Sweden’s data protection authority, the Integritetsskyddsmyndigheten, issued guidance for data controllers detailing how security incidents where consumer data is published on the dark web should be handled. The IMY said in order to effectively handle the situation, data subjects should be told about the incident immediately to ensure they can also take appropriate action to reduce potential harm.
Full story