The U.K. National Cyber Security Centre updated its cyber assessment framework to include a focus on critical infrastructure vulnerabilities. It now includes sections on remote access, privileged operations, user access levels and multifactor authentication.Full story...

IAB Europe published a response to the European Data Protection Board's opinion on the legality of pay-or-consent models for obtaining valid consent to process personal data. IAB Europe said the opinion creates "legal uncertainty for many businesses beyond large online platforms" and the EDPB made "...

The European Data Protection Board issued its 2023 Annual Report. The report contains recaps of the EDPB's adoption of two binding decisions, as well as its urgent binding decision to order Meta to cease all processing of personal data in the European Economic Area.Full story...

France's data protection authority, the Commission nationale de l'informatique et des libertés, issued its 2023 annual report, which indicated the regulator received 35% more complaints in 2023 from the general public than in 2022. The CNIL also saw increases in website traffic, particularly to its ...

The Netherlands' data protection authority, the Autoriteit Persoonsgegevens, warned government offices not to use Facebook if they are uncertain how visitors' data will be affected. The AP said after a 2021 investigation it could not determine whether visitor information is collected legally by the ...