Top News: CNPD fines INE, Uber suffers data breach, and more

Portugal’s CNPD fines INE

Portugal’s National Data Protection Commission issued a fine of €4.3 million against the National Institute of Statistics (INE) for five counts of violation of the GDPR. The fine was imposed in relation to the 2021 census, where INE was found to be unlawfully processing personal health and religious data, failed to notify respondents of the 2021 census questionnaire, violated data transfer provisions, failed to conduct a data protection impact assessment and did not meet due diligence in selecting a subcontractor. Read More

Dental Practice sued for HIPAA violations

A California dentist was fined by the U.S. Department of Health and Human Services’ Office for Civil Rights over violations of the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. The provider was found to be inappropriately using social media for responding to patient reviews and, in turn, disclosed patients’ protected health information. Read More

Uber source code stolen in data breach

Uber faced a data breach after a cybercriminal stole “sensitive company information” from its third-party vendor Teqtivity. The leaked data reportedly included archives claiming to be source code associated with mobile device management platforms (MDM) used by Uber, Uber Eats and third-party vendor services. Read More

Telstra suffers data breach Australian telecom company Telstra announced that it suffered a data breach, affecting 132,000 customers. The company stated that an internal review found the details were made publicly available due to "a misalignment of databases". Read More

Microsoft rolls out EU Data Boundary

Microsoft is set to roll out “data boundary” for its European Union cloud customers to allow processing and storage of parts of their data in the region from January 1. The EU Data Boundary for the Microsoft Cloud will apply to all of its core cloud services – Azure, Microsoft 365, Dynamics 365 and Power BI platform. Read More