DPO Circle monthly digest. March 2023

I would like to share with you links to some resources that I have found useful and interesting in the last month, March 2023

??Publications and Guidelines

? Top EU #data regulation #trends for 2023. Christoph Werkmeister , Michael Schwaab , Annabelle Hamelin . Freshfields Bruckhaus Deringer

Top EU data regulation trends for 2023, Christoph Werkmeister, Michael Schwaab, Annabelle Hamelin (freshfields.com)

? GDPR vs U.S. state privacy laws: How do they measure up? Richard Lawne . FieldFisher

https://www.fieldfisher.com/en/insights/gdpr-vs-u-s-state-privacy-laws-how-do-they-measure

? Belgian data protection authority clarifies the public interest legal basis in the context of decision on a vehicle tracking system. Heidi Waem and Simon Verschaeve . DLA Piper

https://blogs.dlapiper.com/privacymatters/belgium-belgian-data-protection-authority-clarifies-the-public-interest-legal-basis-in-the-context-of-decision-on-a-vehicle-tracking-system/

? Data brokers: Identification possible to sell ads, not to exercise fundamental rights. noyb.eu

Data brokers: Identification possible to sell ads, not to exercise fundamental rights (noyb.eu)

? Data Protection Commission Ireland published the Annual Report 2022. Credits to Luis Alberto Montezuma

Data Protection Commission publishes 2022 Annual Report | 07/03/2023 | Data Protection Commission

? WhatsApp agrees to comply fully with EU rules, informing users better and respecting their choices on contract updates. European Comission

Consumer protection: WhatsApp agrees to comply fully with EU (europa.eu)

? EU policymakers have adtech in sight for future regulation. Luca Bertuzzi . IAPP (accessibile for non-members)

https://iapp.org/news/a/eu-policymakers-have-adtech-in-sight-for-future-regulation/?mkt_tok=MTM4LUVaTS0wNDIAAAGKXFrAY9n6SryIzyI0KE00mQalEvXm3gbrBT8lqdfWKCZNIIuhyB8Pobe9OJCbodkrq5JbvWyctLJ5m5gkng-kC58Wkmon7EmOb3flk0pqmz3K

? EU watchdog: Online child abuse draft law creates ‘illusion of legality’. Luca Bertuzzi . Euractiv

EU watchdog: Online child abuse draft law creates ‘illusion of legality’ – EURACTIV.com

? Should TikTok Be Banned in the EU? Pernille Tranberg . DataEthics.org

Should TikTok Be Banned in the EU? · Dataetisk T?nkehandletank (dataethics.eu)

? Portugal: CNPD publishes guidelines on technical and organisational measures on processing of personal data. Translated by ChatGPT and shared by Daniel SUCIU

https://acrobat.adobe.com/link/review?uri=urn:aaid:scds:US:568a5bfb-2dfd-3808-aaea-c6c1e2063a4c

? Launch of coordinated enforcement on role of data protection officers. EDPB

Launch of coordinated enforcement on role of data protection officers | European Data Protection Board (europa.eu)

? Data Act: MEPs back new rules for fair access to and use of industrial data. European Parliament

Data Act: MEPs back new rules for fair access to and use of industrial data | News | European Parliament (europa.eu)

? New UK GDPR Draft Greatly Reduces Business Compliance Requirements. Scott Ikeda . CPO Magazine

New UK GDPR Draft Greatly Reduces Business Compliance Requirements - CPO Magazine

? Meta (Facebook, Instagram) switching to "Legitimate Interest" for ads after noyb win. noyb will instantly take action to also stop this illegal practice next. noyb.eu . Credits to Muhammed Demircan

Meta (Facebook, Instagram) switching to "Legitimate Interest" for Ads (noyb.eu)

? Clearview AI used nearly 1m times by US police, it tells the BBC.

Clearview AI used nearly 1m times by US police, it tells the BBC - BBC News

? CNIL: Google reCAPTCHA needs consent under ePrivacy-Directive. Dr. Carlo Piltz

CNIL: Google reCAPTCHA needs consent under ePrivacy-Directive | LinkedIn

? France bans TikTok, Candy Crush, Netflix for civil servants. Lauare Kayali. POLITICO

France bans TikTok, Candy Crush, Netflix for civil servants – POLITICO

? Not-So-Standard Clauses: Examining Three Regional Contractual Frameworks for International Data Transfers. Lee Matheson

https://media.licdn.com/dms/document/D4E1FAQF03ysj8z9eMA/feedshare-document-pdf-analyzed/0/1680255034301?e=1681344000&v=beta&t=kjEBr1GWHNBhMqdb0tqtGPCuqG19M4T1O9AIMaVixIk

??

