Serious Privacy

Send us a text

Every year, in the final week of January, privacy professionals from around the world assemble in the north of Brussels for the Computers, Privacy and Data Protection Conference. In recent years, on the final day, the European Data Protection Law Review awards a young scholar award and hosts a panel to discuss the nominated papers.

In this episode of Serious Privacy, Paul Breibarth and K Royal host the second of this year’s three finalists for the EDPL Award. Please join us for a conversation with Taner Kuru, who holds a Bachelor and Master of Laws of Ankara University, in Turkey, and recently completed an advanced LL.M. in Law and Digital Technologies from the Leiden Law School in the Hague. He also just completed an internship at the United Nations Interregional Crime and Justice Research Institute (UNICRI) Centre for Artificial Intelligence and Robotics. (You can catch the first finalist from last week with Isabel Hahn on purpose limitation against big data and common practices.)

During this conversation, we discuss how Taner became interested in genetic privacy and then specifically why he researched the concept of group privacy in pertinent data protection laws, such as the European Union’s General Data Protection Regulation and Turkey’s Kişisel Verileri Koruma Kurumu (KVKK). His journey started with CRISPR babies, which led to DNA companies, such as 23andMe and AncestryDNA, and finally into posts on REDDIT and published stories on individuals who have been surprised at some of their DNA results. Given some of the dramatic accounts, Taner became intrigued about whether the privacy of individuals who share DNA is protected. In particular, how do you protect the privacy of groups?

Join us to learn more about this topic and his conclusions. We also discuss precision medicine, the Havasupai case, consent, ethics, and dating apps. Fascinating topics to cover in one episode.

As always, if you have comments or feedback, please contact us at [email protected].

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!
Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/
#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

The 1st of July has come and gone - the date that marks the beginning of the enforcement of the California Consumer Privacy Act (CCPA). Not all companies are ready for CCPA enforcement. And many companies are confused among the many moving parts - the law and potential amendments, the regulations, the ballot initiative, and enforcement.

California’s Attorney General Becerra describes the CCPA is a “first-of-its-kind data privacy law in America.” In his press release he encourages every Californian to know their rights to internet privacy and every business to know its responsibilities. The website of every business covered by the law must now post a link on its homepage that says ‘Do Not Sell My Personal Information’. Click on it - Becerra recommends. Remember, it’s your data. You now get to control how it’s used or sold.”

Join Paul and K to discuss the various aspects of the CCPA, from amendments to enforcement and class actions. The pending regulations were submitted in the beginning of June to the California Office of Administrative Law, but they have not yet completed their review and at this point, may mean a delay to October. Meanwhile, the California Consumer Privacy Act (CPRA) has met the requirements to be on the November ballot. Should it succeed, it will modify the current CCPA.

As always, should you have any questions or comments, please feel free to contact us directly via email at [email protected].

Resources

• TrustArc Global Privacy Benchmarks Survey:
  https://info.trustarc.com/Web-Resource-2020-06-16-Global-Privacy-Survey_LP.html
• CCPA and CPRA TrustArc webinar https://info.trustarc.com/WB-2020-06-17-CCPA-Update_RegPage.html
• CCPA lawsuits Article from National Law Review https://www.natlawreview.com/article/importance-ccpa-compliance-highlighted-first-round-private-actions

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!
Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/
#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

In this episode of Serious Privacy, K Royal and Paul Breitbarth provide an update on recent happenings in both Europe and the US, some of which are surprising and the other makes no waves across the ocean.

First, an unexpected agreement on the ePrivacy Regulation by the EU Members States. This does not mean that the regulation is passed - on the contrary, the Parliament and the European Commission are nearly at polar opposites. They will now enter what is called the “trialogue” where the various parties have to reach an agreement. The ePrivacy Regulation has been in discussion for years with the original intent to enter into effect alongside the EU General Data Protection Regulation (GDPR), but alas, such did not happen.

Meanwhile, there is not a draft adequacy decision for the United Kingdom - there are two. In a never-before-seen event, the EU Commission issued two draft decisions - one for the GDPR and one for the law enforcement directive. The European Data Protection Board will now issue an opinion, which is not binding. However, the interim agreement for trade between the EU and UK will expire June 30, 2021 and cannot be extended. So a decision must be made.

On the other side of the ocean, the US is seeing some movement in the Health Insurance Portability and Accountability Act (HIPAA), which does not happen often. Current proposed revisions include proposed enhancements to patient rights, but two other recent happenings include 1) a law passed (HR7898) to provide a cybersecurity safe harbor if a practice has implemented cybersecurity practices and 2) a recent safe harbor for cybersecurity tech donations. Further, they briefly reviewed enforcement waivers due to COVID 19 that have been issued by the Department of Health and Human Services.

As always, if you have comments or feedback, please contact us at

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!
Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/
#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO

Send us a text

Privacy is not a luxury, yet marginalized populations are more scrutinized and adversely impacted. How do we build equality into the data and practices on using data? It is no surprise that in today’s day and age, data is ubiquitous. Every step we take is documented by multiple devices, from our smartphones and smart watches to street cameras, allowing for massive data sets to be created.

Hardly anyone understands all that is happening with these data, but we do know they are being used for marketing purposes. But what if the data would also be used for the greater good, like we are for example seeing in the current Corona Crisis? Would it for example also be possible to use more data for social justice, in order to promote equality, or to prevent crime? But this could also lead to some darker use patterns for data.

K Royal and Paul Breitbarth discuss these critical issues with Pedro Pavón, Senior Corporate Counsel at Salesforce.com. He has held privacy roles in multiple cloud companies, but also has a passion for ensuring that tech remains a force for good. Join us as we discuss powerful topics, touching on racial bias, flawed data, and the role that inclusion plays at all levels of an organization to create a more socially just world.

Resources

• About Pedro: https://hispanicexecutive.com/pedro-pavon-salesforce/
• Privacy is Not Dead - Here;s Why It’s an Important Social Justice Issue, April 16, 2017 by Robot Hugs https://everydayfeminism.com/2017/04/privacy-and-social-justice/
• What is data justice? The case for connecting digital rights and freedoms globally
• Linnet Taylo https://journals.sagepub.com/doi/full/10.1177/2053951717736335

Social Media

Twitter: @infoseclegal @heartofprivacy @euroPaulB @podcastprivacy @trustarc

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email [email protected]. Rate and Review us!
Proudly sponsored by TrustArc. Learn more about NymityAI at https://trustarc.com/nymityai-beta/
#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO