EFAMRO

On September 3, 2024, the Dutch data protection authority (AP) announced its decision, as issued on May 16, 2024, to impose a fine of €30.5 million on Clearview AI Inc. for violations of the General Data Protection Regulation (GDPR) following an investigation #biometricdata #datasubjectrights #GDPRviolation #fines #artificialintelligence https://lnkd.in/dbFdfpRq

On July 15, 2024, the Personal Data Protection Commission (PDPC) published the Privacy Enhancing Technology (PET): Proposed Guide on Synthetic Data Generation. #syntheticdata #PETs #dataprotection https://lnkd.in/etX_PVq5

On August 30, 2024, the Swedish data protection authority (IMY) issued penalty fees of SEK 37 million against Apoteket AB and SEK 8 million against Apohem AB. The companies used Meta pixel to optimize marketing on their websites and transferred personal data to Meta, including names, email addresses and social security numbers. #GDPRViolation #datatranfers #dataprotectionauthority #safeguarding https://lnkd.in/dVDvEv2M

Call for input: Options to address mobile spoofing Ofcom have launched a consultation on protecting consumers from harm caused by scams facilitated by phone calls. A common tactic used by scammers is to ‘spoof’ telephone numbers to disguise the origination of the call, or to make their call appear to be from a trusted person or organisation. Where scam calls appear trustworthy, victims are more likely to share personal information or to make a payment, which can lead to significant financial and emotional harm. #teleresearch #telecopolicies https://lnkd.in/eN9AxbyK

On August 26, 2024, the Personal Data Protection Authority (KVKK) issued an announcement regarding complaints received about research companies processing personal data for statistical research through 'telephone interviews using the random digit dialing method.' According to the complaints, individuals were contacted by these companies without prior consent and without being informed about how their phone numbers were obtained. When asked, the data controllers claimed that the numbers were randomly and automatically generated using system/software, and that the method used for the calls was a statistical methodology known as "phone interview by random number dialing" and applied worldwide. #telephoneresearch #dataprocessing https://lnkd.in/eBQg-9Ed

On August 19, 2024, the United Nations Education, Scientific and Cultural Organization (UNESCO) announced that it launched a public consultation on regulatory approaches for artificial intelligence (AI), open to stakeholders, including parliamentarians, legal experts, AI governance experts, and the public. UNESCO highlighted that the consultation follows extensive expert consultations, discussions with parliamentarians, and mapping of different regulatory approaches for AI. The consultation paper outlines key considerations for parliamentarians and several emerging AI regulatory approaches, including: principles-based approach; standards-based approach; agile and experimentalist approach; facilitating and enabling approach; adapting existing laws approach; access to information and transparency mandates approach; risks-based approach; rights-based approach; and liability approach. https://lnkd.in/e9rmM5sb #AIConsultation #UNESCO

According to NOYB, on April 26, 2024, the Parliament informed the EDPS of a data breach in PEOPLE, affecting more than 8,000 current and former employees of the Parliament. The personal data included ID cards and passports, criminal record extracts, residence documents, and sensitive data such as marriage certificates that reveal a person's sexual orientation. NOYB alleged that the Parliament violated the GDPR's data minimization and retention requirements. Specifically, NOYB alleged that the Parliament breached Articles 4(1)(c), 4(1)(f), and 33(1) of the General Data Protection Regulation (GDPR). Additionally, in one of the complaints, NOYB alleged that the Parliament refused an erasure request made after the breach, citing the 10-year retention period, despite the complainant's concerns given the breach and the fact that they had not worked there for several years. https://lnkd.in/ete76B4H

The Information Commissioner's Office (ICO) announced the launch of a new tool aimed at helping small businesses and sole traders create customized privacy notices. The ICO explained that under data protection law, all organizations that handle personal information are required to explain why they collect this data and how it will be used. The ICO noted that a privacy notice, which can be displayed on an organization's website or included in communications, is the standard method for providing this information. The ICO described the new tool as capable of generating privacy notices tailored to the specific needs of small organizations across various sectors, including finance, insurance, legal, education, childcare, health, social care, and the charity and voluntary sectors. The ICO highlighted that the tool offers two types of privacy notices: one for customer and supplier information and another for staff and volunteer information. The ICO recommended that sole traders and small organizations that already have a privacy notice use the tool to ensure their notices are up-to-date and compliant with current regulations. https://lnkd.in/dUYmXevF

On August 16, 2024, the Australian Government published the Policy for the responsible use of AI in Government. In particular, the policy sets out how Australian Public Services will: embrace the benefits of artificial intelligence (AI) by engaging with it confidently, safely and responsibly; strengthen public trust through enhanced transparency, governance and risk assurance; and adapt over time by embedding a forward-learning approach to changes in both technology and policy environments. #AIPolicy #RiskMitigation #EthicalAI https://lnkd.in/eQaYcnKa.

On August 15, 2024, the Information Commissioner's Office (ICO) issued a statement on Meta Platforms Inc.'s ad-free subscription service, following responses to its public consultation on 'consent or pay' models, in which service users pay a fee to not be tracked for online advertising. The ICO noted that it is considering the responses received and will set out its position later this year. https://lnkd.in/duKaswPA #OnlineAdvertising #ConsentorPay #Meta #DirectMarketing