GossiTheDog, to random
@GossiTheDog@cyberplace.social avatar

For those who aren’t aware, Microsoft have decided to bake essentially an infostealer into base Windows OS and enable by default.

From the Microsoft FAQ: “Note that Recall does not perform content moderation. It will not hide information such as passwords or financial account numbers."

Info is stored locally - but rather than something like Redline stealing your local browser password vault, now they can just steal the last 3 months of everything you’ve typed and viewed in one database.

video/mp4

markhughes,
@markhughes@mastodon.social avatar

@GossiTheDog
Ah , the sham regulator. 🤦‍♂️

iamdtms, to random Hungarian
@iamdtms@mas.to avatar
openrightsgroup, to privacy
@openrightsgroup@social.openrightsgroup.org avatar

Real-world harms result from data misuse.

We need an independent regulator to ensure strong protections and get redress when things go wrong.

But the Data Protection and Digital Information Bill (UK) weakens the role of the Information Commissioner's Office. That’s why we've presented amendments.

Find out more ⬇️

https://www.openrightsgroup.org/blog/the-ico-must-toughen-up/

openrightsgroup,
@openrightsgroup@social.openrightsgroup.org avatar

ORG’s amendment would:

✅ Limit the UK government’s powers to interfere with the Information Commissioner's Office through instructions and recommendations.

✅ Transfer budget responsibility and the appointment of non-executive members of the ICO to the relevant Select Committee, not government ministers.

openrightsgroup,
@openrightsgroup@social.openrightsgroup.org avatar

The revolving door between business and the UK data protection regulator must stop to prioritise our rights.

✅ ORG's amendment protects the new Commission from regulatory capture by introducing a three-years stay period that prohibits its members to work for the industries they were regulating.

lostsettler, to random
@lostsettler@mastodon.scot avatar

The maximum penalty for data breaches is 4% of revenue under GDPR, for companies.

Who wants to start a class action against the Electoral commission?

https://www.theguardian.com/technology/2024/mar/25/details-of-millions-of-uk-voters-accessed-by-chinese-state-ministers-will-say

openrightsgroup, (edited ) to UKpolitics
@openrightsgroup@social.openrightsgroup.org avatar

As the returns to the UK Parliament, we're calling for amendments to strengthen the independence and effectiveness of the Information Commissioner's Office.

With the ICO's weak enforcement record, ORG has worked with Members of the House of Lords to table amendments to better defend our data rights and improve accountability.

Real-world harms result from data misuse and legal safeguards are only as good as their enforcement.

https://www.openrightsgroup.org/blog/the-ico-must-toughen-up/

openrightsgroup, (edited )
@openrightsgroup@social.openrightsgroup.org avatar

The independence and effective functioning of the UK data protection authority is of pivotal importance to shield us from harms.

But the misses the target and would worsen existing concerns around the ICO.

Find out more in our briefing ⬇️

https://www.openrightsgroup.org/publications/briefing-the-ico-isnt-working/

JamesBaker, to privacy
@JamesBaker@social.openrightsgroup.org avatar

Parliamentarians in the U.K. today debate the Government’s data bill. @openrightsgroup sets out the human impact of attempts to degrade the role of the ICO as our data watchdog and proposes practical wage Lords can fix this problem. https://www.openrightsgroup.org/press-releases/the-dpdi-bill-will-make-it-harder-for-people-to-get-justice-from-the-ico-warns-open-rights-group/

steve, to privacy
@steve@mastodon.nexusuk.org avatar

Spent some time in court today arguing that the is wrong... and the judge agreed!

Although it wasn't a complete success, it wasn't an unmitigated disaster and I'm actually quite pleased that a court agreed that the ICO's interpretation of the UK is bonkers.

https://blog.nexusuk.org/2024/03/another-day-in-court-arguing-against-ico.html

steve, to privacy
@steve@mastodon.nexusuk.org avatar

Another day, another email from the to tell me that they have closed my complaint about an organisation not responding to my Subject Access Request because they too couldn't contact anyone there... I mean, what's the point of the ICO?

johnleonard, to privacy
@johnleonard@mastodon.social avatar

'Like a stalker': Data broker LiveRamp reported to the UK, French regulators

LiveRamp operates a massive identity surveillance system that ties perople's online and offline activity to a single personal identifier

Thanks to @wchr

https://www.computing.co.uk/news/4180665/stalker-broker-liveramp-reported-uk-french-regulators

glynmoody, to GPS
@glynmoody@mastodon.social avatar

finds the Home Office’s pilot of electronic monitoring of migrants breached UK data protection law - https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/03/ico-finds-the-home-office-s-pilot-of-gps-electronic-monitoring-of-migrants-breached-uk-data-protection-law/ "Information Commissioner says it’s crucial the UK has ‘appropriate checks and balances in place to ensure people’s information rights are respected’"

johnleonard, to privacy
@johnleonard@mastodon.social avatar

ICO orders Serco Leisure to stop biometric monitoring of staff

Company 'prioritising business interests over its employees’ privacy' (surely not?)

https://www.computing.co.uk/news/4178174/ico-serco-leisure-stop-biometric-monitoring-staff

cybernews, to privacy
johnleonard, to baking
@johnleonard@mastodon.social avatar

UK regulator fires warning shot on cookie compliance

The ICO assessed the top 100 UK sites and found that 53 appeared to be non-compliant with the cookie rules.

