DPOrganizer’s Post

UPDATED: Rescheduled for September Join us on June 4th for the IAPP summer network event and workshop on Data Processing Agreements (DPAs) and best practices informed by recent case law. This is a great opportunity to delve deep into practical aspects of DPAs that can truly impact your day-to-day work. 📜 What to Expect? In-depth Workshop: Sofia Müntzing and Sofia Edvardsen from Sharp Cookie Advisors will guide you through the key legal issues in DPAs, including negotiation strategies with AI providers, liabilities, and indemnities. This is an IAPP - International Association of Privacy Professionals educational event with CIP credits. Expert Panel Discussion: Gain insights from industry leaders like Viktorija Alksne (Nasdaq), Konstantin Tiazhelnikov 🇺🇦 (DPOrganizer), Mayda Ziabari (Scania) and others on managing DPAs, with a special focus on recent challenges such as Schrems II. 🌞 Summer Mingle from 19:00: Don’t miss the chance to network with your peers in the data protection field at our Summer Mingle. It’s a perfect setting to discuss the day’s learnings and connect with like-minded professionals. 📍 Venue & Acknowledgements: A special shoutout to DPOrganizer for not only providing the venue but also the coffee to keep our discussions energetic! 🕒 Registration opens at June 4th 2024 at 14:45 CEST 🗣️ Presentation Languages: English & Swedish Limited seating is available for the workshop event. All IAPP members and soon-to-be members are welcome to the summer networking event. --> Register here via this link: https://lnkd.in/gxYh7duS Thanks to Sweden Co-chairs for organizing Elli Laine, Stefano Fantin, and Sofia Edvardsen. #DataProtection #NetworkingEvent #DPA #DataPrivacy #IAPPStockholm #LegalTech #SummerMingle #ProfessionalNetworking #IAPP #AI #GDPR #SthlmAI #Sthlmtech

On 29th August, 2024, I attended an online zoom meeting organized by KICTANet where we discussed the Computer Misuse and Cybercrimes Act (CMCA), 2018 and whether it has been effective. Specifically, by exploring the misses and opportunities it has presented over the years, since enactment. The Mutheu Khimulu moderated session discussed: Opportunities 💡 (i) Should we have a ‘Cybercrimes Agency?' (ii) Computer Misuse vis-a-vis Data Protection & Privacy (iii) The impact of the CMCA on businesses & the Digital Economy (iv) Emerging Tech such as AI & the CMCA Challenges 🏋🏿♀️ (i) Standard of evidence in CMCA offences (some investigators may not be aware of the standard of evidence required to prosecute) (ii) Lack of capacity in the Justice System to deal with CMCA matters including: limitations as to number of officers trained to investigate CMCA offences and lack of training on the part of Judicial Officers handling such matters (iii) Lack of awareness both in the Public and the Justice System (iv) Infringement on data Protection & Privacy Going forward, it was emphasized that there is a need to: - Create awareness about the CMCA - Come up with specialized (digital) courts to handle matters related to the CMCA and other digital laws. Thanks👏🏾 to John Walubengo, CISA, CDPSE, (OGW) , Lawrence Muchilwa, Brian Nyali, Mutheu Khimulu and Everlyn Miaka for their insights.

🙌🏻 I’m very excited to be speaking at the upcoming IAPP’s #EuropeanPrivacyNetwork event in Munich! 🚀 Glad to be joined by amazing Katharina Weimer, Georg M. V. Olowson and Florian Thoma! Together, we’ll explore how to turn AI risk into opportunity, and drive innovation while staying ahead of (not only) regulatory risks. 🌐 Get ready for a conversation on the future of AI governance—where innovation meets responsibility, and business success aligns with AI challenges! 💡 #AI #Governance #AIethics #RiskManagement #IAPP #InnovationMeetsRegulation #FutureofAI

Excited to be at FACCT 2024 - right next door to the gorgeous beach in Rio! If you are, also, here - let's grab a coffee. Many interesting conversations and talks about Fairness and Transparency in AI - Will be curating and sharing some of my favorite papers later, but a couple of thematic thoughts based on what I've seen so far: ⚖  Fairness: Unsurprisingly, metrics driven fairness evaluation is very limited and flawed- there is a large push for participatory processes (e.g. involving people who will be affected by algorithms in development and following up with them). Not something we are seeing in proposed legal frameworks; remains to be seen how this will or could be implemented at scale. 👩⚖️ EU AI Act: Many active concerns and discussions about how audits/evaluations will look like in the context of the Act. No perfect answers yet, but, I am excited to see where this research and conversation leads. Interesting additional flag is about how EFFECTIVE Human Oversight required by Article 14 is, also, not a well-defined concept. 📚 Dataset Transparency: I'm seeing less of a push for Open Training Data, than I expected. One rightful concern is around privacy, but a subtle additional point that came up in discussion is around how its important to know how to test the data not just have a blind dump of it. More insights to come - let me know what aspects you are interested in.

