EU law Archives

Addressing AI Risks in the Workplace: Workers and Algorithms

AI, employees, Risk management | June 18, 2024

On 3 June 2024, the European Parliamentary Research Service issued a briefing on the impact of algorithms and AI in the workplace. AI’s potential to transform work raises ethical concerns and challenges existing labour laws. The briefing highlights the tension between strict regulation and minimal oversight, exploring how AI improves productivity but poses risks like job loss and worker surveillance. It also discusses the EU’s legislative approach and the role of collective bargaining in managing these technologies. Despite some regulatory efforts, significant questions about AI’s workplace impact remain.

Addressing AI Risks in the Workplace: Workers and Algorithms Read More »

New Security-Focused Software Testing Measure Added to Danish DPA’s Catalogue

cybersecurity | June 18, 2024

The Danish Data Protection Agency (Datatilsynet) added a new security-focused software testing measure to its catalogue of recommended security actions. This measure aims to identify vulnerabilities in newly developed software, and includes various types of tests, such as vulnerability and penetration tests, ensuring comprehensive security coverage during software development.

New Security-Focused Software Testing Measure Added to Danish DPA’s Catalogue Read More »

The Privacy Explorer | Week 22

The Privacy Explorer | June 9, 2024

This edition at a glance: 👈 Swipe left for a quick overview, then find 🔍 more details on each topic below. Subscribe 🇮🇹🤖 Italian DPA Issues Guidance on Protecting Online Personal Data from Web Scraping The Italian Data Protection Authority (Garante) has issued guidance to protect personal data published online by public and private entities

The Privacy Explorer | Week 22 Read More »

Estonian Information System Authority publishes Report on Risks and Controls for AI and Machine Learning Systems

AI, Risk management | June 9, 2024

Estonia’s Information Systems Authority released a report titled “Risks and Controls for Artificial Intelligence and Machine Learning Systems”. The report covers the history and applications of AI, providing practical controls to mitigate risks. Key topics include use cases, explainability, regulatory trends such as the EU AI Act, legal roles of stakeholders under GDPR, deployment models, and risk assessment. Section 8 offers a practical quick reference guide for organizations, detailing steps for identifying threats, applicable laws, and selecting controls.

Estonian Information System Authority publishes Report on Risks and Controls for AI and Machine Learning Systems Read More »

EDPB Issues Opinion on Facial Recognition at Airports

AFR, AI, EDPB, EU law | June 8, 2024

The European Data Protection Board (EDPB) issued an Opinion regarding the use of facial recognition technologies by airport operators and airlines to streamline passenger flow. The Opinion, prompted by a request from the French Data Protection Authority, emphasizes the need for maximum control by individuals over their biometric data due to significant privacy risks. It finds that only storage solutions where biometric data is kept by individuals or encrypted centrally with keys in individuals’ hands are compliant with GDPR principles of data protection by design and security. Less intrusive alternatives should be sought to avoid excessive data processing.

EDPB Issues Opinion on Facial Recognition at Airports Read More »