A new survey says GDPR compliant companies are benefiting from their recent privacy investments - as a bonus, they may be less likely to be breached, too.

The French data protection authority said Monday that it has fined Google roughly $57M - the biggest penalty yet under the new law - for failing to acknowledge how its users' data is processed.

These nine steps can help can help organizations looking to achieve PCI Security compliance detect weak spots in their security systems and evolve in the face of challenges.

Learn about the Personal Information Protection and Electronic Documents Act (PIPEDA), what type of data it covers, and how to comply with the act's new data breach notification rules, in Data Protection 101, our series on the fundamentals of information security.

As the wave of data breaches continues to crash down on companies, let’s take a look back at some of the largest and most damaging data breaches on record. Read on for a historical walk through breaches over time as well as resources for preventing data breaches.

Learn about the California Consumer Privacy Act and its larger implications for the rest of the United States in Data Protection 101, our series on the fundamentals of information security.

We countdown 20 information security tips for payment processors in Data Protection 101, our series on the fundamentals of information security.

Learn about the Chief Risk Officer role in Data Protection 101, our series on the fundamentals of information security.

Learn about the Chief Compliance Officer role in Data Protection 101, our series on the fundamentals of information security.

The PCI Security Standards Council released a new tool Tuesday designed to help small merchants better protect their customers' payment card data.

Federal agents apprehended a former Apple employee last week suspected of stealing intellectual property, including engineering schematics on the company's secret self-driving car technology.

California passed a sweeping data privacy bill on Thursday believed to be the strictest in the nation. The law will give consumers the ability to ask what data companies have on them and to sue over data breaches.

Learn what the NIST Cybersecurity Framework is, who it impacts, and how to implement it in Data Protection 101, our series on the fundamentals of information security.

Tesla filed a lawsuit against a former employee this week after it learned he made changes to company source code and exported gigabytes of proprietary data to unknown third parties.

The PCI Data Security Standard (PCI DSS) deadline to disable SSL/early TLS protocols and better protect payment card data is less than two weeks away.

Learn about what an insider threat analyst does, along with how they affect existing procedures, policies, and protection layers in organizations in Data Protection 101, our series on the fundamentals of information security.

According to a recent survey 40 percent of companies said they won't be compliant with the General Data Protection Regulation (GDPR) when it goes into effect next month.

The National Institute of Standards and Technology (NIST) released a new version of its popular Cybersecurity Framework last week.

Learn about the General Data Protection Regulation (GDPR) and the requirements for compliance in Data Protection 101, our series on the fundamentals of information security.

Whether malicious or negligent, insider threats pose serious security problems for organizations. Forrester Senior Security Analyst Joseph Blankenship offers some insight into common early indicators of an insider threat.