Comment from @neil

https://www.computing.co.uk/news/4160205/uk-regulator-fires-warning-shot-cookie-compliance

EDPS, (edited ) to privacy
@EDPS@social.network.europa.eu avatar

and signed today a Memorandum of Understanding (MoU) https://europa.eu/!vQp3wg to further strengthen their joint commitment to ensure a consistent and coherent approach to the protection of individuals’ rights. Read Press Release https://europa.eu/!GbYnHT

steve, to privacy
@steve@mastodon.nexusuk.org avatar

The are paid about £62m per year.

May I present reason why they aren't worth that.

https://blog.nexusuk.org/2023/10/reason-324873-why-ico-arent-worth-62m.html

tripplehelix, to random
@tripplehelix@fosstodon.org avatar

have requested my driving liscence or passport as well as a proof of address. This isn't a legal requirment according to the . I have sent back a along with my drivers liscences, as that is all they should require to prove who I am.

I understand that to apply for any kind of loan you need ID and proof of address, but to delete an account... really?! All that sould be required for a company to delete your data is proof that you can login to their service.

steve, to privacy
@steve@mastodon.nexusuk.org avatar

This whole "generic email addresses aren't " misunderstanding is pretty persistent... and the really aren't helping matters.

ilumium, to Nissan
@ilumium@eupolicy.social avatar

Car maker "admits in their policy to collecting (...) activity, diagnosis data, and data (...). They say they can share and sell ’ “preferences, characteristics, trends, , , , , , and ” to data , , and other third parties."

"All new cars today are privacy nightmares on wheels."

Via @mozilla
https://foundation.mozilla.org/en/blog/privacy-nightmare-on-wheels-every-car-brand-reviewed-by-mozilla-including-ford-volkswagen-and-toyota-flunks-privacy-test/

steve,
@steve@mastodon.nexusuk.org avatar

@ilumium sadly my local regulator is the , and the most they will do for massive data protection breaches is write a strongly worded letter.

markhughes, to privacy
@markhughes@mastodon.social avatar

UK government creating authoritarian state through total of innocent citizens going about their daily business.

"Senior officials at the secretly lobbied the UK’s independent privacy regulator to act “favourably” towards a private firm keen to roll out controversial facial recognition technology across the country, according to internal government emails seen by the Observer"

https://www.theguardian.com/technology/2023/sep/02/home-office-accused-of-secret-lobbying-for-facial-recognition-spy-company





mikarv, to random
@mikarv@someone.elses.computer avatar

The releases a joint statment with 11 other non-EU Authorities around the world claiming that social media sites must take active steps to prevent data , else it may be considered a . Nothing on more enforcement against (illegitimate) scrapers, though... https://ico.org.uk/media/about-the-ico/documents/4026232/joint-statement-data-scraping-202308.pdf

5am, to privacy
@5am@fosstodon.org avatar

This is precisely how the 'average' person can be burnt by being blasé about the personal information they divulge to companies. It's simply not enough to trust they will protect it (whether by administrative controls (policies etc.) or technical controls (encryption etc.). You have to assume there's always someone out there like this airport worker who has easy access to your data.

https://www.theguardian.com/technology/2023/aug/22/customer-data-unwanted-romantic-contact-poll

johnleonard, to uk
@johnleonard@mastodon.social avatar

Electoral Commission apologises for data breach affecting millions of voters

Lots of questions remain unanswered.

"Whilst the ICO was informed of the breach within 72 hours, as mandated by the UK GDPR, the data subjects themselves were not. This is not the norm."

https://www.computing.co.uk/news/4121837/electoral-commission-apologises-breach-affecting-millions-voters

  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • tacticalgear
  • DreamBathrooms
  • InstantRegret
  • magazineikmin
  • Youngstown
  • everett
  • anitta
  • slotface
  • GTA5RPClips
  • rosin
  • thenastyranch
  • kavyap
  • mdbf
  • Leos
  • modclub
  • osvaldo12
  • Durango
  • khanakhh
  • provamag3
  • cisconetworking
  • ngwrru68w68
  • cubers
  • tester
  • ethstaker
  • megavids
  • normalnudes
  • lostlight
  • All magazines