<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Explore Security &#187; Data Privacy</title>
	<atom:link href="http://www.exploresecurity.com/category/data-privacy/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.exploresecurity.com</link>
	<description>IT security tools, techniques and commentary</description>
	<lastBuildDate>Wed, 15 Jun 2022 09:21:02 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.6.1</generator>
		<item>
		<title>The Case of the Customer Data and the Third-Party Analytics Site</title>
		<link>http://www.exploresecurity.com/the-case-of-the-customer-data-and-the-third-party-analytics-site/</link>
		<comments>http://www.exploresecurity.com/the-case-of-the-customer-data-and-the-third-party-analytics-site/#comments</comments>
		<pubDate>Fri, 17 May 2019 15:32:32 +0000</pubDate>
		<dc:creator>Jerome</dc:creator>
				<category><![CDATA[Data Privacy]]></category>
		<category><![CDATA[Penetration Testing]]></category>
		<category><![CDATA[Web Applications]]></category>
		<category><![CDATA[GDPR]]></category>
		<category><![CDATA[penetration testing]]></category>

		<guid isPermaLink="false">http://www.exploresecurity.com/?p=460</guid>
		<description><![CDATA[I recently had an article published on the NCC Group blog about a pentest during which it became clear that customer personal data was being sent to a third party. It&#8217;s common for websites to use metrics/analytics services to collect usage data on how users are interacting with the sites. I thought it would be [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>I recently had an article <a href="https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2019/may/the-case-of-the-customer-data-and-the-third-party-analytics-site/">published</a> on the NCC Group blog about a pentest during which it became clear that customer personal data was being sent to a third party. It&#8217;s common for websites to use metrics/analytics services to collect usage data on how users are interacting with the sites. I thought it would be useful to highlight the danger of sensitive data being accidentally sent to third parties without due care and attention paid to GDPR. Have a read!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.exploresecurity.com/the-case-of-the-customer-data-and-the-third-party-analytics-site/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
