# Data Protection Published articles for Data Protection. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## CTERA Data Archiving Solution Pairs InsightAI With CTERA Archive to Move Inactive Files Off Primary Storage With an Audit Trail DevFeed: [CTERA Data Archiving Solution Pairs InsightAI With CTERA Archive to Move Inactive Files Off Primary Storage With an Audit Trail]() Original publisher: [Read original article]() Author: Harold Fritts Published: 2026-09-17T17:29:28Z Content type: news Language: en Sources: [StorageReview.com]() Topics: [data-processing](), [Artificial Intelligence](), [Security](), [Amazon S3]() Tags: [ai](), [audit-trail](), [data-protection](), [data-storage](), [enterprise](), [object-storage](), [restore](), [retention](), [s3]() ### AI overview CTERA launched a Data Archiving Solution that combines InsightAI with CTERA Archive to identify inactive files and move them from primary storage under retention policies and an audit trail. The solution keeps archived data governed and accessible within the CTERA Intelligent Data Platform, using on-premises or cloud storage tiers. ### Source excerpt CTERA has launched the CTERA Data Archiving Solution, which pairs its InsightAI data service with CTERA Archive so the platform can recommend which files to move off primary storage and then execute the move under retention policy and an audit trail. It's the product follow-through to the Cold Data Storage Report CTERA published a day The post CTERA Data Archiving Solution Pairs InsightAI With CTERA Archive to Move Inactive Files Off Primary Storage With an Audit Trail appeared first on StorageReview.com. ## Spain gets its first taste of AI-aided cyber attack DevFeed: [Spain gets its first taste of AI-aided cyber attack]() Original publisher: [Read original article]() Author: Connor Jones Published: 2026-09-16T11:56:55Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Security Attacks](), [Cybersecurity](), [Artificial Intelligence]() Tags: [ai](), [cyber-crime](), [cybersecurity](), [data-protection](), [security](), [spain]() ### AI overview The article reports that Spain has experienced its first AI-aided cyber attack. It also reports that data protection chiefs are calling for an immediate review of data protection models. ### Source excerpt Data protection chiefs call for 'immediate review' of data protection models ## Ministry of Justice apologizes after court staff accessed Southport victims' files DevFeed: [Ministry of Justice apologizes after court staff accessed Southport victims' files]() Original publisher: [Read original article]() Author: Connor Jones Published: 2026-09-16T10:42:28Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [data](), [Security & Privacy]() Tags: [data-protection](), [information](), [security](), [united-kingdom]() ### AI overview The UK Ministry of Justice apologized after court staff accessed files belonging to Southport victims. The files contained sensitive personal data, but there is no evidence that the information was shared with third parties. ### Source excerpt Sensitive personal data was involved, but there is no evidence it was shared with third parties ## How to Build an Endpoint Data Loss Prevention Strategy for Your Development Team DevFeed: [How to Build an Endpoint Data Loss Prevention Strategy for Your Development Team]() Original publisher: [Read original article]() Author: Alex Tray Published: 2026-09-15T21:03:09Z Content type: tutorial Language: en Sources: [freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More]() Topics: [data loss prevention](), [Development](), [Access Control](), [data]() Tags: [access-control](), [cybersecurity](), [cybersecurityawareness](), [data-loss-prevention](), [data-protection](), [database](), [development](), [encryption](), [endpoint-security](), [hardcoded-credentials](), [it-security](), [net-conf](), [remote-access](), [secrets](), [sensitive-data](), [web-development]() ### AI overview A tutorial for development teams on building endpoint data loss prevention strategies. It covers auditing laptops for secrets and sensitive data, removing unnecessary copies, rotating exposed credentials, and establishing access controls. ### Source excerpt A developer's laptop holds more sensitive data than most people realize: API keys, database credentials, staging environment secrets, and sometimes entire copies of production data pulled down "just f ## How Confluent Uses Third-Party Risk Assessments to Support Vendor Due Diligence DevFeed: [How Confluent Uses Third-Party