Ecuador’s data protection sanctions regime takes effect
26 May 2023
Ecuador’s Organic Law on Personal Data Protection is now fully in force, with corrective measures and sanctions applying.
Insights for North, Central, and South America, and the Caribbean.
Ecuador’s Organic Law on Personal Data Protection is now fully in force, with corrective measures and sanctions applying.
Microsoft and Five Eyes agencies warned that a Chinese state-sponsored group, Volt Typhoon, was hiding in US critical infrastructure networks.
Manufacturers seeking FDA clearance for connected medical devices must now include SBOMs and vulnerability management plans in submissions.
The FBI revealed it had secretly infiltrated the Hive ransomware gang, giving decryption keys to victims before seizing its servers.
HITRUST releases CSF v11, aligning its e1, i1 and r2 assessments and adding NIST SP 800-53 Rev. 5 as a source.
Virginia’s comprehensive privacy law takes effect, bringing GDPR-style controller and processor obligations to another US state.
LastPass revealed that attackers had copied a backup of customer vault data, including encrypted passwords and unencrypted website addresses.
The US health regulator has issued guidance that tracking pixels and similar tools on healthcare websites and apps may disclose protected health information.
The first agreement under the US CLOUD Act allows UK and US authorities to request data directly from each other’s service providers.
Florida now prohibits state agencies, counties and municipalities from paying ransoms and sets tight deadlines for reporting cyber incidents.
Brazil’s ANEEL Normative Resolution 964/2021 now requires electricity sector agents to maintain cyber security policies and report incidents.
Costa Rica’s new president declared a national emergency after Conti ransomware attacks crippled government systems, including tax and customs.