#dataprivacy

The Dutch government has blocked the sale of Solvinity, the company that manages its online services portal DigiD, to the US-based tech giant Kyndryl amid concerns that millions of citizens’ private data could be compromised.

https://www.dutchnews.nl/2026/05/dutch-government-blocks-sale-of-digid-owner-to-us-tech-giant/

I’m pretty sure my boss is a re--rd and lacks the judgment and skill set for the role. He has a very childlike mindset and doesn’t seem to understand that putting people’s personal information into AI is a serious violation of trust. I go into work with the best intentions, but my direct manager consistently makes the experience frustrating and unprofessional. Basic decision-making, communication, and common sense seem to be a struggle for him, and it’s hard to see what qualifications or actual expertise got him into the position in the first place. It honestly feels like the rest of the team is constantly compensating for his lack of competence instead of being led by someone capable.

CSSC New York

This is crazy.

If so then I want to be paid for it. No cr-ppy AI company is allowed to use my voice, intimidation, or anything activated with me to train their cr-ppy bots.

Spoke at length with some engineers who are working on this. They are "optimizing" the company memory to work with the Palantir AI program. When did we become beholden to American surveillance companies like this? When data leaks happen or when Palantir sells this data to third parties, this is going to bite SAP in the a$$.

Been seeing a lot of people bashing Corporates lately, and didn't want to miss out on the fun. I wonder what Corporates Customers and Partners would think of they knew every conversation with a sales rep is recorded, and searchable by anyone in the company.

No, I am not joking. Anyone at any time can search a database of 1000s of hours of meetings, and discover in real time which firm, whether it's KPMG, Deloitte, EY, or Accenture and find out who is working on a new opportunity with a potential or existing client. Taking it one step further, as a result of a simple search, anyone can find out who is involved and timing. There is no data privacy, and no controls on who can access information.

You can't make this stuff up. This is Corporates Leadership for you.

#KPMG #Deloitte" #EY #Accenture #Dataleak

https://privacy.ca.gov/drop/

California residents can now use the Delete Request and Opt-Out Platform (DROP) to request the deletion of their personal information from over 500 registered data brokers with a single submission. Launched on January 1, 2026, the free tool is operated by the California Privacy Protection Agency and allows users to verify their residency and submit a request to stop brokers from collecting, selling, or sharing their data.

While requests can be submitted immediately, data brokers are not required to begin processing these deletion requests until August 1, 2026. Once processing begins, brokers must delete the specified information within 90 days and are required to check for new requests every 45 days thereafter.

Eligibility: You must be a California resident to use the platform.

Verification: Users verify their identity through the California Identity Gateway or Login.gov.

Exceptions: Brokers are not required to delete publicly available information (e.g., real estate records) or first-party data collected directly from customers.
Enforcement: Failure to comply with deletion requests can result in daily fines, with independent audits starting in January 2028.

Website: The platform is available at privacy.ca.gov/drop/.

Please start protecting your privacy!!

It is more and more visible in social media that people get angry and there is also copy paste trend about data protection. People are massively pasting under their random posts on Lnkdn the text:

“Is there a firewall separating OH patient data from your defense and intelligence infrastructure? Yes or no?”
And nobody responds.

Can somebody explain me what is this rumour about?

Noticed they’ve separated onshore and offshore Datadog access.

Is this a response to concerns around PHI and PII exposure offshore? Or is there another operational or compliance reason driving the change?

If anyone in leadership has context on what prompted this decision, it would be great to understand the thinking behind it. Increased data controls are always worth discussing, especially would shape on/offshore future hiring pattern.

After I was told that I was let go, my OT accounts got disabled in around two to two and half hrs. Since I had not locked my device or logged out, I could continue to access my local personal files and upload them to cloud storage. If you have any personal files in Core Share (due to Win 11 migration), upload those immediately as once the OT account is disabled, you can't access those files.

As soon as I locked my session, I could no longer access the laptop because my user profile was disabled, and only the OT Admin can access it now. So, DO NOT LET YOUR DEVICE GET LOCKED till you have all your personal files uploaded.

Mandatory now in your training!! . But they can not tell who you are, but know if you have completed it and the data it returns..

Here's the deal: anything you type into Copilot on a company device can be logged and stored under our organization's Microsoft 365 tenant. So if you're asking it about that weird rash, your divorce, or your side hustle… just know that's not exactly private.

And I'll be real with you. I'm on the BTS team, and we can see your prompts. All of them. No one's sitting here reading them for fun, but the access is there, and we just want you to be aware.

