Cyber_Bytes - Issue 8 2020

Welcome to the eighth 2020 edition of Cyber_Bytes, our bi-weekly roundup of key developments in cyber, tech and evolving risks.

With ransomware being one of the most common cyber breaches of 2019, it is no surprise that the commentary around it is increasing. 

Regular readers might recall the plans by ransomware developer Nemty to publish stolen data if ransoms are not paid by its victims. In latest news, the ransomware developer behind the well-known Travelex breach has published personal data contained on the systems of American IT firm, Artech Systems, with threats that the data would be sold to third parties if Artech did not pay the ransom demanded.  

To read more, please click here, and here.

Timescales for responding to data subject access requests updated

The ICO’s guidance has been amended to state that the time limit for a response to a DSAR starts from the day the request is received (even if it is not a working day) until the corresponding calendar date in the next month, instead of the day after the request.

To read RPC's take on this, please click here.

Mastercard has unveiled plans to open a cybersecurity centre in Europe.

A focus will be on information sharing with law enforcement bodies such as the National Cyber Security Centre (NCSC) and the National Crime Agency (NCA).

For the full article, please click here.

Another week, another quiz to test your knowledge…

BT have released a security savvy quiz, with questions on the digital world and the risks that it brings with it. 

To take the quiz, please click here

Warning from the FCA and ICO  

A joint statement from the FCA and ICO has warned firms about the sale of consumers' personal data by FCA-authorised firms and insolvency practitioners to claims management companies. The statement warns that any such sale is likely to be unlawful, and in breach of the GDPR, PECR and the FCA Handbook. 

For the full statement, please click here.

Online Harms White Paper and the ICO's response

The government may legislate to appoint Ofcom as the regulator to enforce rules to make the internet a safer place. As part of the change, Ofcom may be given new powers to make sure online companies have the correct systems and processes to keep people using their platforms safe.

To read the government and the ICO's responses, please click here.