I mean anyone can write anything into a privacy policy and who will enforce they are sticking to them really?
Usually we only see what actually happens in the background when there is a breach.
For financial systems we have regular audits so rules like PCI DSS are enforced, but do we have these for search systems?
I mean anyone can write anything into a privacy policy and who will enforce they are sticking to them really? Usually we only see what actually happens in the background when there is a breach.
For financial systems we have regular audits so rules like PCI DSS are enforced, but do we have these for search systems?