So do yourself a favor... Use Copilot at work for work things, and save the rest for home.
Easy rule of thumb: if you'd cringe seeing your prompt on a big screen during a team meeting, don't type it on your work laptop. 😅

Does anyone know if we are collecting CAN logs from all the most recent cars we sold and storing them somewhere

I got this job out of college a few years ago and every time someone tells me to jump ship and so on I'm met with the reality that my skills and knowledge have either remained stagnant or actually gotten worse with this company. Combine that with programing in C and I feel like I've been left holding the bag. I need options here before I somehow find myself replaced by an Indian despite being told "Your work is proprietary and cannot be done by offshore employees," as if that's stopped PHI being leaked and exposed for the past several months or turning entire teams into being contractors for Tech Mahindra.

Both, Senators J Kennedy and Hawley - calling out VZ for NOT protecting the privacy of customers and handing over data to specific GOP officials with NO question whatsoever. HAtchet man being called out by obe of the senators:
https://www.instagram.com/reel/DUnxKc_EQTw/?igsh=M2xha3I2MDl0Nnlw

They should has told the senator that Dan was too busy drinking coffee and takkng selfies for his said: “baby”

anyone get a copy of their own information and documentation that was released due to the breach?

Now even less time for DXC. The AI bot who wrote the earnings call speech is now the DXC CEO.

TikTok USDS Joint Venture LLC Established in Compliance with U.S. Regulatory Requirements

Today, TikTok USDS Joint Venture LLC has been established in compliance with the Executive Order signed by President Trump on September 25, 2025, now enabling more than 200 million Americans and 7.5 million businesses to continue to discover, create, and thrive as part of TikTok's vibrant global community and experience. The majority American owned Joint Venture will operate under defined safeguards that protect national security through comprehensive data protections, algorithm security, content moderation, and software assurances for U.S. users.
TikTok USDS Joint Venture's mandate is to secure U.S. user data, apps and the algorithm through comprehensive data privacy and cybersecurity measures. It will safeguard the U.S. content ecosystem through robust trust and safety policies and content moderation while ensuring continuous accountability through transparency reporting and third-party certifications.
….
Data Protection: U.S. user data will be protected by USDS Joint Venture in Oracle's secure U.S. cloud environment. The Joint Venture will operate a comprehensive data privacy and cybersecurity program that is audited and certified by third party cybersecurity experts. The program will adhere to major industry standards, including the National Institute of Standards and Technology (NIST) CSF and 800-53 and ISO 27001 as well as the Cybersecurity & Infrastructure Security Agency (CISA) Security Requirements for Restricted Transactions.
Algorithm Security: The Joint Venture will retrain, test, and update the content recommendation algorithm on U.S. user data. The content recommendation algorithm will be secured in Oracle's U.S. cloud environment.
Software Assurance: The Joint Venture will secure U.S. apps through software assurance protocols, and review and validate source code on an ongoing basis, assisted by its Trusted Security Partner, Oracle.
Trust & Safety: The Joint Venture will safeguard the U.S. content ecosystem and have decision-making authority for trust and safety policies and content moderation.
Interoperability enables the Joint Venture to provide U.S. users with a global TikTok experience, ensuring U.S. creators can be discovered and businesses can operate on a global scale. TikTok global's U.S. entities will manage global product interoperability and certain commercial activities, including e-commerce, advertising, and marketing.
The Joint Venture, built on the foundation of the TikTok U.S. Data Security (USDS) organization, will operate as an independent entity governed by the following seven-member, majority-American board of directors:
…

Raul Fernandez – Independent Director and Chair of the Security Committee: Raul Fernandez is President and Chief Executive Officer of DXC Technology and a member of its Board of Directors. He brings more than three decades of experience at the intersection of technology, risk, and national security.
…

Full Press Release here: https://newsroom.tiktok.com/announcement-from-the-new-tiktok-usds-joint-venture-llc?lang=en

Infosys has launched an initiative to survey employees about their work-from-home electricity usage. This effort aims to accurately estimate greenhouse gas emissions for environmental reporting. The company's hybrid work model means its environmental footprint extends beyond office campuses. Infosys states the survey is voluntary and for internal assessments and regulatory compliance. This move is part of its long-standing sustainability program.

https://www.latestly.com/technology/infosys-asks-employees-to-share-work-from-home-electricity-usage-data-know-why-7290500.html/amp

Oh boy. The outcome of this won’t be good.

https://shublawyers.com/in-the-news/gainwell-technologies-reportedly-exposes-americans-private-information-overseas/

https://news.bloomberglaw.com/health-law-and-business/medicaid-firm-struggles-to-block-patient-data-from-india-workers

Hey DP,
You know we believe your teams in India are doing the same.
Do our customers know this?
Better clean this up.
Keep on sending those jobs to your friends.
This is what happens.

