Monthly digest. January 2024

I would like to share with you links to some resources you may find useful and interesting from this month, January 2024

?

??Publications and Guidelines

? European Data Act entered into force on 11 Jan 2024

https://digital-strategy.ec.europa.eu/en/news/european-data-act-enters-force-putting-place-new-rules-fair-and-innovative-data-economy

? EU Commission report on 11 adequacy decisions review. Credits to Luis Alberto Montezuma

https://ec.europa.eu/commission/presscorner/detail/en/ip_24_161

? EDPS opinions. January recap

https://edps.europa.eu/data-protection/our-work/our-work-by-type/opinions_en

? 16 Jan EDPB plenary. EDPB identifies areas of improvement to promote the role and recognition of DPOs

https://edpb.europa.eu/news/news/2024/edpb-identifies-areas-improvement-promote-role-and-recognition-dpos_en

? The EDPB report on DPOs: What you need to know.

Isabelle Roccia (CIPP/E) , IAPP with Sam Wrigley , Senior Officer at the Office of the Finnish Data Protection Ombudsman. Event recordings

https://www.dhirubhai.net/events/7155240648596475904/about/

? Digital Platforms Summit by Centre on Regulation in Europe (CERRE) think tank

Within the frame of a wide-ranging project entitled the ‘CERRE Forum on the Digital Markets Act Compliance’, CERRE organised the Digital Platforms Summit on 17 January 2024 in Brussels.

https://www.youtube.com/watch?v=lEDYFSZ2XkA

? The CNIL - Commission Nationale de l'Informatique et des Libertés, has unveiled a draft guide on Transfer Impact Assessments (#TIAs) for international data transfers. The public consultation on this draft is open until February 12th

Credits to Pedro Marques Gaspar

https://media.licdn.com/dms/document/media/D561FAQH3lND4Ae-Ggw/feedshare-document-pdf-analyzed/0/1704883253316?e=1707955200&v=beta&t=pRRusqgxBQ98Df1uqF-1a7V9nsHYMTObxr04RiTsnII

and also

Transfers of personal data outside the European Union: the French Data Protection Authority (CNIL) publishes a draft practical guide to carry out a Transfer Impact Assessment. Willy Mikalef . Julie Verdure . Bird & Bird

https://www.twobirds.com/en/insights/2024/france/transferts-de-donnees-hors-union-europeenne-la-cnil-pubie-un-guide-pratique

? A BDO Legal Guide to European Tech Regulations: A concise overview for companies

https://www.bdo.cr/getmedia/eec26c3b-f309-4ed6-8974-bdb221c8195f/BDO-Legal-Guide-to-EU-Tech-Regulations-a-concise-overview-for-companies_.pdf

? New guidance on analytic cookies in Spain - is consent always required? Santiago de Ampuero Castellanos , @Clara Lázaro and Joanna Rozanska . 霍金路伟

https://www.engage.hoganlovells.com/knowledgeservices/viewContent.action?key=Ec8teaJ9Vaq29hwxIWST9V7eOOGbnAEFKCLORG72fHz0%2BNbpi2jDfaB8lgiEyY1JAvAvaah9lF3dzoxprWhI6w%3D%3D&nav=FRbANEucS95NMLRN47z%2BeeOgEFCt8EGQ0qFfoEM4UR4%3D&emailtofriendview=true&freeviewlink=true

? Data protection reflections and predictions. Data Protection Network Associates . Credits to Philippa Donn

https://dpnetwork.org.uk/data-protection-reflections-2024-predictions/

? EU quantum researchers set to give up IP rights in standard-setting race. Alina C. @EURACTIVE

https://www.euractiv.com/section/industrial-strategy/news/eu-quantum-researchers-set-to-give-up-ip-rights-in-standard-setting-race/

? Changes Are Expected To The EU One-Stop-Shop Mechanism. Patrick Van Eecke , Loriane Sangaré and Enrique Gallego Capdevila . Cooley LLP

https://cdp.cooley.com/changes-are-expected-to-the-eu-one-stop-shop-mechanism/?utm_source=mondaq&utm_medium=syndication&utm_term=Privacy&utm_content=articleoriginal&utm_campaign=article

? Revisiting EDPB, ICO approaches to administrative fines. Dan Fara , James Moss ?for IAPP. – article is accessible for nonmembers

https://iapp.org/news/a/revisiting-edpb-ico-approaches-to-administrative-fines/

? Biggest GDPR Fines of 2023. @Emmeline de Chazal

https://www.skillcast.com/blog/biggest-gdpr-fines-2023

? DLA Piper GDPR Fines and Data Breach Survey: January 2024

https://www.dlapiper.com/en/insights/publications/2024/01/dla-piper-gdpr-fines-and-data-breach-survey-january-2024

? GDPR: a culture of non-compliance. Numbers of evidence-based enforcement efforts. noyb.eu

https://noyb.eu/sites/default/files/2024-01/GDPR_a%20culture%20of%20non-compliance_2.pdf

? Meta faces another EU privacy challenge over ‘pay for privacy’ consent choice. Natasha Lomas TechCranch+

https://techcrunch.com/2024/01/10/meta-pay-or-okay-noyb-complaint-2/

The Norwegian, Dutch and Hamburg data protection regulators have asked the European Data Protection Board for legal clarifications on the pay-or-consent approach. Stay turned and follow European Data Compliance Network EUDCN LinkedIn page for the updates.