Risk Assessments to Support Vendor Due Diligence]() Original publisher: [Read original article]() Author: Bethany Carter Published: 2026-09-15T16:40:06Z Content type: article Language: en Sources: [Confluent: Data in motion]() Topics: [Security](), [Business Security](), [vulnerability management](), [Cloud]() Tags: [apra](), [automated](), [cloud](), [compliance](), [confluent](), [confluent-cloud](), [data-protection](), [gdpr](), [identity](), [iso](), [nist](), [security](), [standards](), [third-party](), [trust-center](), [vulnerability-management]() ### AI overview Confluent explains how its Trust Center provides third-party risk assessment reports to support vendor security, resilience, compliance, procurement, and customer due diligence. The article describes assessments including ProcessUnity Global Risk Exchange and control mapping to customer frameworks. ### Source excerpt Confluent's Trust Center simplifies vendor risk reviews with CyberGRX, CyberVadis, SIG, CAIQ, and TruSight/KY3P assessments. ## What's new in CYPEX v2.0.0: tenancy moves from the query to the catalog DevFeed: [What's new in CYPEX v2.0.0: tenancy moves from the query to the catalog]() Original publisher: [Read original article]() Author: Svitlana Lytvynenko Published: 2026-09-15T06:06:05Z Content type: article Language: en Sources: [CYBERTEC PostgreSQL | Services & Support]() Topics: [PostgreSQL](), [tenant data protection](), [Security](), [Database]() Tags: [cypex](), [data-protection](), [database](), [how-to](), [news](), [postgresql](), [product](), [schema](), [security]() ### AI overview CYPEX 2.0.0 moves tenant isolation from application-level query filters into PostgreSQL row-level security policies stored in the database catalog. The policies use JWT claims to apply organization-specific access rules to every connection and query. ### Source excerpt This blog highlights the details of CYPEX 2.0, with each feature being explained in detail. Read to know more. The post What's new in CYPEX v2.0.0: tenancy moves from the query to the catalog appeared first on CYBERTEC PostgreSQL | Services & Support. ## Italy's email open tracking pixels rules are changing DevFeed: [Italy's email open tracking pixels rules are changing]() Original publisher: [Read original article]() Author: Denis O'Sullivan Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [Twilio Blog]() Topics: [data](), [Forms]() Tags: [2026](), [communications](), [compliance](), [data-protection](), [email](), [industry-insights](), [law](), [legal](), [pixel](), [regulatory](), [requirements]() ### AI overview Italy's data protection authority has issued new rules for email open-tracking pixels. Senders must disclose their use, obtain prior explicit consent for many uses, update opt-in forms, and provide opt-out options. The rules include different requirements for subscribers who joined before and after April 29, 2026, with a compliance deadline of October 28, 2026. ### Source excerpt Italy has followed France and introduced rules around email open tracking pixels. Here's what you need to know. ## Scality Maestro 1.1 Manages ARTESCA Fleets From One Console With No VPN Into Customer Sites DevFeed: [Scality Maestro 1.1 Manages ARTESCA Fleets From One Console With No VPN Into Customer Sites]() Original publisher: [Read original article]() Author: Harold Fritts Published: 2026-09-10T20:17:01Z Content type: news Language: en Sources: [StorageReview.com]() Topics: [cloud-infrastructure](), [Monitoring](), [Tooling](), [Deployment](), [Server](), [Firewall](), [Network](), [Disk image]() Tags: [data-protection](), [deployment](), [enterprise](), [firewall](), [infrastructure](), [monitoring](), [network](), [platform](), [production](), [scale](), [server](), [software](), [tooling](), [updates](), [upgrade]() ### AI overview Scality has generally released Maestro 1.1, a fleet management platform for service providers operating many Scality ARTESCA object storage deployments. It provides centralized monitoring, software and server firmware updates, capacity tracking, and automated pay-as-you-go billing without requiring VPN tunnels or customer-side network reconfiguration. Each deployment connects outbound to Maestro, which does not connect back into customer networks. ### Source excerpt Scality has made Maestro 1.1 generally available, a fleet management platform for service providers running large numbers of Scality ARTESCA object storage deployments on behalf of their customers. The target is the backup-as-a-service business that starts as