Dataswyft has launched its groundbreaking e-Notary service in Malaysia with our partners The Law Office of KK Chong & Co, taking the next step in empowering individuals to own and control their data securely. Professor Irene Ng, Group CEO of Dataswyft, and KK Chong, Partner at KK Chong & Co signed the official agreement between Dataswyft Malaysia and The Law Office of KK Chong & Co today. Aimed at enhancing data verification within the CheckD Data Wallet, the service represents a new frontier in secure and seamless digital credentialing, enabling users to privately manage, verify, and share their information with confidence. Read our latest news blogpost to find out how Dataswyft’ e-Notary service works and what it means for industries and sectors that require higher levels of assurance. https://lnkd.in/ep4M3Ybu #digitalcredentials #notaryservices #verification #selfsovereigndata #selfsovereignidentity #datawallet #data #dataportability #interoperability #digitization #empowerment #communities

Government services around the world would require top level of authenticity. The best way to do it is to have a service that reassure that authenticity in a fast a secure way. #dataswyft with its #CheckD Data Wallet is a powerful effort to give back individuals with its own personal data. Check this out! #data #dataownership

Achievement unlocked! I've seen a fair few comments from other candidates that the IAPP - International Association of Privacy Professionals training materials aren't enough to pass the #AIGP exam, and recommending lots of further resources and premium courses. Personally, I disagree - a thorough reading of the Body of Knowledge and the Key Terms for AI Governance glossary is a very solid start, and supported by the official online training package, more than enough to pass comfortably. Exam technique tip: RTFQ - IAPP is very good at presenting several plausible-sounding answers but on a careful reading several (or all but one!) don't actually answer the exact question being asked... Thanks to Founders Law for putting me forward for the exam, and particularly Gemma James (née Briance) for looking after my clients during my study and exam time.

The IAPP provides charts on the latest EU Acts on data. Very useful “This is a multipart series intended to provide privacy professionals with an overview of new EU legislation adopted since May 2022 under the European Union’s Strategy for Data, such as the EU AI Act, the Data Governance Act, the Digital Services Act, the Digital Markets Act and the NIS2 Directive.”

New German case on risk based approach to data transfers If you're interested in data transfers, you should read these new articles (short and long forms available) by Peter Swire, Theodore Christakis and Daniel Felz. The articles discuss various decisions supporting a risk based approach, including a recent German Regional Court decision (Traunstein). The German case involved a challenge to transfers by a social media network to the US, both before and after the EU-US Data Privacy Framework (DPF) was adopted. The Court rejected these arguments. A key aspect of the decision is that generalised concerns about U.S. intelligence access don't automatically make data transfers unlawful. The Court rejects the argument that the DPF can be challenged as it is based upon a Presidential Executive Order, and finds that SCCs could be used for transfers prior to the adoption of the DPF. The Court also accepts that a global social network cannot function without international transfers (whether the user has friends abroad or not) and that users understand and must accept this if they decide to use the platform. It considers transfers necessary for the performance of a contract accordingly (both under Article 6(1)(b) and Article 49(1)(b) GDPR). The Court also states that the fact that data may be disclosed to US government agencies does not preclude a guarantee of essential equivalence, as disclosures to government agencies is permissible in the EU also (effecting addressing the hypocrisy argument). The Court also rejects certain arguments about right of access to data under Article 15 GDPR (including for information re disclosures to US government agencies) which are also interesting. This decision conflicts with various EU supervisory authorities decisions, including the Irish DPC. The Court notes that divergent opinions by EU supervisory authorities are not binding on it. Read IAPP article here: https://lnkd.in/eCaxiAKa Read the longer version of the article here: https://lnkd.in/ebXpSdbE

On February 28, 2024, the Information and Privacy Commissioner of Ontario rendered its findings in Privacy Complaint PI21-00001, which found that McMaster University’s use of AI when proctoring electronic exams using Respondus software failed to comply with the Freedom of Information and Protection of Privacy Act. To learn more, read the newsletter by Roland Hung.