Monthly Digest. February 2024

I would like to share with you links to some resources you may find useful and interesting from February 2024

?

??Publications and Guidelines

? EDPS Newsletter 107: announcing a big year for EDPS – its 20th anniversary

https://www.edps.europa.eu/press-publications/publications/newsletters/newsletter-107_en

? EDPB Support pool of experts (SPE) programme

https://edpb.europa.eu/support-pool-experts-spe-programme_en

? EDPB clarifies notion of main establishment and calls on EU legislators to make sure CSAM Regulation respects rights to privacy and data protection

https://www.edpb.europa.eu/news/news/2024/edpb-clarifies-notion-main-establishment-and-calls-eu-legislators-make-sure-csam_en

? CEF 2024: Launch of coordinated enforcement on the right of access

https://www.edpb.europa.eu/news/news/2024/cef-2024-launch-coordinated-enforcement-right-access_en

? Shaping the Digital Future: the Newly Adopted EU Data Act and its Impact. Rosa Barcelo , Simon Mortier , Matú? Huba , McDermott Will & Emery

https://www.mwe.com/insights/shaping-the-digital-future-the-newly-adopted-eu-data-act-and-its-impact/?utm_campaign=Social%20news%20curation&utm_content=176211397&utm_medium=social&utm_source=linkedin&hss_channel=lcp-25069735

? Commission closes market investigations on Microsoft’s and Apple’s services under the Digital Markets Act. Credits to Nicola Fabiano

https://digital-markets-act.ec.europa.eu/commission-closes-market-investigations-microsofts-and-apples-services-under-digital-markets-act-2024-02-13_en

? The Data Act 20 month count down has started – how does it affect data in medical devices? Renzo Marchini , Nuria Pastor & Chloe Abbott , FieldFisher. Credits to Tim Van Canneyt

https://www.fieldfisher.com/en/insights/the-data-act-20-month-count-down-has-started-how-does-it-affect-data-in-medical-devices

? The 'hidden obligation' rides again! EU representatives under GDPR, DSA, NIS2 and others. Tim Bell for IAPP (this article is accessible for non-members)

https://iapp.org/news/a/the-hidden-obligation-rides-again-eu-representatives-under-gdpr-dsa-nis2-and-others/?mkt_tok=MTM4LUVaTS0wNDIAAAGRc1zWu2WJP-4986fc8Rios6yzihfRQA05PEY_bvwh5j3UuItfR5oSPsjhfVGiiJ6EDUKeJmpjylsEC1ibshdbFqLI0CLg1RrfrXFIkm49Ii3L

? FACT SHEET: President Biden Issues Executive Order to Protect Americans’ Sensitive Personal Data

https://www.whitehouse.gov/briefing-room/statements-releases/2024/02/28/fact-sheet-president-biden-issues-sweeping-executive-order-to-protect-americans-sensitive-personal-data/

? Digital Services Act starts applying to all online platforms in the EU

https://ec.europa.eu/commission/presscorner/detail/en/ip_24_881

? IAPP Toward a risk-based approach? Challenging the 'zero risk' paradigm of EU DPAs in international data transfers and foreign governments' data access. Theodore Christakis . This article is accessible for non-members

https://iapp.org/news/a/towards-a-risk-based-approach-challenging-the-zero-risk-paradigm-of-eu-dpas-in-international-data-transfers-and-foreign-governments-data-access/?mkt_tok=MTM4LUVaTS0wNDIAAAGRc1zWu2DYZVyvTTHeJTyljJCVe8l0dLJ_-3oE5sHvYg1Atvu78WR48wlVPQYR4dmh4ktSAfG5c6K4ci7fkSaEMALgOTlJstdfg9_XJR9oaJ2f

? The value of risk assessments in the world of data protection compliance. Robert Bond for Data Protection Network Associates

https://dpnetwork.org.uk/risk-assessments-data-protection-compliance/

? The Privacy in Practice 2024 Report ISACA. Accessible for non-members

https://www.isaca.org/resources/reports/privacy-in-practice-2024-report

? Global Privacy Culture Survey 2023

https://hub.privacyculture.com/download-the-free-culture-survey

? 2024 Global Automotive Cybersecurity Report by Upstream Security . Credits to The Cyber Security Hub?

https://upstream.auto/reports/global-automotive-cybersecurity-report/?utm_campaign=2024_report_cyberhub&utm_source=socialmedia_cyberhublinked&utm_medium=Social_Media

? A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Location Environments. NIST

https://media.licdn.com/dms/document/media/D4E1FAQGUsi8u4SHBzw/feedshare-document-pdf-analyzed/0/1707606989898?e=1709769600&v=beta&t=9-nOHFPwGUGkCh2CbWGLPAJjMuDaevNtB9OwX5EOByM

? Data Bytes 43: Your UK and European Data Privacy update for December 2023 and January 2024. Ashurst

https://www.ashurst.com/en/insights/data-bytes-43-your-uk-and-european-data-privacy-update-for-december-2023-and-january-2024/

?European Biometric Surveillance, Concrete Rules, and Uniform Enforcement Beyond Regulatory Abstraction and Local Enforcement. Paul De Hert and GEORGIOS BOUCHAGIAR . Brussels Privacy Hub

https://brusselsprivacyhub.com/wp-content/uploads/2024/02/European-Biometric-SurveillancePaul-De-Hert-and-Georgios-Bouchagiar-v.10-n.1-February-2024-1.pdf

?

