POPULARITY
For many of us following along with the EU AI Act negotiations, the road to a final agreement took many twists and turns, some unexpected. For Laura Caroli, this long, complicated road has been a lived experience. As the lead technical negotiator and policy advisor to AI Act co-rapporteur Brando Benefei, Caroli was immersed in high stakes negotiations for the world's first major AI legislation. IAPP Editorial Director Jedidiah Bracy spoke with Caroli in a candid conversation about her experience and policy philosophy, including the approach EU policy makers took in crafting the AI Act, the obstacles negotiators faced, and how it fundamentally differs from the EU General Data Protection Regulation. She addresses criticisms of the act, highlights the AI-specific rights for individuals, discusses the approach to future proofing a law that regulates such a rapidly developing technology, and looks ahead to what a successful AI law will look like in practice.
Hard to believe we're at the twilight of 2023. For those following data protection and privacy developments, each year seems to bring with it a torrent of news and developments. This past year was no different. The EU General Data Protection Regulation turned five, and the Snowden revelations turned 10. From a finalized EU-US Data Privacy Framework, to major enforcement actions on Big Tech companies, to a panoply of new data protection laws in India and at least 7 US states, to the dramatic rise of AI governance, 2023 was as robust as ever. To help flesh out some of the big takeaways from 2023, IAPP Editorial Director Jedidiah Bracy caught up with IAPP Research & Insights Director Joe Jones, who joined the IAPP at the outset of the year.
Europe's fine against Meta Platforms for illegal data transfers is the largest penalty to date under the EU General Data Protection Regulation. EU's Data Protection Commissioner Helen Dixon explains the decision. Plus, Nvidia CEO Jensen Huang is warning that U.S.-China tensions will negatively impact the chip industry. Wedbush's Matt Bryson discusses what this means ahead of earnings. And, Hong Kong-based PC maker Lenovo reported a third consecutive earnings miss but sees upside ahead. Lenovo CFO Wai Ming Wong breaks down the results.
Nearly five years after the implementation of the EU General Data Protection Regulation, Europe is immersed in a digital market strategy that is giving rise to a host of new, interconnected regulation. Among this complexity resides the proposed Artificial Intelligence Act. Originally presented by the European Commission April 2021, the AI Act is now in the hands of the Council of the European Union and European Parliament. If passed, this would be the world's first comprehensive, horizontal regulation of AI. On my visit to Brussels for the IAPP Data Protection Congress, I had the opportunity to meet with AI Act Co-rapportuer and Romanian Member of Parliament Dragoș Tudorache in his office. During our extended conversation, we discussed the risk-framework for the proposal, how the legislation will intersect with existing regulations, like the GDPR, current sticking points with stakeholders and what this means for privacy and data protection professionals.
Though many privacy pros are still grappling with the EU General Data Protection Regulation, the EU is now busy leading a new generation of data regulations. As part of its Digital Single Market strategy, the EU is looking to not only protect data but also to create frameworks that allow for data flows, while aiming to mitigate hate speech and misinformation. Through an ambitious line of of proposed laws – including the Data Act, Data Governance Act, Digital Markets Act, Digital Services Act and the AI Act – the EU is poised to place a slew of new requirements for companies doing business in the region. Though not all privacy-related, privacy pros should be paying attention to this space. To catch up on this flurry of activity, IAPP Editorial Director recently chatted with journalist Luca Bertuzzi.
