The General Data Protection Regulation (GDPR) has become the norm for data privacy in the European Union. What have we learned in the time since its been in effect? We asked 24 data privacy and compliance experts.

The U.K.'s data protection authority recently issued new draft guidelines to sharing data while maintaining compliance.

The massive fine comes one day after the ICO's fine of British Airways.

The fine would be the largest against a company post-GDPR and roughly 1.5 percent of the company's annual revenue.

This company protected its sensitive data with biometric thumbprint scanner but still managed to suffer trade secret theft after a former director of research allegedly stole gigabytes of data on its recipes.

Verizon's new Insider Threat Report breaks down five categories of inside threat actors and outlines 11 steps to reduce risk and defend against malicious insiders.

Research published this week suggests there have been over 59,000 data breaches reported to data protection authorities in Europe since GDPR went into effect last year.

A new survey says GDPR compliant companies are benefiting from their recent privacy investments - as a bonus, they may be less likely to be breached, too.

The French data protection authority said Monday that it has fined Google roughly $57M - the biggest penalty yet under the new law - for failing to acknowledge how its users' data is processed.

Consumer groups in Europe argue Google doesn't have a valid legal basis for processing users’ location data and is processing personal information that violates the EU's General Data Protection Regulation.

We asked 18 privacy and security experts what companies should look for when choosing a Data Protection Officer.

We countdown 20 information security tips for payment processors in Data Protection 101, our series on the fundamentals of information security.

Federal agents apprehended a former Apple employee last week suspected of stealing intellectual property, including engineering schematics on the company's secret self-driving car technology.

Tesla filed a lawsuit against a former employee this week after it learned he made changes to company source code and exported gigabytes of proprietary data to unknown third parties.

Optical Center, a French retailer of sunglasses, was fined €250,000 by CNIL, the French data protection authority, for failing to secure the data of customers who placed orders through its site.

What's the difference between a data controller and a data processor? What are their responsibilities under GDPR? Learn more in Data Protection 101, our series on the fundamentals of information security.

Learn about what an insider threat analyst does, along with how they affect existing procedures, policies, and protection layers in organizations in Data Protection 101, our series on the fundamentals of information security.

According to a recent survey 40 percent of companies said they won't be compliant with the General Data Protection Regulation (GDPR) when it goes into effect next month.

Failing to patch the Meltdown and Spectre processor flaws could expose organizations to steep fines under the EU’s General Data Protection Regulation (GDPR) officials in the UK have warned.

Learn about the General Data Protection Regulation (GDPR) and the requirements for compliance in Data Protection 101, our series on the fundamentals of information security.