a handful of ARTESCA clusters and grows to tens or hundreds, each sitting inside a different customer's network The post Scality Maestro 1.1 Manages ARTESCA Fleets From One Console With No VPN Into Customer Sites appeared first on StorageReview.com. ## Bridging the Gap Between Theory and Practice in Internet Operations DevFeed: [Bridging the Gap Between Theory and Practice in Internet Operations]() Original publisher: [Read original article]() Author: Jelena Cosic Published: 2026-09-02T08:29:12Z Content type: article Language: en Sources: [RIPE Labs]() Topics: [Internet](), [Network](), [data]() Tags: [collaboration](), [community](), [data](), [data-protection](), [events](), [infrastructure](), [internet](), [network](), [privacy](), [research](), [security]() ### AI overview The article examines how Internet researchers and network operators can build more deliberate, lasting collaboration beyond chance encounters at RIPE Meetings. ### Source excerpt Internet research can benefit from operational insight, and network operators from research expertise. Building on what we learned at RIPE 92, we look at practical ways to make those connections easier and turn promising conversations into lasting collaboration. ## Omdia Study Highlights Declining Ransomware Recovery Rates and the Immutability Gap in Backup Storage DevFeed: [Omdia Study Highlights Declining Ransomware Recovery Rates and the Immutability Gap in Backup Storage]() Original publisher: [Read original article]() Author: Harold Fritts Published: 2026-09-01T15:42:11Z Content type: news Language: en Sources: [StorageReview.com]() Topics: [ransomware](), [Resilience](), [Security]() Tags: [backup](), [data-protection](), [enterprise](), [ransomware](), [recovery](), [research](), [resilience](), [security](), [third-party]() ### AI overview An Omdia study commissioned by Object First reports declining enterprise ransomware recovery rates despite increased awareness of data protection strategies. The findings show frequent attacks, worsening data recoverability, missed recovery objectives, and a substantial gap between the perceived importance of immutable backup storage and its actual implementation. The study also highlights demand for independent validation of vendor immutability claims. ### Source excerpt A recent study by the analyst firm Omdia, commissioned by Object First, reveals that enterprise ransomware recovery rates are declining despite growing awareness of modern data protection strategies. According to the research, 83 percent of surveyed organizations experienced a successful ransomware attack in the past 24 months, up from 66 percent in 2024. Among those The post Omdia Study Highlights Declining Ransomware Recovery Rates and the Immutability Gap in Backup Storage appeared first on StorageReview.com. ## PCI Compliance Checklist for SaaS and Digital Products DevFeed: [PCI Compliance Checklist for SaaS and Digital Products]() Original publisher: [Read original article]() Author: Ayush Agarwal Published: 2026-04-15T00:00:00Z Content type: tutorial Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [Security](), [network security](), [Firewall](), [data](), [Encryption](), [TLS (Transport Layer Security)](), [Authorization]() Tags: [compliance](), [configuration](), [cryptography](), [data-protection](), [digital-products](), [firewall](), [merchant-of-record](), [network-security](), [requirements](), [saas](), [scope](), [security](), [tls]() ### AI overview A practical PCI DSS compliance checklist for SaaS companies and digital product sellers. It explains how checkout architecture determines SAQ requirements, how hosted checkouts and merchant-of-record services can reduce compliance scope, and which network security, data protection, and access-control practices are required. ### Source excerpt A practical PCI compliance checklist for SaaS companies selling digital products. Understand SAQ types, scope reduction, and how a merchant of record simplifies compliance. ## A differentially private framework for gaining insights into AI chatbot use DevFeed: [A differentially private framework for gaining insights into AI chatbot use]() Original publisher: [Read original article]() Published: 2025-12-10T21:59:41Z Content type: article Language: en Sources: [The latest research from Google]() Topics: [Artificial Intelligence](), [AI Chat](), [Large Language Model](), [Google](), [Algorithm](), [pii]() Tags: [ai](), [chatbots](), [clustering](), [code](), [data](), [data-protection](), [generative-ai](), [google](), [insights](), [large-language-model](), [llm](), [pii](), [pipeline](), [research](), [responsible-ai](), [security-privacy-and-abuse-prevention]() ### AI overview Google Research introduces Urania, a framework for generating high-level insights into AI chatbot usage while protecting user conversation privacy. Its pipeline combines differentially private clustering, keyword extraction, and LLM summarization to provide formal, end-to-end differential privacy guarantees. ### Source excerpt Generative AI ## Figma expands support for India with local data hosting and new governance tools DevFeed: [Figma expands support for India with local data hosting and new governance tools]() Original publisher: [Read original article]() Author: Figma Published: 2025-12-05T00:00:00Z Content type: news Language: en Sources: [Figma Blog]() Topics: [Figma](), [Localization (l10n)](), [data](), [hosting](), [Security]() Tags: [2026](), [data-protection](), [enterprise](), [figma](), [governance](), [hosting](), [india](), [privacy](), [security]() ### AI overview Figma is expanding support for India with local hosting of Figma file data and new enterprise governance features. Local hosting is planned for Q1 2026, while Governance+ will provide enhanced access controls and help customers strengthen security and compliance. ### Source excerpt Figma introduces new governance features for enterprise customers, with local data residency expected next quarter. ## Expanding data residency access to business customers worldwide DevFeed: [Expanding data residency access to business customers worldwide]() Original publisher: [Read original article]() Published: 2025-11-25T22:00:00Z Content type: article Language: en Sources: [OpenAI News]() Topics: [OpenAI](), [ChatGPT](), [tenant data protection](), [Claude](), [Encryption](), [TLS (Transport Layer Security)]() Tags: [api-platform](), [chatgpt](), [data-privacy](), [data-protection](), [encryption](), [global](), [openai](), [product](), [tls]() ### AI overview OpenAI is expanding data residency for eligible ChatGPT Enterprise, ChatGPT Edu, and API Platform customers worldwide. Customers in supported regions can store customer content at rest in-region, while approved API Platform customers can route project requests in-region without storing model requests and responses at rest on OpenAI's servers. ### Source excerpt OpenAI expands data residency for ChatGPT Enterprise, ChatGPT Edu, and the API Platform, enabling eligible customers to store data at rest in-region. ## Introducing Fast, Native Encryption in Turso Database DevFeed: [Introducing Fast, Native Encryption in Turso Database]() Original publisher: [Read original article]() Author: Avinash Sajjanshetty Published: 2025-10-07T00:00:00Z Content type: article Language: en Sources: [Turso Blog]() Topics: [Turso](), [Encryption](), [SQLite](), [Cryptography](), [Security](), [Open Source]() Tags: [data-privacy](), [data-protection](), [database](), [encryption](), [open-source](), [security](), [sqlite](), [standards](), [turso]() ### AI overview Turso Database introduces native page-level encryption built into its SQLite-compatible database, without requiring extensions. It supports AEGIS and AES-GCM authenticated encryption, keeps keys in memory, and reports approximately 6% read overhead and 14% write overhead. ### Source excerpt Turso Database now ships native page-level encryption with AEGIS and AES-GCM, adding just 6% read and 14% write overhead with no SQLite extension. ## Laravel Cloud Achieves SOC 2 Type 2 Certification, Nightwatch and Forge Next DevFeed: [Laravel Cloud Achieves SOC 2 Type 2 Certification, Nightwatch and Forge Next]() Original publisher: [Read original article]() Author: André Valentin Published: 2025-09-05T09:54:10Z Content type: news Language: en Sources: [Laravel Blog]() Topics: [SOC](), [Cloud](), [Security](), [Availability](), [Laravel]() Tags: [2025](), [attestation](), [audits](), [availability](), [cloud](), [compliance](), [data-protection](), [enterprise](), [monitoring](), [reports](), [security](), [soc](), [soc-2](), [standards](), [trust](), [verification]() ### AI overview Laravel Cloud achieved SOC 2 Type 2 certification for Security, Confidentiality, and Availability after completing its audit on July 31, 2025. The article explains the significance of SOC 2, contrasts Type 1 and Type 2 reports, and outlines planned SOC 2 audits for Nightwatch and Forge. ### Source excerpt Laravel Cloud achieves SOC 2 Type 2 certification for Security, Confidentiality, and