JoAnn Stonier loves her role. After all, when you're the Chief Data Officer for Mastercard, the opportunities to create real change are plentiful. But Stonier knows her work is about more than just data privacy and governance, it's about aligning the company's data strategy to business goals and impacting the organization in a positive way. And of course, making sure that all 725 million of Mastercard's credit card holders are protected.With a career rooted in privacy, a degree in law, and a background in interior design, Stonier is not just a well-rounded CDO, she's a visionary. On this episode of The Data Chief, JoAnn joins Cindi for an inside look at data's impact on people, data ethics, and the importance of building trustworthy models.Main TakeawaysThe CDO is an enabler of the business: In Joann's own words, “the role of the CDO is to engage the business in tomorrow's business.” This means CDOs must consistently be aligned with the company's goals, and develop capabilities that lay track for future innovation. Great data governance, data management, and data quality are table stakes. The CDO must also have a sense for where the market is going and how the business can carve out new space for itself to deliver value to customers.Data is about people: As a data leader, it's easy to get caught up in the novelty and opportunity of innovation. But data is more than an anonymized collection of 0s and 1s, it's about people and the tremendous impact it can have on their lives. As products and services are developed, it's important to apply individually-centric design principles and evaluate how you might be affecting someone, for better or worse, on the other side.Responsible AI starts with trustworthy data: Simply put, data is food for AI. In order to build ethical or responsible AI and machine learning algorithms, there must be improvement in data trust and quality. Oftentimes these algorithms are missing integral data points that neglect particular demographics. This creates a level of bias in the numbers that will only continue to be amplified over time.About JoAnnJoAnn Stonier is the Chief Data Officer for Mastercard, where she is responsible for the enterprise data strategy and management, including identifying and mitigating data risks across the company, as well as influencing data-driven products, overseeing data policy and governance. She advises executive management on a broad range of complex data policy and regulatory issues. Prior to her current position, Ms. Stonier established the first Privacy Office for Mastercard in 2008, and developed the organization's Information Governance program beginning in 2013. Prior to joining Mastercard, Ms. Stonier was the Chief Privacy Officer for American Express Company. JoAnn is a recognized data and privacy expert and is sought after for her innovative and practical approach to solving problems in the digital age. In 2018 she assisted in the creation and launch of Trūata, an Irish data trust enterprise, formed to ensure anonymization compliance with the EU-General Data Protection Regulation. She currently serves on their board. In addition to the Trūata board of directors, she currently advises a broad range of industry and policy groups regarding data innovation and privacy including: the United Nations Global Privacy Advisory Group; the World Economic Forum's Data Driven Development Steering Committee; and the Board of Directors of the Information Accountability Foundation. She is also a Board Advisor for Hope for the Warriors, a non-for-profit organization that assists U.S. military personnel and their families. She has served on the Board of Directors for the International Association of Privacy Professionals from (2013-2018) and served on the Executive Committee in multiple roles including Chairman in 2017. For her data thought leadership, Ms. Stonier has been recognized by the Information Governance Initiative as the Chief Information Governance Officer of 2015 and in 2011 she was named as an Aspen Institute First Mover Fellow. Ms. Stonier received her Juris Doctorate from St. John's University in Queens, and her Bachelor of Science degree from St. Francis College. Ms. Stonier is a lawyer and holds memberships in the Bar of the State of New York and the Bar of the State of New Jersey. --The Data Chief is presented by our friends at ThoughtSpot. Searching through your company's data for insights doesn't have to be complicated. With ThoughtSpot, anyone in your organization can easily answer their own data questions, find the facts, and make better, faster decisions. Learn more at thoughtspot.com.
Join members of our tech and data team, Andy Splittgerber and Christian Leuthner, as they discuss the first fines levied under the EU's data protection law three years after the EU General Data Protection Regulation went live. They take a look at recent developments and describe situations where it may be worth challenging the data privacy enforcers. Andy and Christian give valuable tips on what to do if the data protection authorities knock on your door. For more information, visit Reed Smith's Data Protection, Privacy & Cybersecurity page.
Virginia joined rarified air March 2 after its governor signed the Consumer Data Protection Act into law. Though California was the first state to pass baseline privacy legislation, Virginia was the first to do so absent a ballot initiative. So, what is in Virginia's CDPA? Where does it overlap with provisions in the California Consumer Privacy Act, California Privacy Rights Act or EU General Data Protection Regulation? What are some early steps businesses should consider as they make preparations? And, what effect will the CDPA — if at all — have on other state privacy laws, and ultimately, on potential federal privacy legislation? These are a few of the issues IAPP Editorial Director Jedidiah Bracy, CIPP, discussed with Fox Rothschild Partner Odia Kagan, CIPP/E, CIPP/US, CIPM, FIP.
