Connect with us

E-Business

Meta Fined €91m for GDPR Violations in User Password Breach

Published

on

Kindly share this post

Ireland’s Data Protection Commission (DPC) has announced a €91 million fine against Meta Platforms Ireland Limited (MPIL) following an inquiry into the company’s handling of user passwords.

Meta Fined €91m for GDPR Violations in User Password Breach

This decision marks a significant development in the enforcement of the General Data Protection Regulation (GDPR), highlighting the importance of secure data handling practices by major tech companies.

The inquiry, which began in April 2019, was initiated after MPIL reported that it had inadvertently stored certain users’ social media passwords in plaintext on its internal systems.

Plaintext storage means the passwords were not encrypted or protected using cryptographic measures, leaving them vulnerable to unauthorized access.

Although the incident was contained within Meta’s internal systems and no external parties gained access to the passwords, the company’s failure to ensure proper security led to a series of GDPR violations.

Findings and Violations

The DPC’s investigation concluded that MPIL had breached several key provisions of the GDPR:

Failure to Notify the DPC of the Breach: MPIL violated Article 33(1) of the GDPR by failing to promptly inform the DPC of the personal data breach concerning the storage of user passwords in plaintext.

Failure to Document the Breach: According to Article 33(5) GDPR, MPIL failed to properly document the breach, which is required to ensure transparency and accountability in data handling.

Inadequate Security Measures: MPIL violated Article 5(1)(f) and Article 32(1) of the GDPR by not implementing appropriate technical and organizational measures to secure user passwords, leaving them susceptible to unauthorized processing.

These violations underscore the company’s inadequate response to the risks posed by insecure password storage and its failure to meet the regulatory standards set by GDPR.

Decision and Penalties

On September 26, 2024, the DPC issued its final decision, which included both a reprimand and a €91 million fine.

The decision was reached after the draft was reviewed by Concerned Supervisory Authorities across the EU/EEA, as required under GDPR’s Article 60. No objections were raised, confirming the widespread support for the ruling.

Deputy Commissioner Graham Doyle emphasized the severity of the incident, noting that “user passwords should not be stored in plaintext, given the risk of abuse.”

He stressed that the sensitivity of these passwords, which allow access to personal social media accounts, made it crucial for companies to implement robust security measures.

Series of Fines

This is not the first time Meta is facing fines under GDPR. In 2023, the company was hit with a massive $1.3 billion penalty for breaching EU data privacy regulations.

Additionally, in 2022, Meta was fined $276 million following a 2021 data breach that compromised the personal information of over 533 million users.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

Digital Encode Targets Unicorn Status, Showcases Cutting-edge Cybersecurity Solutions @ AfriTECH 4.0

Published

on

Kindly share this post

Digital Encode Limited, a leading Cybersecurity and Governance, Risk and Compliance company in Africa, is proud to announce its sponsorship of Africa Tech Alliance Forum [AfriTECH 4.0].

The event, which is set to take place in Lagos, Nigeria, is one of the most anticipated gatherings of technology enthusiasts, innovators, and industry leaders in Africa. The sponsorship highlights Digital Encode’s unwavering commitment to promoting digital innovation and transformation across the continent.

Meanwhile, Digital Encode, in order to strengthen its global presence and enhance cybersecurity capabilities, recently commissioned a state-of-the-art facility at the Lekki area of Lagos.

This expansion is part of the company’s efforts to fulfil its mission of safeguarding organisations worldwide against cyber threats.

Alongside the new office, Digital Encode has launched the Centre for Information Security Intelligence (CISI), a specialised centre aimed at heightening cyber situational awareness, providing tailored threat intelligence, and enabling collaboration with international cybersecurity organisations.

Dr. Obadare Peter Adewale, the Founder and Chief Visionary Officer of Digital Encode, said, that by proactively addressing emerging threats, the company will enhance the cyber resilience of its clients.

“CISI, Digital Encode’s proprietary solution, enables us to identify potential vulnerabilities in our clients’ environments and deploy targeted countermeasures before adversaries can exploit them.

“This approach minimizes the likelihood and impact of cyber incidents, thereby strengthening the overall cyber resilience of Digital Encode’s clients,” Adewale said.

AfriTECH 4.0, scheduled for November 2024, will bring together stakeholders from various sectors to explore the theme: “Leapfrogging Digital Transformation for Future of Africa’s Economy”. The event will feature panel discussions, exhibitions, and networking opportunities designed to foster collaboration and knowledge sharing among businesses, governments, and tech startups. The conference will focus on emerging technologies such as artificial intelligence (AI), cybersecurity, blockchain, and financial technology (fintech), which are shaping the future of Africa’s digital landscape.

As a sponsor, Digital Encode will showcase its cutting-edge solutions in cybersecurity and digital risk management, underscoring its role as a pioneer in helping African businesses navigate the complexities of the digital age.

The firm will also play a key role in panel discussions on data privacy, cybersecurity, and the importance of compliance in fostering trust in digital systems.

