Phishing remains a major cyber threat, with over 90% of attacks starting via email. These attacks exploit supply chain vulnerabilities, risking significant disruptions. Organizations must secure their domain against phishing to protect the supply chain, which encompasses all processes from raw material sourcing to final delivery.
https://securityboulevard.com/2025/03/securing-your-supply-chain-from-phishing-attacks/
PCI DSS 4.0.1 impacts payment security standards; key updates affect compliance and data protection.
https://www.business-reporter.co.uk/payments/pci-dss-version-401-what-does-this-really-mean
Evolution of personal data concept: traditional ‘absolute' view faces shifts toward ‘relative' understanding, considering identification costs, tech accessibility. Despite case law changes, high thresholds for defining personal data persist. Recent rulings affirm oversight authority's proof burden, maintaining core accountability principles in data protection. No substantial shift to relative personal data era confirmed.
GDPR ruling mandates changes for credit reference agencies, compelling them to reassess data processing practices and ensure compliance, including providing disclosures about automated decision-making involved in credit profiles. The Court of Justice of the EU deemed credit scoring as a “decision” under GDPR, requiring transparency about data use. Agencies may need to incorporate human oversight in their assessments, impacting business models significantly.
Payment gateway market projected to grow from USD 26.1 billion in 2022 to USD 161 billion by 2032 with a CAGR of 20.5%. Driven by e-commerce growth, mobile payments, and demand for secure transactions, innovation, and compliance are key to gaining market share. North America leads, but Asia-Pacific is emerging rapidly due to mobile wallet adoption. Key players are focusing on AI and security to enhance offerings.
FinTech is rapidly evolving, with startups offering new payment solutions and banks adopting fintech strategies. Key challenges include security, compliance, and scalability. Pavel Kaminsky advises fintech founders in Central and Eastern Europe (CEE) to simplify regulations, enhance security, and seek funding and mentorship for growth. CEE is a promising innovation hub due to resourcefulness and creativity. Future trends include embedded finance and effortless payment experiences, although biometric payment methods face skepticism due to privacy concerns.
https://therecursive.com/the-future-of-fintech-and-what-cee-founders-need-to-succeed/
EU AI Act complicates business with compliance costs, yet offers chances for trustworthy AI development. Experts urge simplification to remove burdensome reporting obligations. UK adopts lenient AI regulation, noting ongoing maturity challenges in risk evaluations.
CIOs must prepare for the EU AI Act enforcement by actively pursuing compliance, managing vendors, and adapting to ongoing requirements. Most businesses are currently unprepared, with compliance risks including significant fines. Experts suggest cataloging AI uses, forming compliance teams, and developing AI literacy initiatives. Collaboration among departments is crucial to effectively navigate compliance complexities, especially with vendor management, as features may complicate assessments. Continuous monitoring and adapting to regulatory changes are essential for maintaining compliance and preventing issues.
https://www.ciodive.com/news/european-union-ai-act-compliance-enterprise-tips-enforcement/743099/
Noyb, a privacy rights group, has filed a complaint against OpenAI for ChatGPT's false claims about a Norwegian individual being convicted of child murder. This issue raises concerns under the EU's GDPR about the accuracy of generated personal data and the lack of a correction mechanism. The complaint highlights prior similar incidents and argues that OpenAI's disclaimer does not absolve it of legal responsibility for spreading false information. This case aims to prompt regulators to take action against AI-generated defamation.
https://techcrunch.com/2025/03/19/chatgpt-hit-with-privacy-complaint-over-defamatory-hallucinations/
A recent survey of 200 CISOs shows over 90% reported increased third-party cybersecurity incidents in 2024. Most experienced moderate to significant escalations. To address these challenges, organizations need to implement six key lessons for better cyber-risk management related to third-party software supply chains.
