Cybersafety Sentinel March 2023 Week 4

Claudiu’s Top Post

Big, positive news for public education and parents: “This order makes clear that ed tech providers cannot outsource compliance responsibilities to schools, or force students to choose between their privacy and education”. Kudos to the Federal Trade Commission for standing up for children’s right to privacy and offering much-needed guidance to the poorly regulated edtech sector. Read More.

5 Years in Prison

Conor Brian Fitzpatrick, the 20-year-old founder and administrator of the now-defunct BreachForums, has been charged in the U.S. with conspiracy to commit access device fraud. BreachForums served as a marketplace for trading hacked or stolen data. Read More.

K-12 Cybersecurity Education Law

North Dakota has become the first state in the U.S. to approve legislation requiring cybersecurity education, requiring the teaching of computer science and cybersecurity and their integration into K-12 grade classrooms. Read More.

Parents’ Consent Now Required

Utah new laws require social media companies to obtain parental consent for minors using their services, making Utah the first U.S. state to impose such measures. The laws mandate age verification and parental consent for minors to make profiles. Read More.

ChatGPT Data Breach

OpenAI has confirmed a data breach involving ChatGPT, which was caused by a bug in the open source Redis-py library. The issue resulted in the exposure of user information, including chat data and payment-related information for 1.2% of ChatGPT Plus subscribers. Read More.

Adoption Privacy Rights Breached

Nunavut’s Health Department should apologize for a health clinic worker who violated an adoptive parent’s privacy. The incident involved the clinic worker sharing information about the pending adoption with a third party. Read More.