Availability. Read how Laravel's compliance roadmap includes Nightwatch and Forge SOC 2 audits. ## Figma deepens roots in Australia with local data hosting and more DevFeed: [Figma deepens roots in Australia with local data hosting and more]() Original publisher: [Read original article]() Author: Figma Published: 2025-07-21T00:00:00Z Content type: article Language: en Sources: [Figma Blog]() Topics: [Figma](), [hosting](), [data](), [Security]() Tags: [australia](), [data-protection](), [enterprise](), [figma](), [governance](), [hosting](), [security]() ### AI overview Figma announced local hosting for Figma file data in Australia, alongside new governance features for enterprise customers. ### Source excerpt Figma introduces new governance features for enterprise customers, with local data residency expected later this year. ## Privacy for the newly appointed (and already exasperated) DPO DevFeed: [Privacy for the newly appointed (and already exasperated) DPO]() Original publisher: [Read original article]() Published: 2025-06-27T16:09:35Z Content type: opinion Language: en Sources: [Latacora]() Topics: [dpo](), [data](), [trust]() Tags: [compliance](), [data-protection](), [dpo](), [gdpr](), [law](), [privacy](), [trust]() ### AI overview This article offers guidance for startup employees responsible for privacy and data protection, including newly appointed Data Protection Officers. It argues that transparency, privacy by design, and data minimization help businesses maintain compliance and build customer trust, while noting the extraterritorial reach of the EU GDPR and China's PIPL. ### Source excerpt Every other week, regulators around the world bombard their constituents with new data protection laws and acronyms. As the person who was just voluntold you're now responsible for privacy at your startup, in addition to all your other duties and without any additional resources, how can you possibly be expected to keep up--let alone contextualize that information to maintain compliance? Privacy, at its core, is an ethical issue, which means the solution to your privacy challenges is deceptively simple: do the right thing and be transparent with your customers. That's it. That's what everyone means when they say "privacy by design." ## Laravel Cloud achieves SOC 2 Type 1 Compliance DevFeed: [Laravel Cloud achieves SOC 2 Type 1 Compliance]() Original publisher: [Read original article]() Author: André Valentin Published: 2025-03-26T03:04:00Z Content type: news Language: en Sources: [Laravel Blog]() Topics: [SOC](), [soc 2](), [Laravel](), [Cloud](), [Security](), [Availability](), [data](), [Open Source]() Tags: [2](), [availability](), [certifications](), [cloud](), [compliance](), [data-protection](), [laravel](), [open-source](), [report](), [security](), [soc](), [soc-2]() ### AI overview Laravel Cloud has completed a SOC 2 Type 1 audit, confirming that its security controls are suitably designed and implemented at a specific point in time. The article explains the certification's implications for access protection, availability, confidentiality, privacy, and operational transparency, and notes plans for SOC 2 Type 2 certification and certifications for Laravel Forge and Laravel Nightwatch. ### Source excerpt SOC 2 Type 1 compliance achieved with SOC 2 Type 2 coming soon for Laravel Cloud as well as Laravel Forge and Laravel Nightwatch. ## What is a Data Processing Agreement (DPA)? DevFeed: [What is a Data Processing Agreement (DPA)?]() Original publisher: [Read original article]() Published: 2025-03-04T22:53:17Z Content type: tutorial Language: en Sources: [Learn on Tailscale]() Topics: [data-processing](), [data]() Tags: [compliance](), [data-processing](), [data-protection](), [dpa](), [gdpr](), [legal]() ### AI overview A Data Processing Agreement (DPA) is a legally binding contract between a data controller and a data processor. It defines responsibilities for handling personal data, supports compliance with GDPR and other regulations, and is required when processing is outsourced to an external service provider. ### Source excerpt A Data Processing Agreement (DPA) defines how personal data is handled to make sure compliance is met and data protection laws are followed. ## Bugbounty and Pentests at Neon DevFeed: [Bugbounty and Pentests at Neon]() Original publisher: [Read original article]() Author: Busra Demir Published: 2024-11-25T16:43:38Z Content type: article Language: en Sources: [Blog -- Neon Docs]() Topics: [Bug Bounty](), [Security](), [Cybersecurity](), [Vulnerabilities](), [Serverless](), [Open