The Shooting Breezes podcast, with your hosts Brad and Jacqui, are discussing all things social media this week, with Twitter and Facebook in the cross hairs, as well as the outdated model of the working week.To get things rolling, Brad keeps up the space theme from previous weeks, asking Jacqui what personal item she would take on a 3-year journey to Mars. Here’s the key question: can you access the cloud from Mars? Then its trivia time (current score: Brad 1; Jacqui 1), and Jacqui wants to test Brad on “twin movies” – that phenomena of two separate movies with eerily similar plots being released in the same year. It’s a rollercoaster of twin action movies, thrillers, and romantic comedies. Can you name them all?Jacqui has news this week. It’s about a Grandma in Norway who has been court ordered to take photos of her grandchild off social media platforms. This story brings up salient topics of online privacy for the digital native generation, and what the EU General Data Protection Regulation is trying to achieve.Brad’s news is fresh off the press, or fresh off the Twitter feed. President Trump’s tweets, for the first time, have been flagged by Twitter with a fact checking warning. Is it a good move from Twitter? What responsibility do these social media giants have to fight misinformation of their platforms? Brad and Jacqui take a stab at answering those questions and more.In this week’s ‘Blue Sky Thinking’ segment, Jacqui wants to revisit the working week, and wonders if it is finally time to revamp it. Does the 9-5, 5-day working week still make sense in this technological age? How does movement to greater flexibility in working conditions occur? New Zealand and Canada may start showing us the way, and we want to follow.If you feel it is necessary, please flag us for fact checking on Twitter @shootinbreezes. Or just let us know what you thought of this week’s episode!https://www.bbc.com/news/technology-52758787https://www.bbc.com/news/technology-49808208https://www.nytimes.com/2020/05/26/technology/twitter-trump-mail-in-ballots.html
The EU General Data Protection Regulation ushered in an enhanced private right of action for violations of the law, both for material and non-material damages. Attorneys say there's now a significant uptick in cases brought alleging such a grievance has occurred, and that they're often brought as a "follow-on" to data protection authorities' own investigations. In this episode of The Privacy Advisor Podcast, Orrick attorneys Keily Blair and James Lloyd, both based in the U.K., describe the uptick in civil litigation claims they're seeing and the ways that's changing things — including how companies interact with data protection authorities.
There’s a false narrative surrounding artificial intelligence (AI): that it cannot be regulated. These idea stems, in part, from a belief that regulations will stifle innovation and can hamper economic potential, and that the natural evolution of AI is to grow beyond its original code. In this episode of Big Tech co-hosts David Skok and Taylor Owen speak with Joanna J. Bryson, professor of ethics and technology at the Hertie School of Governance in Berlin (beginning February 2020). Professor Bryson begins by explaining the difference between intelligence and AI, and how that foundational understanding can help us to see how regulations are possible in this space. “We need to be able to go back then and say, ‘okay, did you file a good process?’ A car manufacturer, they're always recording what they did because they do a phenomenally dangerous and possibly hazard thing … and if one of them goes wrong and the brakes don't work, we can go back and say, ‘Why did the brakes not work?’ And figure out whose fault [it] is and we can say, ‘Okay, you've got to do this recall. You've got to pay this liability, whatever.’ It's the same thing with software,” Bryson explains. It is the responsibility of nations to protect those inside its borders, and that protection must extend to data rights. She discusses how the EU General Data Protection Regulation — a harmonized set of rules that covers a large area and crosses borders — is an example international cooperation that resulted in a harmonized set of standards and regulations for AI development.
In the first episode from the Daon Podcast Series, Senior Legal Counsel, Ruth O'Toole, outlines how the recent EU General Data Protection Regulation 2016/679 (GDPR) defines “Explicit Consent” and how Daon's technology is fully GDPR compliant in this complex arena.
Software Engineering Radio - The Podcast for Professional Software Developers
István Lam of Tresorit talks with host Kim Carter about GDPR (the EU General Data Protection Regulation, which has been described as “the most important change in data privacy regulation in 20 years.”) The discussion covers terminology, planning, implementation, users' rights regarding their personal data, managing personally identifiable information (PII) across an organization, and required documentation. István talks about establishing the intent of different types of PII; when data can be shared or sold, when PII can be stored; storage of backups, and the ability to reveal, modify, or remove all of a customer's PII.
Software Engineering Radio - The Podcast for Professional Software Developers
István Lam of Tresorit talks with host Kim Carter about GDPR (the EU General Data Protection Regulation, which has been described as “the most important change in data privacy regulation in 20 years”). The discussion covers terminology, planning, implementation, users’ access and their rights regarding their personal data, managing personally identifiable information (PII) across organizations, […]
Detta är avsnitt 167 (precis som Recital 167 EU General Data Protection Regulation) och spelades in den 27 maj och dagens avsnitt handlar om: Innehåll i veckans avsnitt:* Hela dagens avsnitt förutom delar av feedback/backlog och pryllistan ägnas idag åt Q&A kring GDPR som trädde i kraft den 25 maj. * Cambridge Analytics ur ett GDPR Perspektiv * Microsoft Compliance Manager * The Clarifying Lawful Overseas Use of Data Act or CLOUD Act (Shit vilken cool förkortning... den kommer Björn att gilla) * Lite information om GDPR ur ett Office 365 perspektiv Pryllista:* David: Vanilla Coke* Johan: En ny Wear OS klocka* Mats: Böcker för en Jedi/Sith Deltagare i avsnittet:* Johan: @JoPe72* Mats: @Mahu78 * David: @dlilja Frånvarande deltagare i avsnittet:* Björn: @DiverseTips Egna länkar* En Liten Pod Om IT på webben* En Liten Pod Om IT på Facebook Länkar till podden:* Apple Podcaster (iTunes)* Overcast
May 25 is a significant day for organisations around the world as the EU General Data Protection Regulation starts being enforced. Already we are seeing huge changes to the rules on platforms like Facebook, that will impact the way organisations large and small market themselves. This episode looks at what those changes mean and what you need to look at in your own marketing to be ready.
