PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Data Privacy Regulations and Software Development: Navigating GDPR, CCPA, and Beyond

hackerone.com | incident | #compliance | #privacy | #data-protection | #gdpr | #data-privacy | #software-development | #ccpa | #privacy-by-design
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

How GDPR and CCPA reshape software development: privacy by design, data minimization, encryption, DPIAs, and breach notification duties, with practical compliance guidance for developers.
Published
Collected

Related coverage

blog · hackerone.com
GDPR and Pentesting: What You Need to Know
An overview of GDPR obligations for handling EU personal data, covering Article 32 security measures, enforcement fines against Amazon and Meta, and how regular pentesting supports compliance.
blog · hackerone.com
Integrating Generative AI into Your Application: A Security Perspective
Integrating GPT-4 or Claude into applications brings security concerns: sanitize PII before prompts, isolate user data between sessions, and filter and validate AI output before rendering.
blog · hackerone.com
What the California Consumer Privacy Act Means For You
A primer on CCPA: from 2020 California consumers can access, delete and opt out of the sale of their personal data, with obligations for businesses handling data on 50,000+ consumers or earning over $25M.
blog · hackerone.com
What percentage of your software vulnerabilities have GDPR implications?
Analysis suggests up to a quarter of bug bounty reports touch consumer data and thus carry GDPR implications; LocalTapiola's internal hackathon found 14% did, prompting a GDPR-focused bonus bounty.
blog · hackerone.com
Ready or Not, Here Comes GDPR
GDPR arrives May 25, 2018 with fines up to €20M or 4% of revenue; an SAS study finds nearly half of companies underprepared, and rules cover any organization handling EU citizens' data.
blog · bugcrowd.com
Data Privacy Day? Here’s what you need to know.
Marking Data Privacy Day, Bugcrowd notes how big tech mishandles consumer data and why every company is a breach target, making crowdsourced security a way to fix flaws before attackers do.
Back