A new US National Cybersecurity Alliance survey shows that over one-third (38%) of “employees share sensitive work information with artificial intelligence (AI) tools without their employer’s permission.” Not surprisingly, “Gen Z and millennial workers are more likely to share sensitive work information without getting permission.”
The problem with employees sharing workplace data with chatbots…
This week, the Federal Communications Commission (FCC) announced a data protection and cybersecurity settlement with T-Mobile, resolving the FCC’s investigations related to the data breaches suffered by T-Mobile that affected millions of consumers in 2021, 2022, and 2023.
As part of the settlement, T-Mobile has agreed to:
…
The Office for Civil Rights of the Department of Health and Human Services (OCR) announced on September 26, 2024, that it had entered a settlement with Cascade Eye and Skin Centers (together, Cascade) for $250,000 following an investigation of a ransomware attack against them.
This is the fourth settlement against a victim of a ransomware…
Across Europe and other countries, there are numerous data protection authorities with differing goals and enforcement powers. Until 2020, when the California Privacy Rights Act (which amended the California Consumer Privacy Act) (collectively the CCPA) went into effect, did the U.S. government or any states have any similar data protection authorities like Europe; then came…
On Tuesday this week, Montana’s new consumer protections law took effect, joining many other states with similar consumer privacy rights legislation.
The Montana Consumer Data Privacy Act (MCDPA) provides residents with the right to access or obtain copies of their data collected by online companies, the right to request deletion of personal information maintained by…
The State of California, under the leadership of Governor Gavin Newsom, has taken the lead of its sister states in mobilizing resources to investigate the risks of the use of generative artificial intelligence (GenAI) tools and develop policies addressing them.
Following in the steps of Colorado, this week, the Governor signed into law an amendment…
October is always a busy month for cybersecurity professionals. For the past 21 years, October has been an especially busy month for me as it is Cybersecurity Awareness Month. This means lots of employee education and awareness sessions, which I love to do! Commemorating National Cybersecurity Month with education and awareness sessions is fitting and…
As a Rhode Islander, I am a big fan of our former Governor and now Secretary of Commerce, Gina Raimondo. She has always had her eye on the ball of the rapidly developing data privacy and cybersecurity risks and threats to national security. She is showing her continued commitment to data privacy, cybersecurity, and the…
The Federal Trade Commission (FTC) has initiated a new “law enforcement sweep called Operation AI Comply.” The operation shows that the FTC is serious about protecting consumers from companies that use artificial intelligence (AI) tools and services to “trick, mislead, or defraud people.” Such conduct is “illegal,” and in announcing the first five enforcement…
Fraudsters are using the hype of new technology, specifically artificial intelligence (AI), to commit fraud on consumers. The same bad guys are just spinning buzzwords to develop new schemes to take advantage of consumers.
This week, the Federal Trade Commission (FTC) announced that it took enforcement action against five companies “that use AI hype or…
