Welcome to the GDPR Community Podcast episode one.

I'm your host, Jan, and the data list recording is the 28th of May 2020.

The aim of this podcast is to give you a distilled version of the latest data protection news,

essentially bringing you up to date on the latest in the world of the general data protection

regulation. At GDPR community, we put together a roundup. This is a curated list of interesting

reading found on the internet all that day. This includes insights from industry experts, news, reports, the latest on data breaches and anything else we find interesting that we think the community might want to read.

For the podcast, we will pick out one of the stories and explore it further.

So each episode will be a record of what was happening in the

world of data protection for that specific week. The dates we'll cover for this podcast

will be the 19th of May to the 26th of May. The 25th of May was actually GDPR's second anniversary,

two years of it coming into play. So we thought it was the perfect time to start

the podcast. At the end, I'll be back briefly to cover the GDPR community opinion question.

We hope you find the podcast useful. We'd appreciate any feedback you have to help make it better.

But for now, thank you for listening. Tuesday, the 19th May 2020. EasyJet admits data of 9 million hacked. The BBC reports that EasyJet has admitted that a highly sophisticated cyber attack has affected approximately 9 million customers.

It said email addresses and travel details had been stolen and that 2,208 customers had also had their credit and debit card details access.

EasyJet has informed the ICO while it investigates the breach.

EasyJet first became aware of the attack in January.

It told the BBC that it was only able to notify customers whose credit cards for details were stolen in early April.

And to quote them, this was a highly sophisticated attack.

It took time to understand the scope of the attack and to identify who had been impacted.

We could only inform people once the investigation had progressed enough that we were able

to identify whether any individuals had been affected and then who had been impacted and what

...