What is a CCG? What information is Truist obtaining and creating a database for all to see? Is it true that they are harvesting my personal information and not safeguarding it but allowing all the employees to see it across the bank?

https://news.bloomberglaw.com/health-law-and-business/medicaid-firm-struggles-to-block-patient-data-from-india-workers

Anyone want to tell us about how Citi is handling AI use in various departments? I've heard that some departments aren't touching it, while others have gone full send and are exposing everything from policies to chats. Which one are you guys using too, chatgpt or another?

Att quickly discovered some unauthorized access to customer online accounts in August. User is and answers to security questions were obtained from outside of att and used to log in. Impacted accounts have been locked by att.

If you were one of the people that did download the list, I received an email from Cybersecurity letting me know I broke policy by accessing sensitive information. They only asked to respond back to confirm any copies have been deleted, and if you distributed the list, to let them know where you shared it. My director was CCd on the email, but they didn’t think it was a big deal and moved on. There will only be action taken if you don’t respond to the email.

I believe this is a major concern perhaps being overlooked.

I wonder if the American public or even our government realize how vulnerable transferring sensitive american federal health data across the world globe to another country in the far east.

Please discuss. Maybe not an issue but personally it makes me a little concerned.

For whatever reason I think they are tracking us? What does this forum think?

They can see your email address in the metadata. Saw the manager's version of the job aid. Probably not a huge shocker.

All our HR data is handle by AWS ....really?
Try to contact a human that works in AT&T HR you will never find ....anyone.
They subcontract all to apps or other companies.
We own nothing. Not even a server with our own data.
Good Idea, good implementation from our Bachelor in Arts Jeremy.
Let's hold all data for our network in Amazon Prime.

Dozens of Oracle customers impacted by Clop data theft for extortion campaign: Researchers said malicious activity dates back to early July and active exploitation was observed two months ago.

Clop, the notorious ransomware group, began targeting Oracle E-Business Suite customers three months ago and started exploiting a zero-day affecting the enterprise platform to steal massive amounts of data from victims as early as Aug. 9, Google Threat Intelligence Group and Mandiant said in a report Thursday.

Was the WF rush to the cloud Risky? This risk averse employee thinks all of our data is at risk everyday it is on a cloud. Stupid is as stupid does.

I can only imagine how many people will experience identity theft as a result of this.

“ LOUISVILLE, Ky.--(BUSINESS WIRE)-- Humana Inc. (NYSE: HUM) and Providence, a Washington-based health system, today announced a pioneering initiative to streamline and secure data exchange between payers and providers – setting a new standard for interoperability in support of value-based care.”

I bet in coming days, we will hear about lawsuits where major data breaches occurred as a result to this. Mark your calendars.

A reminder for those waiting for the next CES. Your feedback is being collected in realtime. Employees sentiment is monitored by Aware, an AI service that monitors internal dialogue.
If you were wondering why the CES seems diluted, it is because they already have the data they need

https://www.cnbc.com/amp/2024/02/09/ai-might-be-reading-your-slack-teams-messages-using-tech-from-aware.html

Verint is the vendor, they track activity while logged into the network. Not all departments have this, most do not. That probably will change at some point.

Essentially it measures activity, idle and inactive time as well as time in applications. Some activities can be flagged, like people that write a book in MS Word by putting a coffee cup on their keyboard, mouse jigglers, etc. Uncertain about putting yourself in a Teams call meeting or other ways to trick the system.

Check your entitlements for Verint and if you have it, assume your clicks are being tracked in addition to network login and out activity. Again, I assume everyone will have it at some point, but you probably don’t as of now.

Who is looking forward to our every word being monitored?!

https://finance.yahoo.com/news/oracle-investigating-hacks-customers-e-214339029.html

Previously, ORCL never acknowledge a security breach !

Is it against the code of conduct for an employee to input Truist proprietary information into an AI platform like ChatGPT? To my knowledge, the only AI tool currently authorized at Truist is CoPilot, and it’s being tested by a limited group of employees. A colleague of mine consistently distributes detailed meeting notes within five minutes of discussion, which strongly suggests AI assistance. Since this colleague works remotely, it’s likely they use a personal computer to access ChatGPT and then send the notes to their Truist email. I suspect this could breach the code of conduct, but I’d appreciate any insights or clarifications from others.

Mutual of America Financial Group Data Breach – Investigated by Federman & Sherwood
Oklahoma City, Oklahoma (August 22, 2025) – The law firm of Federman & Sherwood announces that it is investigating a data breach involving Mutual of America Financial Group, which recently filed a notice of data breach with the Attorney General of California.

According to the company’s notice, on July 22, 2025, Mutual of America inadvertently.

and the names of those participating in the settlement going to be public, do you think Stankey would use that information as one of the "metrics" to fire employees that make a claim for the money?