If you’re wondering how to apply the EDPB Opinion 28/2024 to your AI systems, take some time to read the Hamburg DPA’s report on AI Chatbot LLMoin. See https://t.co/MftqBtXIo0
What tasks should AI be trusted with, and when should humans remain involved? Designing those decision rights is one of the defining challenges of the AI era. Researchers at the MIT Center for Information Systems Research have developed a framework to help.
Learn more: https://t.co/NbTi0Vvd7Z
Agentic IAM is still one of the most pressing problems in our industry, and NIST just published their Design Tenets for Agent Identity Management Systems.
A few of the items that jumped out to me are distinct, cryptographically verifiable identities for agents that are separate from human users and service accounts, a clear chain of trust when agents act on behalf of users or organizations, least and zero standing privilege, and cryptographically signed mandate statements that define intended outcomes and constraints for agent actions.
In my opinion least and zero standing privilege is going to be the most elusive, as people and organizations lean into the utility of agents in the security vs. utility tradeoff.
It was hard enough for human users and in cloud, and it's going to be even harder to constrain autonomous agents that can drive business outcomes.
https://t.co/Ao3OmYfObM
…and non-technical people. Very useful for AIGP prep especially.
My special interest is privacy engineering, so I also love that one a lot but probably too technical for many people. Super good challenge though if you want to push yourself and future-proof your career.
… dev tools in a non-technical friendly manner. The Privacy by design lab moves PbD from abstract principles to concrete artifacts like agile integration etc. The privacy incident playbook also puts you in the hot seat where you have to make important life/death decisions (lol)
That said, I have found the AI Governance labs the one I have learned from the most as a professional. It is tough by design but you will never forget what you learn... well I haven’t. It breaks down the most technical details in a way that is easily understandable for lawyers…
Someone asked me today what my favorite path on @Privarlylearn is and tbh that is sooooo hard to say. I am partial to the privacy program management module. It is very hands-on. You have to actually audit a website, you have to do actual cookie configurations, you have to use…
What tasks should AI be trusted with, and when should humans remain involved? Designing those decision rights is one of the defining challenges of the AI era. Researchers at the MIT Center for Information Systems Research have developed a framework to help.
Learn more: https://t.co/NbTi0Vvd7Z
Want to understand what privacy work actually involves?
Start with one practical task that interests you.
Privarly’s guided labs let you explore the work before choosing a direction. You can start for free.
1/5
Completed @Privarlylearn's Project Horizon: Multi-Jurisdictional Privacy Assessment capstone, acting as a Privacy Analyst for a simulated biotech company expanding from the EU into the US and Japan.
1/5
5. Preparing stakeholder briefings, a board presentation outline and an executive summary to support an informed go/no-go decision.
The capstone brought together legal research, privacy risk assessment, and practical business planning in one end-to-end simulation.
5/5
Privacy work includes records, requests, assessments, policies and difficult decisions. Privarly gives you guided labs and career paths to practise the work.
Explore: https://t.co/S87OaSd19j