A new survey says GDPR compliant companies are benefiting from their recent privacy investments - as a bonus, they may be less likely to be breached, too.

The French data protection authority said Monday that it has fined Google roughly $57M - the biggest penalty yet under the new law - for failing to acknowledge how its users' data is processed.

These nine steps can help can help organizations looking to achieve PCI Security compliance detect weak spots in their security systems and evolve in the face of challenges.

Learn about the Personal Information Protection and Electronic Documents Act (PIPEDA), what type of data it covers, and how to comply with the act's new data breach notification rules, in Data Protection 101, our series on the fundamentals of information security.

Take a look at the history of ransomware, the most damaging ransomware attacks, and the future for this threat.

As the wave of data breaches continues to crash down on companies, let’s take a look back at some of the largest and most damaging data breaches on record. Read on for a historical walk through breaches over time as well as resources for preventing data breaches.

Learn about the California Consumer Privacy Act and its larger implications for the rest of the United States in Data Protection 101, our series on the fundamentals of information security.

We countdown 20 information security tips for payment processors in Data Protection 101, our series on the fundamentals of information security.

Learn about the Chief Risk Officer role in Data Protection 101, our series on the fundamentals of information security.

Learn about the Chief Compliance Officer role in Data Protection 101, our series on the fundamentals of information security.

The PCI Security Standards Council released a new tool Tuesday designed to help small merchants better protect their customers' payment card data.

California passed a sweeping data privacy bill on Thursday believed to be the strictest in the nation. The law will give consumers the ability to ask what data companies have on them and to sue over data breaches.

Learn what the NIST Cybersecurity Framework is, who it impacts, and how to implement it in Data Protection 101, our series on the fundamentals of information security.

The PCI Data Security Standard (PCI DSS) deadline to disable SSL/early TLS protocols and better protect payment card data is less than two weeks away.

According to a recent survey 40 percent of companies said they won't be compliant with the General Data Protection Regulation (GDPR) when it goes into effect next month.

The National Institute of Standards and Technology (NIST) released a new version of its popular Cybersecurity Framework last week.

A hospital paid 4 BTC (Bitcoin) - roughly $55,000 - to regain access to its computer systems over the weekend.

Homeland Security Advisor Thomas Bossert pinned WannaCry on North Korea in a Wall Street Journal op-ed Monday night.

Learn about the General Data Protection Regulation (GDPR) and the requirements for compliance in Data Protection 101, our series on the fundamentals of information security.

A previously unknown strain of ransomware, Bad Rabbit, hit roughly 200 targets across Russia, Ukraine, and Bulgaria, on Tuesday.