Speaking on the sponsorship, Dr. Obadare said, “We are excited to be a part of AfriTECH 4.0, which represents the forefront of innovation in Africa. Digital transformation is critical to the development of our continent, and we believe that fostering collaborations and sharing knowledge at events like this will accelerate the growth of Africa’s digital economy.”

AfriTECH 4.0 promises to attract a diverse audience of entrepreneurs, policymakers, tech experts, and investors, all committed to driving Africa’s digital future. With Digital Encode’s expertise and leadership in cybersecurity, the conference is set to address some of the most pressing challenges and opportunities in the African tech ecosystem. Participation is Free, but you are required to register via the link here: https://bit.ly/3ZPdi88.

Similarly, Dr. Obadare disclosed Digital Encode’s unicorn status intent during a recent interview with CNBC. The interview aired on Thursday, 10 Oct 2024 13:57:37 GMT.

You can watch it here.

As the driving force behind CISI, Adewale emphasized that the firm solidifies its position as a thought leader in the cybersecurity domain by developing innovative solutions that address the evolving threat landscape.

“Digital Encode demonstrates its commitment to staying ahead of the curve and providing its clients with the most effective cybersecurity strategies,” the statement said.

The CVO underscored the company’s commitment to driving innovation and influencing the direction of the cybersecurity industry.

He added that through the publication of research reports, thought-provoking insights, and active participation in industry conferences and events, Digital Encode aims to inspire innovation and shape the global cybersecurity discourse.


Kindly share this post
Continue Reading

E-Business

Jumia to Cease Operations in Non-Strategic Markets

Published

on

Kindly share this post

Jumia Technologies, a leading e-commerce platform in Africa, has announced the planned closure of its operations in South Africa, operated under the brand name Zando, and Tunisia.

Jumia to Cease Operations in Non-Strategic Markets

The closure of these markets will allow Jumia to focus resources on its most promising markets that have a stronger growth potential.

For the year ended December 31, 2023, and the six months ended June 30, 2024, South Africa and Tunisia combined accounted for only 3.5% and 2.7% of total orders, and 4.5% and 3.0% of GMV, respectively.

The strategic decision to close operations in these markets is expected to improve overall operational efficiency across Jumia’s business.

Francis Dufay, Jumia CEO, said, “Since assuming the role of CEO, I have focused on initiatives aimed at strengthening our business and placing us on a path to profitability. After a thorough analysis, we made the difficult decision to close down our operations in South Africa and Tunisia. Both businesses account for a negligible portion of our overall operations.

Furthermore, competitive and macroeconomic conditions in both markets have limited each country’s growth potential and their contribution to our overall business has not aligned with expectations. Decisions like these are never easy and we are extremely grateful to team members in both countries, who worked tirelessly to serve our customers every day. We are also grateful to our suppliers, vendors and logistics partners in these markets. We deeply thank them for their hard work and service to Jumia.”

Jumia believes that exiting these markets and refocusing resources on its other nine markets will leave the company better positioned to accelerate overall growth and further improve efficiency.

The Company expects to cease operations in both South Africa and Tunisia by year end 2024.

 


Kindly share this post
Continue Reading

E-Business

NEPC Partners NDPC to Safeguard Exporters Data

Published

on

Kindly share this post

Nigerian Export Promotion Council (NEPC) and Nigerian Data Protection Commission (NDPC) have agreed to provide a framework that will safeguard personal and corporate transactions within the exporting community.

NEPC Partners NDPC to Safeguard Exporters Data

L-r: Dr. Vincent Olatuniji, national Commissioner/CEO, NDPC and Nonye Ayeni, executive director/CEO, NEPC

Nonye Ayeni, executive director/CEO of NEPC, disclosed this while receiving Dr. Vincent Olatuniji, national Commissioner/CEO of NDPC in her office in Abuja

Ayeni noted that with the huge number of registered exporters in the country striving to fulfil several international contract obligations for the export of Made-in-Nigeria products, there was a need to protect these sensitive data to ensure that Nigerian businesses remain competitive in global trade.

She observed that safeguarding personal and corporate data will further attract positive endorsements from the international community and help increase Foreign Direct Investments (FDI) into the country.

Olatuniji revealed that the NDPC was established primarily to collaborate with critical stakeholders to safeguard the rights of natural persons to data privacy, foster safe conduct of transactions involving the exchange of personal data, prevent manipulation of personal data and ensure that Nigerian businesses remain competitive in international trade through the safeguards afforded by a just and equitable legal framework on data protection.

He implored the NEPC to establish a data protection and control unit, as the unit he adviced will determine the purpose and manner for processing data to ensure that the methods by which data is collected are strictly in line with the principles of data collection.

Towards this end,  Olatunji said the NDPC was willing to provide capacity building on data protection and control for officers of the Council to make the NEPC compliant with global best practices.

 

 

 

 

 

 

 


Kindly share this post
Continue Reading

Trending