??Technology and Security

? New Study Finds That Ransomware Attacks Are Heavily Relying on Old Vulnerabilities; Unpatched Issues Dating Back to 2010 Still Exploited. Skott Ikeda. CPO Magazine

https://www.cpomagazine.com/cyber-security/new-study-finds-that-ransomware-attacks-are-heavily-relying-on-old-vulnerabilities-unpatched-issues-dating-back-to-2010-still-exploited/?utm_source=ActiveCampaign&utm_medium=email&utm_content=RSS%3AITEM%3ATITLE&utm_campaign=Weekly+Highlights+-+2021

? AEPD publishes blog post on anonymisation and risk of re-identification

Anonymization III: The risk of re-identification | AEPD

? Balancing Privacy and Innovation in Smart Cities and Communities. ITIF Information Technology & Innovation Foundation

Balancing Privacy and Innovation in Smart Cities and Communities | ITIF

? Emerging privacy-enhancing technologies. Christian Reimsbach Kounatze , Taylor Reynolds. OECD. Credits to Nigel Smart

https://www.oecd-ilibrary.org/docserver/bf121be4-en.pdf?expires=1680517105&id=id&accname=guest&checksum=E016E99FE5CC906FC1DA1122185C1D81

? The NIS2 Directive: What does it mean for my organisation. Centre for Cyber Security Belgium.

The NIS 2 Directive: what does it mean for my organization? | Centre for Cyber security Belgium

? Fog and Edge computing in 5G. ENISA

Fog and Edge Computing in 5G — ENISA (europa.eu)

? Federated learning: Supporting data minimization in AI. Brandone Lalonde, Katharina Koerner . IAPP (accessible for non-members)

https://iapp.org/news/a/federated-learning-supporting-data-minimization-in-ai/?mkt_tok=MTM4LUVaTS0wNDIAAAGKeu1pmdGD7oJmaWd9ysXXUIOu3zJ8pmn3fXSZIcfu-HIfHq1PPmwX8nAk4amJ16UvcN2zPJrjrU9VC2GBlllGAHvn-boHIQEXTWRk-90VVhYE

? Data Loss Prevention and Data Security Survey Report. Cloud Security Alliance

https://cloudsecurityalliance.org/artifacts/data-loss-prevention-and-data-security-survey-report

? A new standard for anonymization. Luk Arbuckle . IAPP (accessible for non-members)

A new standard for anonymization (iapp.org)

ISO/IEC 27559:2022

ISO/IEC 27559:2022 - Information security, cybersecurity and privacy protection – Privacy enhancing data de-identification framework

? The Future of computing: how brain-computer interfaces will change our relationship with computers. Dr Mark van Rijmenam, CSP “The Digital Speaker”

The Future of Computing: How Brain-Computer Interfaces Will Change Our Relationship with Computers (thedigitalspeaker.com)

? Biden admin’s cloud security problem: ‘It could take down the internet like a stack of dominos’. John Sakellariadis . POLITICO

Biden admin’s cloud security problem: ‘It could take down the internet like a stack of dominos’ - POLITICO

? 2023 Allianz Risk Barometer. Credits to Cathy Suykens

https://www.agcs.allianz.com/content/dam/onemarketing/agcs/agcs/reports/Allianz-Risk-Barometer-2023.pdf

? TechDispatch #1/2023 - Central Bank Digital Currency. EDPS

https://edps.europa.eu/data-protection/our-work/publications/techdispatch/2023-03-29-techdispatch-12023-central-bank-digital-currency_en

? Tech Brief: AI Act’s Parliament endgame, Cyber Solidarity Act. Luca Bertuzzi and Molly Killeen . EURACTIV

https://www.euractiv.com/section/digital/news/tech-brief-ai-acts-parliament-endgame-cyber-solidarity-act/?utm_source=dlvr.it&utm_medium=linkedin

? Good Enough Isn’t Good Enough for World Backup Day 2023. Stephen Manley . CPO Magazine

https://www.cpomagazine.com/cyber-security/good-enough-isnt-good-enough-for-world-backup-day-2023/

? Foundry’s annual State of the CIO research

https://foundryco.com/tools-for-marketers/research-state-of-the-cio/

? API Security Trends. SALT

https://salt.security/api-security-trends

? 3 Reasons Why CIOs Must Pay Attention to API Security. Michael Nicosia | LinkedIn. CPO Magazine

https://www.cpomagazine.com/cyber-security/3-reasons-why-cios-must-pay-attention-to-api-security/

?

??Resources

? Datacrossroads free webinars. Dr. Irina Steenbeek

https://academy.datacrossroads.nl/

? ROPA and many other resources on Allen Woods LinkedIn’s page

https://www.dhirubhai.net/feed/update/urn:li:activity:7034494342127869952/

? The Battle for Your Brain: Defending the Right to Think Freely in the Age of Neurotechnology. Nita Farahany A review on this book by Wired:

https://www.wired.com/story/neuromarketing-philosophy-ethics/?bxid=5dcfc1d4fbd29718265bfda1&cndid=59184005&esrc=HeaderAndFooter&source=Email_0_EDT_WIR_NEWSLETTER_0_DAILY_ZZ&utm_brand=wired&utm_campaign=aud-dev&utm_content=WIR_Daily_031423&utm_mailing=WIR_Daily_031423&utm_medium=email&utm_source=nl&utm_term=P8euromarketing and the Battle for Your Brain | WIRED

? Terms of Service Did not read

https://tosdr.org/

? Digital Self-defense. DataEthics. Credits to Tim Clements

https://dataethics.eu/digital-selfdefense/?

