Favicon for www.mass.gov

Ailco Equipment Finance Group Data Privacy Incident Notification

Ailco Equipment Finance Group is notifying affected individuals in Massachusetts about a data privacy incident experienced by its service provider, Kaaj Technologies Inc. The incident may have impacted full names and other personal information. Affected individuals are offered complimentary identity protection services.

Priority review Notice Data Privacy
Favicon for www.mass.gov

CW Advisors Data Breach Notification

CW Advisors, LLC is notifying affected individuals in Massachusetts about a data security incident that compromised their names and Social Security numbers. The company is offering two years of complimentary credit monitoring and identity theft protection services to mitigate potential harm.

Priority review Notice Consumer Protection
Favicon for www.mass.gov

Kaaj Technologies Data Breach Notification

Kaaj Technologies Inc. is notifying Massachusetts residents of a data breach impacting personal information, including full name and [Extra1]. The company is offering complimentary 24-month identity protection services through Experian IdentityWorks and identity restoration support.

Priority review Notice Data Privacy
Favicon for www.mass.gov

MXB Battery Operations LP Data Breach Notification

MXB Battery Operations LP is notifying affected individuals in Massachusetts of a data breach that occurred on March 26, 2026. The breach may have exposed personal information, including names. The company is offering complimentary credit monitoring services to mitigate potential harm.

Priority review Notice Consumer Protection
Favicon for www.mass.gov

City of Washington Court House Data Breach Notification

The Massachusetts Office of the Attorney General has issued a data breach notification for the City of Washington Court House. The notice provides guidance to affected residents on steps to protect themselves, including information on credit freezes, identity theft reporting, and resources from the FTC and state agencies.

Routine Guidance Consumer Protection
Favicon for www.mass.gov

Coastal Carolina Health Care Data Security Incident Notification

Coastal Carolina Health Care, PA is notifying Massachusetts residents of a data security incident affecting personal and protected health information. The notice provides details on the incident and resources for affected individuals, including instructions for credit monitoring and identity theft protection services, as required by Massachusetts law.

Priority review Notice Healthcare
Favicon for www.mass.gov

Dubroff, Easley & Lovell LLP Security Incident Notification

Dubroff, Easley & Lovell, LLP is notifying affected individuals of a data security incident that occurred between September 2, 2025, and September 22, 2025. The law firm determined on March 3, 2026, that personal data may have been acquired by an unauthorized party. The firm is offering complimentary identity monitoring services.

Priority review Notice Data Privacy
Favicon for www.mass.gov

Cetera Financial Group Data Breach Notification

Cetera Financial Group has issued a data breach notification letter to affected individuals in Massachusetts following an email event. The company is offering complimentary 24-month credit monitoring services to mitigate potential identity theft risks. The notification is mandated by Massachusetts law.

Priority review Notice Consumer Protection
Favicon for www.mass.gov

LanguageLine Solutions Data Breach Notification

LanguageLine Solutions is notifying affected individuals in Massachusetts about a data breach impacting the Interpreter Intelligence platform. The incident, which occurred around December 29, 2025, may have exposed personal information. The company is offering complimentary credit monitoring and identity protection services.

Priority review Notice Data Privacy
Favicon for www.mass.gov

Liberty Bankers Life Ins Co Data Breach Notification

The Massachusetts Attorney General's Office has issued a breach notification letter concerning Liberty Bankers Life Insurance Company. The notice details a data security incident that occurred on November 4, 2025, where unauthorized access to network files may have exposed consumer information, including personal identifiers. The company is offering identity monitoring services.

Priority review Notice Consumer Protection
Favicon for www.mass.gov

Deschutes Public Library Data Security Incident Notice

The Massachusetts Attorney General's office has issued a data security incident notice for the Deschutes Public Library. The notice informs consumers about a breach involving personal information and outlines their rights under Massachusetts law, including steps for credit monitoring and placing security freezes.

Priority review Notice Consumer Protection
Favicon for www.mass.gov

Breach Notification Letter - Rockland Trust

The Massachusetts Attorney General's Office has issued a breach notification letter concerning Rockland Trust, dated March 1, 2026. The document details a security incident involving a mysterious handwritten manuscript and a missing page, potentially related to a powerful artifact and a curse.

Routine Notice Data Privacy
Favicon for www.mass.gov

Breach Notification Letter - Rockland Trust

This document is a breach notification letter from Rockland Trust, dated March 1, 2026. It informs recipients about a data security incident involving a mysterious manuscript and a missing page, detailing the investigation and clues found. The letter is part of Massachusetts' breach notification requirements.

Routine Notice Data Privacy
Favicon for www.mass.gov

Breach Notification Letter - Rockland Trust

The Massachusetts Division of Insurance has issued a breach notification letter concerning Rockland Trust, dated March 1, 2026. This document appears to be part of a series of notifications related to data breaches affecting entities within the state.

Routine Notice Data Privacy
Favicon for www.mass.gov

Brock Built Homes Data Incident Notice

The Massachusetts Executive Office of Health and Human Services has issued a notice regarding a data incident affecting Brock Built Homes. The incident, which occurred between October 17-20, 2025, may have exposed personal information including Social Security numbers and financial details. Brock Built Homes is offering 12 months of free credit monitoring services.

