Michael Vealequite fantastical decision of the polish supreme court; if consent to data processing given, little a DPA can do to query failures in data minimisation/purpose limitation. Consent, they say, is consent - as long as it meets consent’s conditions. But whenever does it? #EUDP https://doi.org/10.1093/grurint/ikaf094
Presumably now there is no DPDI Bill, the Information Commissioner's Office can continue with its anonymisation guidance and 'unpause' it? https://ico.org.uk/about-the-ico/ico-and-stakeholder-consultations/ico-call-for-views-anonymisation-pseudonymisation-and-privacy-enhancing-technologies-guidance/ #eudp
ICO call for views: Anonymisation, pseudonymisation and privacy enhancing technologies guidance
The ICO is calling for views on its updated draft guidance on anonymisation, pseudonymisation and privacy enhancing technologies. We are sharing our thinking in stages to ensure we gather as much feedback as possible to help refine and improve the final guidance, on which we will carry out a formal consultation.
New #EDPB opinion says that companies can't just establish a #GDPR main establishment with a plaque on a door — it has to be where decisions on processing are taken, and if decisions are taken overseas, *there can be no main establishment* and thus the one-stop-shop does not apply. https://edpb.europa.eu/our-work-tools/our-documents/opinion-board-art-64/opinion-042024-notion-main-establishment_en #eudp #dataprotection @ggf
Interesting that #Google has choosen to disable image generation in their multi-modal #Gemini image model in countries with strong #dataProtection law. Concerned it might be full of identifiable imagery? #eudp
'Database Retrieval Technology and Subject Access Principles' by Graham Greenleaf and Roger Clarke in 1984 is one of the most precient and under-referenced pieces in the data protection literature and is and more more relevant by the day. https://rogerclarke.com/DV/DRT-84.pdf #GDPR #DataProtection #eudp
Unsurprising but the #CJEU clarify that you can't retain communications data under the limited #dataRetention powers associated with serious crime and then decide to use it to prosecute something else. fedi post: https://social.network.europa.eu/@Curia/111022918723074019 press release: https://curia.europa.eu/jcms/upload/docs/application/pdf/2023-09/cp230135en.pdf #eudp
Court of Justice of the EU (@[email protected])
#ECJ: Using #PersonalData collected for the purpose of combating serious crime for an administrative investigation into #corruption in the public sector is contrary to #EUlaw 👉 https://curia.europa.eu/jcms/jcms/Jo2_7052/
Dutch DPA publishes damning advice about the government’s attempt to require skin perspiration alcohol meters for those subject to an alcohol ban. Objects to data being transferred to the United States and the high-level of false positives in the system. https://autoriteitpersoonsgegevens.nl/uploads/2023-08/Advies%20alcoholmeter.pdf #eudp #gdpr #LawEnforcementDirective
The #CNIL fines an e-scooter firm for tracking the #geolocation of its #escooters every 30 seconds without purpose limitation. Challenges also on informing them or establishing a legal basis for tracking. Even if in a separate database as easily cross referenced to users. While not special category data, CNIL calls location ‘highly personal’. Company could also not demonstrate effectiveness of this geolocation for finding lost scooters. https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047346903?isSuggest=true #GDPR #RGPD #eudp #dataprotection
at least #Microsoft’s reported integration of #GPT4 into #Bing saves regulators the back and forth of ‘is a large language model processing personal data’ (spoiler: often) because now they can just look at the Google Spain case.
Yet how will Microsoft comply with right to be forgotten requests? https://medium.com/@owenyin/scoop-oh-the-things-youll-do-with-bing-s-chatgpt-62b42d8d7198 #LLMs #chatGPT #eudp #rtbf
Incredible to see Dutch privacy legend @sjoera Nas profiled in the New York Times for her and colleagues' groundbreaking work on public sector #dataProtection, slowly transforming giants like Microsoft, Zoom and Google and forcing significant changes. #edTech #eudp #gdpr https://www.nytimes.com/2023/01/18/technology/dutch-school-privacy-google-microsoft-zoom.html
