A data breach is a type of privacy incident that happens whenever an unauthorised person could have gotten access to someone else’s personal information.
Information security is a more comprehensive approach to safeguarding all types of information. Data protection really focuses on personal data or sensitive data.
In South Africa, the regulator hasn't made a statement about the legality of Google Analytics. In the EU, some authorities have deemed it unlawful.
The key difference is who's doing the tracking: cookies are used by third-party ad tools, while pixels are used by the website itself. Cookies are like messengers between websites and your web browser. You can control and delete them through [...]
Yes, "where there are reasonable grounds to believe that the personal information of a data subject has been accessed or acquired by any unauthorised person, the responsible party must notify the Regulator; and .. the data subject" (section 22). Note: [...]
The likeliest answer is No. The information regulator has not said anything about naming and shaming responsible parties who have experienced breaches. The information regulator has also said that their office is very keen to cooperate with responsible parties and [...]
It would depend on whether the personal information stored on the cellphone or laptop, for example, belongs to your data subjects or just the employee. If it belongs to your data subjects, and you as a responsible party believe that [...]