? updated OWASP AI Security and Privacy Guide

https://owasp.org/www-project-ai-security-and-privacy-guide/

? Pending CJEU data protection cases. Joost Gerritsen

Pending CJEU data protection cases - Digibeetle

https://www.dhirubhai.net/newsletters/6902910128488550400/?displayConfirmation=true

? Diagnose your SME’s Cybersecurity and Scan for Recommendations. ENISA

Diagnose your SME’s Cybersecurity and Scan for Recommendations — ENISA (europa.eu)

? EU TMT regulations webinar series by Denton

Dentons - EU TMT regulations

?

??AI Regulation

? ChatGPT and large language models: what's the risk? National Cyber Security Centre. Credits to Dr W Kuan Hon

ChatGPT and LLMs: what's the risk - NCSC.GOV.UK

? Ten Principles for Regulation That Does Not Harm AI Innovation. Daniel Castro . Center for Data Innovation

https://www2.datainnovation.org/2023-ten-principles-ai-regulation.pdf

? Why ChatGPT should be considered a malevolent AI – and be destroyed. Alexander Hanff (LLM, CIPPE, CIPT)

https://www.theregister.com/2023/03/02/chatgpt_considered_harmful/

?Inside the Suspicion Machine. Obscure government algorithms are making life-changing decisions about millions of people around the world. Here, for the first time, we reveal how one of these systems works. Investigation by Wired

Inside the Suspicion Machine | WIRED

? Navigating the EU AI Act: flowchart. Tom Whittaker

Navigating the EU AI Act: flowchart, Tom Whittaker (burges-salmon.com)

? AI Image Generators: An Emerging Cybersecurity Threat. Damir Mujezinovic . Credits to Alberto Elia M.

AI Image Generators: An Emerging Cybersecurity Threat (makeuseof.com)

? Addressing criticism, OpenAI will no longer use customer data to train its models by default. Kyle Wiggers . TechCrunch

https://techcrunch.com/2023/03/01/addressing-criticism-openai-will-no-longer-use-customer-data-to-train-its-models-by-default/

? The Guidance on AI and Data Protection updated. ICO

https://ico.org.uk/for-organisations/guide-to-data-protection/key-dp-themes/guidance-on-artificial-intelligence-and-data-protection/

? Cybersecurity of AI and Standardisation. ENISA

Cybersecurity of AI and Standardisation — ENISA (europa.eu)

? #AI & #ChatGPT legal issues. Dr W Kuan Hon

https://www.dhirubhai.net/feed/update/urn:li:activity:7041028165648928769/

? Artificial intelligence: EU lawmakers debate how to respond to rise of ChatGTP in the proposed AI Act. Paolo Sasdelli . Bird&Bird.

Artificial intelligence: EU lawmakers debate how to respond to rise of ChatGTP in the proposed AI Act - Bird & Bird (twobirds.com)

? The Open Letter to Stop 'Dangerous' AI Race Is a Huge Mess. Chloe Xiang . Vice.

The Open Letter to Stop 'Dangerous' AI Race Is a Huge Mess (vice.com)

? Artificial Intelligence: UNESCO calls on all Governments to implement Global Ethical Framework without delay

Artificial Intelligence: UNESCO calls on all Governments to implement Global Ethical Framework without delay | UNESCO

? UK Government Publishes AI White Paper. Hunton, Andrews, Kurth

UK Government Publishes AI White Paper | Privacy & Information Security Law Blog (huntonprivacyblog.com)

? The Italian Data Protection Authority blocks ChatGPT. Credits to Federico Marengo

https://media.licdn.com/dms/document/D4D1FAQHpH2vbcjKZog/feedshare-document-pdf-analyzed/0/1680256378451?e=1681344000&v=beta&t=wjtg35JObCe9Ps930Cw7G9TRn-3CmnnO4zRCi-kp_hs

? Italy orders ChatGPT blocked citing data protection concerns. Natasha Lomas. TechCrunch. Credits to EDPO (European Data Protection Office)

https://techcrunch.com/2023/03/31/chatgpt-blocked-italy/?guccounter=1

? Generative AI: Privacy and tech perspectives. Katharina Koerner . IAPP (accessible for non-members)

Generative AI: Privacy and tech perspectives (iapp.org)

#gdpr #dataprotection #privacy #compliance #gdprcompliance #informationsecurity #infosec #privacypros #ai #privacymanagement #datagovernance #dpocircle