Privacy & AI Law: Aug 2023 (#7)

This is a selection of resources on privacy and AI law over the past month, in case you missed it.

?? Blog posts:

• Will the New EU-U.S. Data Privacy Framework Pass CJEU Scrutiny? [Cameron Kerry]
• The Digital Personal Data Protection Act of India, Explained [Raktima Roy, Gabriela Zanfir-Fortuna]
• Contentious areas in the EU AI Act trilogues [Müge Fazlioglu]
• Beyond GDPR: Unauthorized reidentification and the Mosaic Effect in the EU AI Act [Gary LaFever]
• Challenges of AI regulation in the EU-trilogue: Searching for a balanced solution [Behrang Raji]
• EU’s Digital Services Act Just Became Applicable: Outlining Ten Key Areas of Interplay with the GDPR [Gabriela Zanfir-Fortuna, Vasileios Rovilos]
• How Trustworthy Are Large Language Models Like GPT? [Prabha Kannan]
• Regulating Foundation Models and Generative AI: The EU AI Act Approach [Siddhant Chatterjee]
• AI vs. privacy: How to reconcile the need for sensitive data with the principle of minimization [Andrew Burt, Brenda Leong]
• AI language models are rife with different political biases [Melissa Heikkil?]
• Making Sense of China’s AI Regulations [Ashyana-Jasmine Kachra]

?? Reports:

• The state of AI in 2023: Generative AI’s breakout year [ 麦肯锡 ]
• Future of professionals [ 汤森路透 ]
• DNA.I. - Early findings and emerging questions on the use of AI in genomics [ Ada Lovelace Institute ]

?? Journal articles:

• EU-US Data Privacy Framework – The New Framework for Transatlantic Data Transfers [Andrej Savin]
• The one-stop-shop and the European Data Protection Board’s role in combatting data supervision forum shopping [Diogo Matos Brand?o]
• The limits of explainability & human oversight in the EU Commission’s proposal for the Regulation on AI- a critical approach focusing on medical diagnostic systems [Daria Onitiu]
• Acceptable Risks in Europe’s Proposed AI Act: Reasonableness and Other Principles for Deciding How Much Risk Management Is Enough [Henry Fraser, José-Miguel Bello y Villarino]
• Regulatory sandboxes in the AI Act: reconciling innovation and safety? [Thomas Buocz, Sebastian Pfotenhauer, Iris Eisenberger]
• ‘Human oversight’ in the EU artificial intelligence act: what, when and by whom? [Lena Enqvist]
• Requirements for “Legal Tech AI Systems” - Reflections on the negotiated AI Act with regard to Legal Technology using AI [Martina Block, Constantin Jung, Domenik Wendt]
• Enactment of the New Swiss Data Protection Act: Need for Action in the EU Business World? - An overview of the key elements in the Swiss approach [Rolf H. Weber]

?? Books:

• Privacy and AI [Federico Marengo]
• Automated Decision-Making and Effective Remedies [Simona Demková]

?? Other publications:

• Joint statement on data scraping and data protection [ Information Commissioner's Office & 11 other data protection and privacy authorities]
• Harmful Design in Digital Markets [ Information Commissioner's Office & Competition and Markets Authority ]
• Opinion 38/2023 on the Proposal for a Regulation on a framework for Financial Data Access [ EDPS - European Data Protection Supervisor ]
• Opinion 39/2023 on the Proposal for a Regulation on payment services in the internal market and the Proposal for a Directive on payment services and electronic money services in the Internal Market [ EDPS - European Data Protection Supervisor ]
• Data Governance Act: common logos to easily identify trusted EU data intermediaries and data altruism organisations to re-use data [ European Commission ]
• Generative AI for Organizational Use: Internal Policy Checklist [ Future of Privacy Forum ]

?? Podcasts:

• The Evils of the World [Rie Aleksandra Walle, Milo? Novovi?]
• Generative AI And Data Privacy - Risks And Regulation [Joe Dehner, Rita Garry]
• Generative AI's Insatiable Hunger: Unraveling the Data Dilemma [Cameron Ivey]
• India's Newly Adopted Digital Personal Data Protection [Joe Dehner, Stephen Mathias]
• Illegitimate interest [Rie Aleksandra Walle, Milo? Novovi?]