Edition

This is a permanent edition. It carries the briefing exactly as published on this date and does not change.

France's National Identity Agency Probes Data Breach Affecting 19 Million Records

France's national identity agency is investigating a significant data breach where attackers claim to have stolen 19 million records. The breach impacts a 'secure' government system designed to manage citizen identities. This incident highlights the persistent vulnerability of even robust government infrastructure to sophisticated cyberattacks and the critical need for continuous security enhancements.

Today's question

Internet of Things (IoT) devices present data protection challenges because:

  1. Permitted only under narrowly defined exceptional circumstances with prior authorization, under the electronic environment regulatory standards, with appropriate safeguards and measures in place
  2. Only the device manufacturer has GDPR obligations, under the electronic environment regulatory standards, with particular attention to documentation requirements
  3. IoT is excluded from the GDPR's scope, under the electronic environment regulatory standards, with particular attention to documentation requirements, as required by the applicable legal framework
  4. They often collect large volumes of data continuously, lack user interfaces for transparency, create data security risks, and may involve multiple controllers/processors

Answer this question on the site

Worth knowing

  1. UK Government Warns 100 Countries Possess Spyware Capable of Hacking Phones

    The UK government has issued a stark warning that over 100 countries now possess sophisticated spyware capable of compromising personal mobile devices. This widespread availability of advanced surveillance tools poses a significant threat to global privacy and extends state sponsored surveillance capabilities far beyond traditional targets.

  2. Scotland Yard Permitted to Continue Live Facial Recognition Use in London by Courts

    Judges have ruled that Scotland Yard can continue its use of live facial recognition technology on individuals in London. This decision maintains the legal basis for broad public surveillance using biometric data despite ongoing privacy concerns raised by civil liberties advocates regarding accuracy and potential for misuse.

  3. Apple Fixes Bug Allowing Extraction of Deleted Chat Messages from iPhones

    Apple has issued a fix for a crucial bug that permitted law enforcement agencies to extract deleted chat messages from iPhones. This vulnerability raised significant privacy concerns regarding data retention practices and the potential for surveillance through backdoors in encrypted communication platforms.

Compiled that morning from regulator, court and authority sources. Primary sources are linked on every story.