The Brazilian DPA just ordered Meta to pause the training of large language models using public content shared by adults on Facebook and Instagram in Brazil.
The Spanish DPA just announced it has ordered a precautionary measure that prevents Meta from launching the Election Day Information - EDI and Voter Information Unit -VIU in Spain.
https://t.co/BGiofrjY8n.
Published the article I wrote for IDPL about “The risk-based approach in the GDPR and the ‘two-step test’ within Article 44”. In this article, the risk-based approach in personal data transfers is assessed through the lens of Article 44 of the GDPR.
https://t.co/DFosgrNtMd
🚨BREAKING: First of its kind in the US, Colorado approves a bill to protect biological data, including neural data. Extremely important given the advancement of AI-based neurotechnology. Quote:
"2. The general assembly further finds that: (...)
e. Every human brain is unique, meaning that neural data is specific to the individual from whom it was collected. Because neural data contains distinctive information about the structure and functioning of individual brains and nervous systems, it always contains sensitive information that may link the data to an identified or identifiable individual;
f. The collection of neural data always involves involuntary disclosure of information. Even if individuals consent to the collection and processing of their data for a narrow use, they are unlikely to be fully aware of the content or quantity of information they are sharing."
-
"Neural data means information that is generated by the measurement of the activity of an individual's central or peripheral nervous systems and that can be processed by or with the assistance of a device."
➡️Link to the bill below.
➡️For more information on tech policy & regulation, subscribe to my weekly newsletter.
What just happened in that Endemol Shine Finland case? 😱
Apparently speaking one's name out loud is now "processing of personal data" covered by the GDPR. Wait What Now?
https://t.co/Odv7tKsSGF
If you believe in synergies between data protection law, data privacy law, and future AI law, then this EDPS - European Data Protection Supervisor's blog is for you: https://t.co/GYMxUMlev1.
This year I experimented with a new task in my Regulating Big Tech course (LLB, 3rd year). As a midterm assessment I used to assign a short essay (2,5k words) where students can critically reflect on course topics. With genAI, I knew I had to update the task. Here’s how it went🧵
The EU Commission has finally released its report on the first review of the functioning of adequacy decisions adopted pursuant to former Directive 95/46/EC. See https://t.co/9uAmR400HQ.
History of data protection: An online anthology. A compilation of resources about the history of data protection law, focusing mainly on European developments – @FusterGloria. https://t.co/PruLoEGKOA
Já está disponível o Anuário da Proteção de Dados 2023, que coordeno com a @gracacantomoniz desde 2018. Muito obrigado a todos os autores e à @emellin_oliv pelo apoio à edição da obra. Pode ser descarregado gratuitamente aqui: https://t.co/WV0s28saGg
Is it just me, or the EU accepts EO on safeguards on government access to data as being technically law for data transfer purposes, but ignores the US EO on AI as being technically law? 🤔 (lots of emphasis on the AI Act as being the world’s first AI law of sorts)
While EU officials & MEPs have spent the last 20 hours continuously negotiating prohibitions under the AI Act, lo & behold the Court of Justice of the EU deciding that there is already a prohibition on individual automated decision-making based on personal data in the #GDPR 🤭1/