explore | Grilled Cheese

@hugovalters.bsky.social Oct 16, 2026, 3:10 AM

Redact API logs at ingestion with jq: recursively strip or salted-hash PII (password, token, email, ssn) before storage. GDPR data minimization on Ubuntu/Debian.

https://www.valtersit.com/vault/enforce-data-minimization-with-jq-redaction-pipeline-for-api-715817/

#jq #gdpr #log-redaction

@opsmatters.com Oct 16, 2026, 1:08 AM

The latest update for #BDRSuite includes "Consent Managers Under DPDP: Who Actually Needs to Register" and "DPDP vs #GDPR: What's Actually Different for Indian Businesses".

#Cybersecurity #Backup #DisasterRecovery https://opsmtrs.com/42ZXNKg

@toppnews.bsky.social Oct 16, 2026, 12:08 AM

📢 Anzeige
#Transcription #GDPR #AI #DataPrivacy

@compliancecolleague.ai Oct 15, 2026, 11:35 PM

You asked, we built it: every Compliance Colleague review now opens with a findings table and exports to Excel. Comparisons across 30+ compliance standards export as mapping tables.
Compliance Colleague → compliancecolleague.ai/?ref=bsky
#GRC #AIGovernance #EUAIAct #GDPR #PCIDSS #ISO27001

@corkiejp-alt.bsky.social Oct 15, 2026, 6:25 PM

#WSocialFacts

An echo chamber's attack on #wsocial effectively puts all other EU clients on the #ATProtocol at risk, as they share the same non-compliance issues with EU #GDPR Regulations.

@privacytrack.org Oct 15, 2026, 3:06 PM

Term of the day: Third Party

A third party is generally a person or organization outside of the main parties in a given relationship, such as those not directly involved in a contract or transaction but who still has some...

Full definition: privacytrack.org/glossary/third-party

#privacy #GDPR

Third Party. A third party is generally a person or organization outside of the main parties in a given relationship, such as those not directly involved in a contract or transaction but who still has some connection to it. In everyday and legal usage the term simply marks someone as being external to the core participants. Note that the evidence provided describes only these general and non-GDPR meanings, and does not supply the specialized GDPR definition of 'third party'.

@cookiegate.org Oct 15, 2026, 3:01 PM

Term of the day: Accept All Button

An 'Accept All' button is a control in a cookie consent banner that lets a user agree to all cookies and similar tracking technologies with a single click. In the EU and UK, regulators...

Full definition: cookiegate.org/glossary/accept-all-button

#privacy #GDPR

Accept All Button. An 'Accept All' button is a control in a cookie consent banner that lets a user agree to all cookies and similar tracking technologies with a single click. In the EU and UK, regulators and commentators have raised concerns when banners make accepting easy but require extra steps to refuse, since a rejection option that is equally accessible is generally expected. On its own, an 'Accept All' button does not make a banner compliant; how the refusal option is presented matters too.

@corkiejp-alt.bsky.social Oct 15, 2026, 3:01 PM

"The thing with #GDPR and #DSA is most of it is just guidelines and not enforced very often, only in high case scenarios with high profile companies." ~ #misconception #wsocial

While it can certainly feel that way because only the massive, record-breaking fines make the evening news, this is actually a common misconception. Both the General Data Protection Regulation (GDPR) and the Digital Services Act (DSA) are binding European Union laws—not just guidelines—and enforcement happens daily across all levels of business, not just against Big Tech.

@ppc.land Oct 15, 2026, 1:57 PM

FYI: Norway took 2,453 days on Xandr, then cut the fine for taking so long #Norway #Xandr #GDPR #DataPrivacy #DigitalRegulation

@marketingnews.bsky.social Oct 15, 2026, 1:57 PM

FYI: Norway took 2,453 days on Xandr, then cut the fine for taking so long #Norway #Xandr #GDPR #DataPrivacy #DigitalRegulation

@marketingnews.bsky.social Oct 15, 2026, 12:59 PM

FYI: Explaining one-stop-shop #GDPR #DataProtection #PrivacyRegulation #OneStopShop #EURegulations

@ppc.land Oct 15, 2026, 12:59 PM

FYI: Explaining one-stop-shop #GDPR #DataProtection #PrivacyRegulation #OneStopShop #EURegulations

@marketingnews.bsky.social Oct 15, 2026, 12:02 PM

FYI: Explaining Digital Omnibus #DigitalOmnibus #GDPR #ePrivacy #DataAct #AIAct

@ppc.land Oct 15, 2026, 12:02 PM

FYI: Explaining Digital Omnibus #DigitalOmnibus #GDPR #ePrivacy #DataAct #AIAct

@joho68.bsky.social Oct 15, 2026, 10:17 AM

The best day to start was yesterday, the second best day is right now. Move! 🇪🇺

www.theregister.com/paas-and-iaa...

#uscloud #eucloud #europe #gdpr #privacy #dataskydd #dataprotection #molnet #usa #eu #foss #oss #opensource

@ipgeolocation.bsky.social Oct 15, 2026, 10:03 AM

The EU's new cloud sovereignty plan has 4 levels. Storing data in the EU only gets you level 1. Every outside service that sees your visitors' IPs is now part of the question. Run lookups on your own servers.

ipgeolocation.io/doc...
#DataSovereignty #GDPR

@noyb.eu Oct 15, 2026, 9:28 AM

🇳🇴 The Norwegian Data Protection Authority just fined the online advertising company #Xandr € 8.5 million (NOK 92 000 000) for its #GDPR violations. 💸 This is a major blow to the online adtech industry!

For more information, visit: noyb.eu/en/privacy-w...

Privacy win: Norwegian Authority fines Microsoft’s Xandr € 8.5 Million.

In 2020, the NCC and noyb filed three GDPR complaints against the dating app Grindr and several adtech companies that received personal data through the app. One of these complaints concerned Xandr, an online advertising company that now belongs to Microsoft.

Now, the Norwegian Data Protection Authority has decided that Microsoft’s Xandr violated the GDPR. It processed personal data, including sensitive information on sexual orientation, without a valid legal basis. Xandr was ordered to pay a fine of roughly € 8.5 million Euros.

The decision is a major blow for the online advertising and commercial surveillance industry.

The current fine shows that companies such as Xandr are eventually held accountable for their shady practices. Profiling people’s interests, habits, location and behavior requires valid consent – which adtech companies hardly ever obtain.

@nicfab.eu Oct 15, 2026, 9:03 AM

Daily Digest | 15 October 2026 Your daily dose of Privacy, Data Protection, AI & Cybersecurity news. 5 stories you should not miss. Read more: https://www.nicfab.eu/daily-digest/ #Privacy #AI #GDPR #Cybersecurity #TechLaw

@atmywitsend.wsocial.eu Oct 15, 2026, 8:06 AM

Let's be clear what's at stake: a 🇺🇸 tech firm now holds influence over one of Europe's largest health databases. 🇺🇸 law (FISA, Cloud Act) can compel 🇺🇸 companies to hand over data to 🇺🇸 authorities—precisely the risk the GDPR & Schrems II ruling were designed to prevent. 🧵3/4

#GDPR #SchremsII

@atmywitsend.wsocial.eu Oct 15, 2026, 8:06 AM

Health data is the most sensitive personal data there is: medical histories, prescriptions, appointment records, conditions you'd never want made public. 🧵2/4

#Nvidia #Doctolib #HealthData #GDPR #DataProtection