DPOInsider

Share this post

DPOinsider #30

www.dpoinsider.com

DPOinsider #30

Sneaky Google; Data security report

DPOInsider
Dec 2, 2022
Share
Share this post

DPOinsider #30

www.dpoinsider.com

The DPOInsider covers the latest news and developments in data compliance and privacy. The DPO's favourite weekly read ☕️


Google sneaks past privacy permissions

How Google handles user data has always been a subject of concern for those of us in the privacy space.

Thanks for reading DPOInsider! Subscribe for free to receive new posts and support my work.

It’s well placed to collect a lot of our data, with its services being used extensively across its own OS and from others.

But a recent post might show how Google will look to change some of its applications so that it can track users across different services.

The post points out that Google has begun to change its services to sit under the main Google domain.

This means that users that now give location access when accessing Google Maps at the URL google.com/maps will be giving permission for any other service that sits on the main google.com domain.

Which we think will eventually be all of them. From a regulatory perspective, this is a bit of a grey area.

The most alarming part is that these changes were implemented quietly, and without notifying users. And it’s part of a wider trend of tech giants taking the same approach.


2022 cloud data security report

Organizations continue to shift workloads to the cloud at a rapid pace to achieve faster time to market, increased responsiveness, and cost reductions. With the majority of organizations expected to have more than half their workloads in the cloud within the next 12-18 months, it is no surprise that cloud security continues to remain a top concern.

This 2022 Cloud Security Report, based on a comprehensive global survey of cybersecurity professionals, reveals these security challenges and offers fresh insights on the state of the cloud and cloud security today. The study reviews organizations’ choices and responses as they try to gain more confidence in securing their cloud environments.

Interesting findings in the report include:

  • Most organizations continue to pursue a hybrid (39%, up from 36% last year) or multi-cloud strategy (33%) to integrate multiple services, for scalability, or for business continuity reasons. Seventy-six percent are utilizing two or more cloud providers.

  • Organizations continue to shift workloads to the cloud at a rapid pace. Today, 39% of respondents have more than half of their workloads in the cloud, while 58% plan to get to this level in the next 12-18 months.

  • Cloud users confirm that the cloud is delivering on the promise of flexible capacity and scalability (53%), increased agility (50%), and improved availability and business continuity (45%).

  • Security professionals highlight lack of visibility (49%), high cost (43%), lack of control (42%), and lack of security (22%) as the biggest unforeseen factors to slow or stop cloud adoption.

  • Cloud security continues to be a significant concern for cybersecurity professionals. With an increase of two percentage points from last year, 95% of organizations are moderately to extremely concerned about their security posture in a public cloud environment.

  • Over three-quarters (78%) of respondents consider it very to extremely helpful to have a single cloud security platform with a single dashboard to protect data consistently and comprehensively across their cloud footprint.


Other data privacy news

Facebook sued for collecting personal data to target adverts

3 ways the data privacy wars could pan out – and how marketers can navigate each scenario

UK and non-EU businesses to face more uncertainty in GDPR data breach reporting


Posts of the week

Twitter avatar for @markscott82
Mark Scott @markscott82
No, Europe isn’t about to ban @Twitter. What is about to happen is that EU enforcers have @elonmusk in their cross-hairs — when the bloc’s content rules kick in over next 2 years. Avoid the spin. Read this w/ @LauKaya 👇
Twitter avatar for @markscott82
Mark Scott @markscott82
@ThierryBreton Oh, great. Our story is now free to read: https://t.co/1jiDblK26D In short: Twitter hasn't broken any EU laws, yet. The DSA won't bite until 2024. The (voluntary) code of practice on disinformation has yet to take effect
8:45 AM ∙ Dec 1, 2022
38Likes17Retweets
Twitter avatar for @aoifewhite101
Aoife White @aoifewhite101
Ireland fines Meta €265M for ‘data scraping’ leak, via @shannonvansant and @vmanancourt
politico.euIreland fines Meta €265M for ‘data scraping’ leakThe penalty is for a 2021 data breach, where more than half a million records of people’s personal information surfaced on a public forum.
1:29 PM ∙ Nov 28, 2022
13Likes2Retweets

Thanks for reading DPOInsider! Subscribe for free to receive new posts and support my work.

Share
Share this post

DPOinsider #30

www.dpoinsider.com
Comments
Top
New
Community

No posts

Ready for more?

© 2023 DPOinsider
Privacy ∙ Terms ∙ Collection notice
Start WritingGet the app
Substack is the home for great writing