In the midst of our nationwide debate on social media companies limiting third party apps’ access to user data, let’s not forget that companies have been publicly declaring who collects our data and what they do with it. Why? These companies have been preparing for GDPR, the new EU General Data Protection Regulation as it will go into effect on May 25th. This new EU law is a way to give consumers certain rights over their data while also placing security obligations on companies holding their data. In this episode of our podcast, we’ve found that GDPR-inspired disclosures, such as Paypal’s, leave us with more questions than answers. But, as we’ve discussed in our last episode, details matter. Other articles discussed: Apple iCloud also stores data on Google’s servers New SEC guidance on reporting data security risk What C-Suite executives need to know when it comes to security Laughing Alexa Tool of the Week: S3tk Panelists: Cindy Ng, Kilian Englert, Mike Buckbee, Matt Radolec
Ocado's Head of Control Environments discusses the practical implications of the EU General Data Protection Regulation.
Kate Pritchard, director of research at ORC International, joins us to discuss emerging trends in employee engagement, including: the "Engage for Success" movement; the impact of technology; survey response rates and turnaround times; the frequency of surveys, together with the use of pulse surveys; and the potential impact of the EU General Data Protection Regulation. Presenter Noelle Murphy is joined by Kate Pritchard.
In May 2018, the EU General Data Protection Regulation laws take effect. Are you ready? Richard chats with Seb Matthews about what IT Pros can do to get ready for the GDPR. The regulations are broad, covering personally identifiable information, data breaches, the right to be forgotten and more. Whether you're an EU company or just do business with EU residents, the GDPR can affect you. Seb talks about the six Ps to compliance: Placement, Process, People, Products, Privacy and Protection. And he also digs into how Microsoft can help with a number of great tools as part of Azure, Office 365 and more. Yet another reason to get to the cloud!
In this podcast we look at the EU General Data Protection Regulation (GDPR), the new law coming into force across Europe on 25 May 2018. We will look at the significance of GDPR and focus on how it will impact employers.
Thycotic (https://thycotic.com/) . Joseph is a Certified Information Systems Security Professional (CISSP), active member of the cyber security community, frequent speaker at cyber security conferences globally, and is often quoted and contributes to global cyber security publications. He is also the author of Privileged Account Management for Dummies (https://thycotic.com/resources/wiley-dummies-privileged-account-management/) . Joseph regularly shares his knowledge and experience by giving workshops on vulnerabilities assessments, patch management best practices, and the evolving cyber security perimeter and the EU General Data Protection Regulation. In this episode we discuss his transition from IT to cyber security, privacy vs. security, international information security, IoT privacy, credential management, why you shouldn't blame the users, people-centric security, hiring information security professionals, cyber security metrics, and so much more. Where you can find Joe: LinkedIn (https://www.linkedin.com/in/josephcarson) Twitter (https://twitter.com/joe_carson) Thycotic Blog (https://thycotic.com/company/blog/)
Although organisations are increasingly aware of the new requirements under the EU General Data Protection Regulation, many are not sure how the GDPR will affect HR function. We discuss how HR will contribute to the GDPR compliance process. In particular, we look at possible HR roles in: conducting a data audit or creating a data map; identifying legal grounds to process employment-related data; and reviewing HR policies and procedures to ensure that they incorporate GDPR requirements. Presenter Jeya Thiruchelvam is joined by Qian Mou.
Richard Goldstein looks at the EU General Data Protection Regulation that comes into force in May 2018, its implications for UK occupational pension schemes, and what schemes should be doing in order to comply with it.
Data, it's the new oil, new gold, your Crown Jewels. We've all heard these phrases, but it is hard to deny that data is a fantastic asset. However, it's fair to say that data also comes with its challenges, we must store it all, make sure we protect it all and of course we need to make sure it's secure. This week is the first in a short series of shows looking at the challenges of data privacy. This week is part one of a two part chart with global data privacy attorney Sheila Fitzpatrick, with nearly 35 years experience in the field, she is the ideal guest too provide us with some initial context around the current data privacy landscape, the challenges we have and the challenges we are going to see in the future, including the upcoming EU General Data Protection Regulation, GDPR. Sheila has lots of great information to share, so settle back, there's plenty to learn.. enjoy the show. Full show notes are here.. http://wp.me/p4IvtA-Ld