ADPO News
-
CJEU Provides Further Clarity on GDPR Right of Compensation in Relation to Identity Theft
On 20 June 2024 last, the Court of Justice of the European Union (CJEU) in two joined cases C?182/22 and C?189/22, Scalable Capital, provided some further clarification concerning compensation for non-material damage under Article 82(1) of the EU General Data Protection Regulation (GDPR) arising from the theft by third parties unknown of personal data, and…
-
NOYB lodges 11 EU Complaints About How Personal Data will be Used for AI at Meta
On 6 June 2024, advocacy group NOYB (None of Your Business) filed complaints against Meta with the Austrian, Belgian, French, German, Greek, Italian, Irish, Dutch, Norwegian, Polish, and Spanish data protection supervisory authorities. This is as a result of changes to Meta’s data protection policy that come into force on 26 June 2024 concerning how…
-
AI Driven Dark Patterns: What does the Future Hold?
The rapid development of generative AI (artificial intelligence) shines a spotlight on the increasing and immediate importance of addressing ethical and privacy concerns associated with the use of these technologies in various fields. Data protection conferences over the past year have consistently highlighted AI’s growing presence in the data protection and privacy arenas and the…
-
Navigating the Crossroads: Striking a Balance Between Fintech Innovation and EU Consumer Protection in the Era of AI
The European Court of Justice’s (ECJ) landmark decision in Case C-634/21 (December 2023) has reignited the debate on the role of Artificial Intelligence (AI) in credit scoring within the Fintech sector. The Court’s ruling held that a credit reference agency (in this case, SCHUFA) engages in automated individual decision-making when it creates credit repayment probability…
-
Transfers of Personal Data to the United States Under the EU-US Data Privacy Framework
The EU-US Data Privacy Framework (EU-US DPF) is a framework that US-based organisations can certify against, committing to a set of privacy principles. To certify under the EU-US DPF, as well as re-certify annually, organisations must publicly declare their commitment to comply with the principles of the EU-US DPF. The Framework allows self-certified companies that…
-
Council of Europe Adopts First International Treaty on Artificial Intelligence
The Council of Europe has adopted the first-ever international legally binding treaty aimed at ensuring the respect of human rights, the rule of law and democracy legal standards in the use of artificial intelligence (AI) systems.
-
Prepare for NIS2 with ICS Training
ICS is launching essential training on NIS2, designed to help you prepare your organisation for compliance with this major new cybersecurity regulation.
-
EU AI Act – Will I need to conduct a Data Protection Impact Assessment? What about a Fundamental Rights Impact Assessment?
Essentially, a Data Protection Impact Assessment (DPIA) is mandatory when the processing of personal data is, “likely to result in a high risk to the rights and freedoms of natural persons”. In the context of the AI Act, a DPIA will also need to be conducted by deployers in respect of the use of high-risk…
-
Unlocking Insights: Highlights at the Annual Data Protection Conference
The Annual Data Protection Conference, organised by ADPO, is just around the corner, taking place on 9 May in Dublin. As data privacy professionals, you won’t want to miss this opportunity to delve into the latest trends, challenges, and solutions in the ever-evolving landscape of data protection.
-
EDPB launches its CEF action for 2024 on the right of access
On 28 February 2024, the European Data Protection Board (EDPB) commenced this year’s Coordinated Enforcement Framework (CEF) action on the right of access. This follows its adoption in 2023 of Guidelines on data subject rights – Right of access to assist data controllers to appropriately respond to data access rights requests in accordance with the…