Issue 43 — Latest in privacy & security

In today's email…

• WEF highlights info and technological risk
• DeepSeek banned on Australian government devices
• Lax DOGE security puts millions of federal employee records at risk
• SEC limits crypto enforcement
• A consumer rights group filed a class-action lawsuit against X and TikTik
• TerraTrue Enterprise Grade Identity Management
• Upcoming webinars & events

  Latest in Privacy and Security

• The World Economic Forum’s 2025 Global Risk Report ranked several technological and information risks as among the world’s most severe. Misinformation and disinformation was ranked as the number one risk over the next two years, with cyber espionage and warfare coming in at number five. Over the next ten years, the WEF gave the top four places to environmental risks like extreme weather and biodiversity loss, but misinformation (5th), adverse outcomes of AI technologies (6th) and cyber espionage and warfare (9th) all made it to the top ten. Read more
• Cybersecurity experts are sounding the alarm at a range of reckless and potentially illegal practices by Elon Musk, as head of the new Department of Government Efficiency, including:
• Attempting to access the Department of Treasury’s payment system, controlling nearly all federal spending. According to one source, Musk may have granted administrative access to an associate, in spite of DOGE’s status as an external advisory board
• Installing a private, unapproved server on the Office of Personnel Management, putting tens of millions of federal worker records at risk.
• Failing to take standard security precautions like independent oversight and activity logging, potentially putting highly classified data at risk.
  Read more
  

  Regulations / Fines

• Australia has banned DeepSeek from government devices less than a month after the release of the high performance chatbot. While DeepSeek’s superior efficiency impacted stocks internationally, including in Australia, the government insists the ban is because of “unacceptable” national security risks.However, the ban isn’t confined to high-security applications, and applies to all government systems and devices.
• The Trump administration has moved to scale back the SEC’s crypto enforcement division, with a string of cuts, demotions, and reassignments. The crypto division has a staff of over 50, but the administration is moving employees to other departments, including shifting one top lawyer out of enforcement entirely. The move is in keeping with Trump’s plan to loosen crypto enforcement and regulation. Read more
• The Dutch Foundation for Market Information Research (SOMI), an online consumer and minor rights non-profit, filed a class action lawsuit against X and Twitter. They claim the platforms violated German and EU laws, including the AI Act, GDPR, and the Digital Services Act. The suit accuses the platforms of spreading false and misleading content, sponsored content without proper labelling, and other illegal practices under European law.
  
  
• A press release by the law firm representing SOMI called out X specifically for failing to report data breaches, inform or compensate victims, and for failing to provide a legal basis for processing sensitive data as required under European law. They criticized TikTok for addictive design and data manipulation, and other practices to manipulate young users in particular.

  Feature Focus

• TerraTrue offers enterprise-grade identity management, featuring SCIM-based user group and role management across major identity providers. This includes centralizing control through provider systems, as well as automated user provisioning and deprovisioning.

 Job Board

• Credit Karma: Privacy Counsel
• Axis: Privacy Counsel
• Zscaler: Privacy Counsel
• Allstate: AI and Model Risk Lead
• Northern Trust: Third Party Risk Management Lead

 Upcoming Events

• IAPP Data Protection Intensive: UK | Mar 10-11 | London
• IAPP Global Privacy Summit 2025 | Apr 21-24 | Washington, DC
• IAPP Canada Privacy Symposium | May 11-15 | Toronto, Ontario
• FutureCon Detroit | Feb 26| Detroit, MI
• Compliance Week Cyber Risk & Data Privacy Summit | Feb 10-11 | Alexandria, VA
• Riskworld 2025 | May 3-7 | Chicago, IL
• Compliance Week Third Party Risk Management Summit |Jun 2-4 | Austin, TX

Need to help think through your third party risk management?Grab 15 minutes with our CEO Jad Boutros (Former CISO at Snap). Limited spots open this month.