Source](), [Database](), [Authentication](), [tenant data protection](), [API]() Tags: [api-security](), [authentication](), [bounty](), [bug-bounty](), [company](), [cybersecurity](), [data-protection](), [launch](), [open-source](), [partnership](), [platform](), [privacy](), [production](), [security](), [serverless](), [vulnerabilities]() ### AI overview Neon announces a private Bug Bounty Program in partnership with HackerOne and describes three penetration tests that identified and resolved 58 vulnerabilities. The program covers authentication, data protection, API security, production, and staging environments, with rewards based on severity and defined response targets. ### Source excerpt At Neon, security is at the core of everything we do. Our serverless platform was built with a vision for innovation, but we also know that a commitment to security is paramount. That's why we're excited to announce the launch of our Neon's Bug Bounty Program in partnership with... ## What is Data Residency? Data Residency Concerns for Global Applications DevFeed: [What is Data Residency? Data Residency Concerns for Global Applications]() Original publisher: [Read original article]() Author: Ethan Limchayseng Published: 2024-08-22T21:58:11Z Content type: article Language: en Sources: [Heroku]() Topics: [data](), [Data Management](), [Cloud](), [Security, Privacy and Abuse Prevention](), [Heroku]() Tags: [cloud](), [cloud-infrastructure](), [compliance](), [data](), [data-management](), [data-protection](), [dynos](), [engineering](), [heroku](), [privacy](), [private-spaces](), [security-compliance]() ### AI overview This article explains data residency, including the legal requirements governing where data is stored and processed. It discusses how global applications affect compliance obligations and notes that cloud regions and services such as Private Dynos from Heroku Enterprise may help address those requirements. ### Source excerpt Data Residency Compliance Is Possible with the Right Cloud Provider Because today's companies operate in the cloud, they can reach a global audience with ease. At any given moment, you could have customers from Indiana, Indonesia, and Ireland using your services or purchasing your products. With such a widespread customer base, your business data will [...] The post What is Data Residency? Data Residency Concerns for Global Applications appeared first on Heroku. ## Space secrets security update DevFeed: [Space secrets security update]() Original publisher: [Read original article]() Author: system Published: 2024-05-31T00:00:00Z Content type: news Language: en Sources: [Hugging Face - Blog]() Topics: [Security](), [incident](), [Authorization](), [spaces](), [tenant data protection]() Tags: [audit](), [authorization](), [data-protection](), [incident](), [infrastructure](), [kms](), [secrets](), [security](), [space](), [tokens]() ### AI overview Hugging Face reports unauthorized access involving secrets on its Spaces platform and suspects that some Spaces secrets may have been accessed. It revoked a number of HF tokens, recommended refreshing keys and tokens, and encouraged users to use fine-grained access tokens. The company also described security improvements including removing organization tokens, adding KMS for Spaces secrets, strengthening leaked-token detection and invalidation, and planning to deprecate classic read and write tokens. ### Source excerpt We're on a journey to advance and democratize artificial intelligence through open source and open science. ## How Data Protection Requirements Discourage Excessive Customer Data Hoarding DevFeed: [How Data Protection Requirements Discourage Excessive Customer Data Hoarding]() Original publisher: [Read original article]() Published: 2024-04-20T04:35:00Z Content type: opinion Language: en Sources: [ipSpace.net blog]() Topics: [data](), [Security]() Tags: [customer](), [data](), [data-protection](), [gdpr](), [pci-dss](), [security](), [worth-reading]() ### AI overview The article argues that data protection requirements such as PCI-DSS and GDPR primarily discourage companies from retaining excessive customer data by making data hoarding expensive, rather than directly making companies more secure. ### Source excerpt Another lovely must-read rant from the cranky security professional. TL&DR: Data protection requirements like PCI-DSS aren't there to make companies more secure but to make it too expensive for them to hoard excessive customer data (see also: GDPR). [Next page]()