Data Privacy & Cybersecurity

Garante Monitors 'Family in Woods' Case, Recalls Child Protection

The Italian Data Protection Authority (Garante) is monitoring the "family in woods" case and has issued a press release reminding media outlets of their obligations regarding child protection and data privacy. The Garante urges caution in disseminating information that could identify minors.

Italian Privacy Authority Fines Intesa Sanpaolo €17.6 Million

The Italian Privacy Authority has fined Intesa Sanpaolo €17.6 million for unlawfully processing the data of approximately 2.4 million customers. The fine stems from the transfer of customer data to its wholly-owned subsidiary, Isybank, as part of a corporate operation.

Microsoft Office Vulnerability Advisory CVE-2026-26133

The French National Cybersecurity Agency (ANSSI) has issued an advisory regarding a vulnerability (CVE-2026-26133) in Microsoft Office applications. The vulnerability could lead to data confidentiality breaches.

Microsoft Loop, PowerBI, Teams Vulnerability Disclosure

The French National Cybersecurity Agency (ANSSI) has issued a notice regarding a vulnerability (CVE-2026-26133) affecting Microsoft Loop, PowerBI, and Teams. The vulnerability can lead to data confidentiality breaches. Users are advised to consult Microsoft's security bulletin for patch information.

Debian Linux Kernel Vulnerabilities Affecting Confidentiality and Security

The French National Cybersecurity Agency (ANSSI) has issued a notice regarding multiple vulnerabilities discovered in the Debian Linux kernel. These vulnerabilities can lead to privilege escalation, data confidentiality breaches, and denial of service, affecting specific versions of Debian bookworm and trixie.

Microsoft Edge Vulnerability Poses Data Confidentiality Risk

The French National Cybersecurity Agency (ANSSI) has issued a notice regarding a vulnerability in Microsoft Edge for Android and iOS. The vulnerability, identified as CVE-2026-26133, poses a risk of data confidentiality breaches. Users are advised to refer to Microsoft's security bulletin for patch information.

Multiple Vulnerabilities Found in IBM Products

The French National Cybersecurity Agency (ANSSI) has issued a notice regarding multiple vulnerabilities discovered in various IBM products. These vulnerabilities could allow remote code execution, denial of service, and data breaches. Affected users are advised to consult IBM's security bulletins for patch information.

Privacy Commissioner Recommends Bill C-4 Amendments for Political Party Privacy

The Privacy Commissioner of Canada recommended amendments to Bill C-4 to introduce privacy rules for political parties. The Commissioner suggested that these rules should parallel existing public and private sector requirements under federal law, adapted for the democratic context.

Privacy Commissioner of Canada Testimony on Bill C-12

The Privacy Commissioner of Canada, Philippe Dufresne, testified before the Senate Committee on Bill C-12, the Strengthening Canada's Immigration System and Borders Act. He highlighted language in the bill related to information-sharing agreements as a positive example of recommended approaches for extensive personal information disclosures.

Privacy Commissioner concludes Loblaw loyalty program investigation

The Privacy Commissioner of Canada has concluded an investigation into Loblaw's PC Optimum Loyalty Program. The investigation found that Loblaw failed to respond to deletion requests in a timely manner and retained purchase history after account deletion, violating privacy regulations. Loblaw has agreed to implement recommendations to improve its processes.