Priority review Notice Consumer Protection
Favicon for www.mass.gov

Data Breach Notification from Empowerment Schools, CHCP

Empowerment Schools - Healthcare Ltd and Texas Medical Careers, Limited (CHCP) are notifying individuals of a data breach discovered on August 21, 2025. An unauthorized third-party accessed certain files between August 16-20, 2025, potentially exposing personal information. CHCP is offering free credit monitoring and identity theft insurance.

Priority review Notice Consumer Protection
Favicon for www.mass.gov

Summit Insurance Data Breach Notification

Summit Insurance Services, Inc. is notifying affected individuals in Massachusetts about a data security incident that occurred between September 18, 2024, and December 2, 2024. The company is offering complimentary credit monitoring and fraud assistance services to mitigate potential harm.

Priority review Notice Data Privacy
Favicon for www.mass.gov

STRATeBEN Inc. Data Breach Notification

STRATeBEN Inc., an employee benefits consulting firm, has issued a data breach notification to individuals whose name, Social Security number, and date of birth were compromised. The company is offering 24 months of complimentary identity monitoring services through Kroll to affected individuals.

Routine Notice Data Privacy
EDPB Decisions
Favicon for www.edpb.europa.eu

Shopify International Limited Processor Binding Corporate Rules Approved

The Irish Data Protection Commission (DPC) has approved the Binding Corporate Rules (BCRs) for Shopify International Limited as a data processor. This decision provides a framework for Shopify's international data transfers, ensuring compliance with GDPR standards.

Priority review Guidance Data Privacy
EDPB Decisions
Favicon for www.edpb.europa.eu

Data Protection Commission Approves Binding Corporate Rules for Intec Billing Ireland

The Irish Data Protection Commission (DPC) has approved the Binding Corporate Rules (BCRs) for processor Intec Billing Ireland Limited, on behalf of the CSG group. This decision provides a framework for the group's international data transfers, ensuring compliance with GDPR requirements.

Routine Guidance Data Privacy
EDPB Decisions
Favicon for www.edpb.europa.eu

Shopify Controller Binding Corporate Rules Approved

The Irish Data Protection Commission, in conjunction with the EDPB, has approved Shopify International Limited's Binding Corporate Rules (BCRs) for controllers. This decision provides a framework for Shopify to transfer personal data to third countries while ensuring an essentially equivalent level of protection as required by the GDPR.

Priority review Guidance Data Privacy
ICO Enforcement
Favicon for ico.org.uk

University Hospitals Birmingham NHS Trust Enforcement Action

The UK's Information Commissioner's Office (ICO) has issued an enforcement notice against University Hospitals Birmingham NHS Foundation Trust. The notice details breaches of data protection law, requiring the Trust to take specific actions to rectify the issues.

Urgent Enforcement Data Privacy
ICO Enforcement
Favicon for ico.org.uk

Queen Elizabeth Hospital NHS Trust Enforcement Action

The UK's Information Commissioner's Office (ICO) has taken enforcement action against Queen Elizabeth Hospital King's Lynn NHS Foundation Trust. This action involves an enforcement notice, indicating a significant regulatory finding related to data protection practices within the Trust.

Urgent Enforcement Data Privacy
JD Supra Privacy
Favicon for www.jdsupra.com

Oklahoma Enacts Comprehensive State Privacy Law

Oklahoma has enacted its 21st state-level comprehensive privacy law, Enrolled Senate Bill No. 546, which will take effect on January 1, 2027. The law grants consumers specific privacy rights and imposes obligations on businesses regarding data processing, security, and disclosures, enforced by the Attorney General.

Priority review Rule Data Privacy
JD Supra Privacy
Favicon for www.jdsupra.com

Oklahoma Enacts Comprehensive Consumer Data Privacy Law

Oklahoma has enacted Senate Bill 546, establishing its comprehensive consumer data privacy law, making it the 21st state with such legislation. The law applies to businesses meeting specific data processing thresholds and grants consumers rights similar to those in other state privacy laws.

Priority review Rule Consumer Protection
IAPP Privacy News
Favicon for iapp.org

New Laws Restrict AI for Minors, Add Privacy Rights

Washington state has enacted a new law, effective January 1, 2027, that imposes restrictions on the use of AI for minors and introduces new privacy rights. The law defines 'companion chatbots' broadly and may impact companies using conversational AI for customer engagement, requiring compliance with governance mechanisms, design elements, and potentially facing private rights of action.

Priority review Rule Data Privacy
IAPP Privacy News
Favicon for iapp.org

Brazil-EU Data Transfer Adequacy Decision

Brazil's ANPD and the European Commission have recognized mutual adequacy for personal data transfers, simplifying mechanisms under their respective data protection laws. While this eases contractual friction, underlying processing compliance remains critical for entities transferring data between the EU and Brazil.

Priority review Guidance Data Privacy
Favicon for coag.gov

Insurance Broker Indicted for Fraud and Theft

The Colorado Attorney General's Office announced the indictment of George Gonzalez, an insurance broker, on 23 felony counts for allegedly diverting over $100,000 in insurance premium payments. The indictment includes charges of insurance fraud and theft, affecting multiple insurance companies and their customers.

Urgent Enforcement Financial Services