??AI Regulation

? 02 February 2024 AI Act moves to the final stage European member states’ approval of the AI Act marks the conclusion of negotiations and sets the stage for a final vote in April

? European AI Office

https://digital-strategy.ec.europa.eu/en/policies/ai-office

? IAPP on AI: The AI Act's debiasing exception to the GDPR. @Marvin van Bekkum, Frederik Zuiderveen Borgesius . This article is accessible for non-members

https://iapp.org/news/a/the-ai-acts-debiasing-exception-to-the-gdpr/?mkt_tok=MTM4LUVaTS0wNDIAAAGRc1zWu0Iclyg5o29lrM1QjaUeXFa6Qn_Vj_1j2xRBUdn07ZIGHtkHe0tJT-DW7QFZTnkiWVNbbAttY0VjztQKVyPVFtKH92VLiSOXhCoBAd8U

? Building Accountable AI Programs: Mapping Emerging Best Practices to the CIPL Accountability Framework. Centre for Information Policy Leadership (CIPL)

https://www.informationpolicycentre.com/uploads/5/7/1/0/57104281/cipl_building_accountable_ai_programs_feb24.pdf

? Regulating AI in the EU, US and OECD: the difficult balance between security and driving innovation. Alejandro Padin . Garrigues

https://www.garrigues.com/en_GB/garrigues-digital/regulating-ai-eu-us-and-oecd-difficult-balance-between-security-and-driving

? AI Anthology. A collection of essays on the future of AI. Microsoft

https://unlocked.microsoft.com/ai-anthology/?ocid=cmms8rdsloh&form=M402JX

? AI Safety Institute approach to evaluations

https://www.gov.uk/government/publications/ai-safety-institute-approach-to-evaluations/ai-safety-institute-approach-to-evaluations#aisis-approach-to-evaluations:

??

??Resources

? Privacy as an Enabler of Customer Trust. 思科 2024 Benchmark Study. Credits to Andrey Prozorov

https://www.cisco.com/c/en/us/about/trust-center/data-privacy-benchmark-study.html

? EU AI Act app by DLA Piper

https://www.dlapiper.com/en-gb/insights/topics/artificial-intelligence/ai-app

? The AI Act Explorer This resource is provided by the Future of Life Institute (FLI) and is not associated with the European Union

?https://artificialintelligenceact.eu/ai-act-explorer/

? Peter Craddock on LinkedIn

https://www.dhirubhai.net/posts/petercraddock_gdpr-privacy-dataprotection-activity-7160533985696079873-auuZ/?utm_source=share&utm_medium=member_desktop

? Teckedin.com?is one of the only knowledge base sites where you can access business technology information from one place. Credits Debby Kruzic -Lifetime Learne

https://docs.teckedin.info/

? iProov Threat Intelligence Report 2024 Webinar, The Impact of Generative AI on Remote Identity Verification

https://go.iproov.com/Webinar-GBL-FY24-Q1-Threat-Intelligence-On-Demand-Recording.html?aliId=eyJpIjoiR2V3S1U1aEl6eVZCN29TUyIsInQiOiJGcGdNZEVBamo3OEZ3OXNDdFlXRkdnPT0ifQ%253D%253D

? “Creative Ways to Champion Privacy Engineering Awareness in Your Org” with Debra Farber and Katharine Jarmul

https://www.privado.ai/webinars-on-demand/creative-ways-to-champion-privacy-engineering-awareness

and all other the Privado.ai "Bridge Summit '04" session recordings

https://www.privado.ai/webinars

? Comparison of U.S. State Privacy Laws Data Protection Assessments. Centre for Information Policy Leadership (CIPL)

https://www.informationpolicycentre.com/uploads/5/7/1/0/57104281/cipl_comparison_us_state_privacy_laws_dpa_feb14.pdf

? Post-Qantum Cryptography in 2024: Are you Preparing or Ignoring the Risks Ahead? Webinar recording with participation of Blair Canavan (Thales) , Antti Ropponen (IBM), Duncan Jones (Quantinuum)

https://www.brighttalk.com/webcast/2037/604017