Everything TechSec Feed has reported about data privacy: 8 stories, newest first. Part of our Privacy & Policy coverage.
Security teams must assess how Android's default opt-out setting links phone numbers to every Google account on a device, raising data privacy and identity management concerns.
The right to be forgotten does not delete data everywhere, but only from systems where the data controller lacks a legal basis to keep it.
Most retrieval-augmented generation failures stem from weak source controls rather than model vulnerabilities, shifting the security burden to data governance.
Processing access requests reveals that data fragmentation and legacy storage systems create operational bottlenecks far greater than the legal requirement itself.
Small firms hold child data without realizing it, creating silent liability through poor data hygiene and unmonitored third-party access.
Consent management is a technical protocol that records user permission, not just a legal checkbox that satisfies regulators after the fact.
Anonymization is not a single switch but a mathematical process that trades data utility for privacy, often leaving subtle links that can re-identify individuals.
Pseudonymization keeps data recoverable for business use, while true anonymization destroys the link to identity, creating distinct compliance and utility trade-offs.