Search results

[…] is going on in youth & education privacy today…What’s one thing that you are optimistic or encouraged about? I am encouraged by the move to age-appropriate design codes in some jurisdictions since it should lead to more products mapping better to the expectations of parents, educators, and children. What’s one thing that you are […]

[…] (Art 5)  This right expresses the ‘principle of transparency’ found under Article 16(2)(a); The right to access and obtain a copy of the data subject’s personal data free of charge, except for certain conditions that require a fee. (Art 7);  A right to rectification in which the data subject may complete, update, or correct […]

[…] India in the global arena. With India assuming the presidency of the G20 in December 2022, the Government’s approach to existing G20 efforts, such as the Data Free Flow with Trust initiative (spearheaded by Japan), will be sharply back in focus. In the past, India has opposed and deferred joining such efforts, on the […]

[…] of the SFRP system. The court found it unreasonable that seventeen unidentifiable “admin” users had unrestricted access to the sensitive information of millions of individuals, while also free to manipulate and/or erase data without any meaningful transparency or accountability mechanisms in place. The court determined that at least 356 search records for individuals whose […]

[…] appear similar to the EU’s “legitimate interests,” but whose scope still remains uncertain. The PDP Bill would have required consent for processing of personal data to be free, informed, specific, clear, and capable of being withdrawn. For consent to qualify as “informed” under the PDP Bill, the data controller would have to provide certain […]

[…] 43). They relate to: a) The quality of data sets used to train, validate and test the AI systems; the data sets have to be ‘relevant, representative, free of errors and complete’, as well as having ‘the appropriate statistical properties (…) as regards the persons or groups of persons on which the high-risk AI […]

[…] the disclosure of personal data held by certain regulated entities (e.g., providers of financial services, medical practitioners), the PDP Commissioner has approved and registered seven Personal Data Codes of Practice, which provide more detailed requirements for entities in certain sectors to comply with the PDPA. These sectors include: insurance and takaful;  banking and finance;  […]

[…] by public authorities for various purposes. The stated policy aim of the DPA is to protect the fundamental human right to privacy of communication while ensuring the free flow of information to promote innovation and growth. To that end, the DPA provides data subjects with a number of rights over their data, including rights […]

[…] the Act. The Act also empowers the Commissioner to, firstly, investigate complaints regarding entities’ privacy practices, resolve disputes, and issue binding compliance notices, and secondly, issue binding codes of practice in relation to specific sectors or classes of personal information.  In 2012, New Zealand also became one of the few jurisdictions in APAC that […]

[…] Cerrato underlined that the public interest legal basis can only be used if it is provided under national or EU law, which for Smart City development in Belgium was lacking.  Arjan Kapteijn closely followed Cerrato’s remarks, pointing toward the recent Dutch DPA guidance on Smart Cities. In the lead up to such recommendations, the […]