? Cybersecurity Market Assessments. European Union Agency for Cybersecurity (ENISA)

This Report aims at presenting the current state of play of cybersecurity assessments of ICT products and cloud services. In order to study the dynamic of the related market, the report focuses on the evolution of the number of assessed ICT solutions and assessment bodies in the past 5 years. It also takes into account the various ways to assess cybersecurity of ICT solutions such as standards, national, and private, certification schemes and methodologies.

https://www.enisa.europa.eu/publications/cybersecurity-market-assessments

? Technology Trends 2024. Tech Vision. Accenture

https://www.accenture.com/mu-en/insights/technology/technology-trends-2024

? Business-to-Government Data Sharing on the Data Act: Between a Rock and a Hard Place. Bárbara Lazarotto

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4633807

??Resources

? Privacy and AI #10, Federico Marengo

https://www.dhirubhai.net/pulse/privacy-ai-10-federico-marengo-8vs9f%3FtrackingId=T4koPWHuTB%252BgEOXL4DcW2Q%253D%253D/?trackingId=T4koPWHuTB%2BgEOXL4DcW2Q%3D%3D

? Weekly Recap in Privacy by Andreea Lisievici Nevin . PrivacyCraft

https://media.licdn.com/dms/document/media/D4D1FAQGkw_xL1XUlVQ/feedshare-document-pdf-analyzed/0/1706475812328?e=1707955200&v=beta&t=w8P5iMLOVfN0FCyvJQfJFVOeF1komvr3MrnkgXChmWo

? Ethical AI Database (EAIDB)

https://www.eaidb.org/

? The PANOPTIC? Privacy Threat Model. Stuart Shapiro , Cara Bloom , @Ben Ballard, Shelby Slotter , @Mark Paes, @Julie McEwen, @Ryan Xu, @Samantha Katcher. Credits to Kim Wuyts

https://ptmworkshop.gitlab.io/static/media/PANOPTIC-MTR.517c2bf5fd91f93354aa.pdf

https://ptmworkshop.gitlab.io/#/panoptic

https://www.dhirubhai.net/feed/update/urn:li:activity:7150416822201118720/

? Immersive Tech Panel Series Insights. Future of Privacy Forum

https://fpf.org/resource/immersive-tech-panel-series-insights/

??AI Regulation

? NIST Identifies Types of Cyberattacks That Manipulate Behavior of AI Systems. Credits to Petruta Pirvan

https://www.nist.gov/news-events/news/2024/01/nist-identifies-types-cyberattacks-manipulate-behavior-ai-systems#:~:text=The%20report%20considers%20the%20four,objectives%2C%20capabilities%2C%20and%20knowledge

https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.100-2e2023.pdf

? Things That Might Happen in 2024. Generative AI

https://www.dhirubhai.net/pulse/things-might-happen-2024-genai-works-tq8af/

? Digging into the OWASP? Foundation AI Exchange. @Chris Hughes

https://resilientcyber.substack.com/p/digging-into-the-owasp-ai-exchange

? EU AI Act: Draft consolidated text leaked online. Jedidiah Bracy . IAPP

https://iapp.org/news/a/eu-ai-act-draft-consolidated-text-leaked-online/

https://clairk.digitalpolicyalert.org/agreement/279/

? Hallucinating Law: Legal Mistakes with Large Language Models are Pervasive. @Matthew Dahl, Varun Magesh , @Mirac Suzgun, @Daniel E. Ho study by the Stanford Institute for Human-Centered Artificial Intelligence (HAI)

https://hai.stanford.edu/news/hallucinating-law-legal-mistakes-large-language-models-are-pervasive

? OpenAI moves to shrink regulatory risk in EU around data privacy

https://techcrunch.com/2024/01/02/openai-dublin-data-controller/?guccounter=1&guce_referrer=aHR0cHM6Ly90cmVsbG8uY29tLw&guce_referrer_sig=AQAAAFPxHEco7T5v3UoQl4oiuYSEaNvhhpTiH4dONVRzlIJTUoaK06gORHsr4W1yY_Q7baMEecSjb_y77RgwJ_art_TD3Y6Ojd2Nof6Y49SJhXhcbltVyVVuAFjaIgl0G6PvDicINXySIhitaYU8O_f0_2aT7ZM7oEswzytGM9gmYXhv

? Understanding the Council of Europe’s Draft Framework Convention on AI, Human Rights, Democracy, and Rule of Law. Osman Gazi Gü?lütürk . Holistic AI

https://www.holisticai.com/blog/europe-committee-artificial-intelligence-draft-framework-convention