Andreea Lisievici

The Privacy Explorer | Week 18

Welcome to the privacy news recap for week 18 of 2024!

In this edition:
📱US Federal Communications Commission (FCC) Imposes Heavy Fines on Major US Carriers for Illegal Data Sharing Practices;

🤖 OpenAI’s GDPR Compliance Faces New Challenge In Europe;

👥 EU Commission Initiates Formal Proceedings Against Meta for Possible Digital Services Act Violations;

📄 Norwegian Data Protection Authority publishes annual report for 2023;

⚖️ CJEU Rules on Data Retention and Privacy in Copyright Enforcement Case (C-470/21 La Quadrature du Net and Others);

⚖️ CJEU Ruling on Data Access for Crime Investigation Under the ePrivacy Directive (C‑178/22);

🛡️ NIST publishes Cyber Security Framework 2.0 small business guide;

📥 Dutch DPA publishes guidelines on data scraping and considers it “mostly illegal”;

👁️ Dutch DPA publishes general framework for facial recognition;

📝 UK ICO launches tool to help create privacy notices;

🏛️ OECD Updates AI Principles.

The Privacy Explorer | Week 18 Read More »

ChatGPT

OpenAI’s GDPR Compliance Faces New Challenge in Europe

It’s hardly shocking that LLM chatbots like OpenAI’s ChatGPT struggle with GDPR compliance, particularly with data subject requests like rectification or deletion. Why? Because these LLMs generate responses based on training patterns rather than accessing or storing personal data from interactions—meaning they can invent data if it seems fitting to the algorithm. 💡🤖Despite hopes that

OpenAI’s GDPR Compliance Faces New Challenge in Europe Read More »

The Privacy Explorer – Week 16

✨Welcome to the privacy news recap for week 16 of 2024!

In this edition:
✳ FISA 702 was reauthorised in the US,
✳ Avast was fined heavily in Czechia for the misshap in 2019, after they have just settled in the US two month ago for the same thing. Ouch!
✳ The draft US federal law (ARPA) is already under scrutiny by none other than the CCPA,
✳ EDPB gave its opinion on the “consent or pay” model,

and more!

The Privacy Explorer – Week 16 Read More »

EDPB Opinion on Consent or Pay – A Quick Summary

The European Data Protection Board has examined the legality of ‘consent or pay’ models, where users are presented with a choice between consenting to the processing of their personal data for behavioral advertising purposes or paying a fee. In the opinion published on 17 April 2024 the EDPB has concluded that such models can be used lawfully only with significant changes to the current practice. Here’s why they say this and what they think is the way to go.

EDPB Opinion on Consent or Pay – A Quick Summary Read More »

Scroll to Top