud storage, such Amazon Simple Storage Service (S3) buckets, resulting in the contents being publicly-accessible. more