Data Privacy + Cybersecurity Insider
CYBERSECURITY
SAP NetWeaver Visual Composer Requires Urgent Patch
SAP Netweaver Visual Composer users are urged to patch a critical vulnerability that attackers are actively exploiting. According to ReliaQuest, which detected the vulnerability, the attacks allow full system compromise through unauthenticated file uploads. Read more
HIPAA
PIH Health Settles HIPAA Violations for $600,000
PIH Health, a health care entity located in California, suffered a data breach in June 2019 when 45 employee email accounts were compromised in a targeted phishing campaign. The accounts contained the protected health information (PHI) of 189,763 individuals, including their names, social security numbers, driver’s license numbers, diagnoses, lab tests, medications, treatment, claims, and financial information. Read more
ENFORCEMENT + LITIGATION
The VPPA: An Old Law with New Streams
Enacted in 1988, the Video Privacy Protection Act (VPPA) was intended to regulate the then-booming videotape industry by limiting how video rental and sales data is disclosed. The law was enacted in direct response to the publication of a Supreme Court nominee Robert Bork’s video rental history. Though videotapes may be a memory of the past, plaintiffs have revived the VPPA in a more current context: online video subscriptions and pixel tracking tools. Read more
ARTIFICAL INTELLIGENCE
Workado Settles With FTC Over Alleged Misrepresentations of AI Accuracy
The Federal Trade Commission (FTC) issued a press release this week announcing that it settled with Workado over alleged misrepresentations of its ability to detect whether content was generated by artificial intelligence (AI) or humans. Read more
Privacy Tip #442
Oregonians Push Back Against DOGE’s Access to Personal Information
On April 21, 2025, the Oregon Department of Justice’s Privacy Unit reported a “big spike” in complaints about the Department of Government Efficiency (DOGE) in the first quarter of 2025.
If you are concerned about unrestricted access to your personal information by federal government and/or DOGE representatives, consider contacting your state consumer protection division so your voice is heard. Read more




