Artificial Intelligence’s Post

Data scraping and privacy. Last week, 12 privacy regulators, including the UK ICO, Mexico's INAI and Canada's OPC, issued a joint statement about privacy and data scraping. This is a highly fraught area of the law and I believe this statement, which is (understandably) one sided, won't be the last word. https://lnkd.in/eP4bpZsp *** To be sure, data scraping was always a prevalent business practice. But now it's also become a lightning rod for clashing commercial interests in the battle for training and improving AI algorithms, particularly Generative AI. https://lnkd.in/eeRtHkPN *** The statement ominously suggests, "Mass data scraping of personal information can constitute a reportable data breach in many jurisdictions." That - obviously - is a big red flag. Consider, for example, that the CCPA has a private right of action for data breaches. (CPPA didn't join the statement). ***  The statement primarily targets social media platforms (YouTube, TikTok, IG, FB, Threads, LinkedIn, Weibo and X), who are invited to respond within one month by outlining their compliance with the recommended measures. *** The statement sets forth privacy and security risks potentially attendant to data scraping, including cyberattacks, ID fraud, profiling and spam. Importantly, it neglects to address some of the *benefits* of data scraping - namely the liberation of data from platforms' data silos. *** In fact, in the US, the merits of data scraping remains a red-hot public policy issue. The pendulum is still swinging in the LinkedIn vs. HiQ case. See my 2022 piece here: https://lnkd.in/eUqxA6yx And most data protection laws, including the federal bill ADPPA, offer broad exemptions for publicly available information. *** This is an area where mighty companies have strong commercial interests. We'll continue to hash it out, not just on the privacy front but also on competition and free speech, over the next few years.

Understanding emerging AI and data privacy regulations: In this Help Net Security interview, Sophie Stalla-Bourdillon, Senior Privacy Counsel & Legal Engineer at Immuta, discusses the AI Act, the Data Act, and the Health Data Space Regulation. Learn how these regulations interact, their implications for both public and private sectors, and their role in shaping future AI and data privacy practices globally. The discussion also touches on the Biden administration’s policies on AI and the anticipated American Privacy Rights Act, providing a view … More → The post Understanding emerging AI and data privacy regulations appeared first on Help Net Security. @Poseidon-US #HelpNetSecurity #Cybersecurity

Data scraping is a fascinating area for questions of privacy. Technically (in the US), data published publicly (e.g. scraping that does not scrape protected data) would not create privacy issues, since privacy law exempts public data (with the exception of big data inferences creating or reestablishing personal information from public). In the EU, personal data is still identifiable, but the requirements applicable could change slightly (for example, risk management techniques like encryption and pseudonymization presume private, not public use). With EU data scraping (‘screen scraping’), we’ve been challenged with a scenario in-between. For example, publishing itself would likely be a data processing event requiring a legal basis. Then, would future publishing or otherwise processing require another additional legal basis (probably)? Or, perhaps publishing before was for a very small audience, and it was constructively limited in its disclosure. Screen scraping makes the almost private potentially very public and likely would mean many GDPR restrictions will still apply. I am interested to see how this develops.

New Hampshire’s Denis Goulet’s “Gov in a Box” approach is setting the stage for states to create subscription services for local governments. State leaders subscription services offers local governments a trusted partner to source data management and security services without the difficulty of trying to source their own vendors. I just read GovTech’s article on the how New Hampshire has completed their data management classification for their large agencies to set the stage for AI and privacy policy management. Too many times I see a trend to jump into AI guardrail guidance without understanding the data they are trying to protect. I think data management practices are is the foundational investments an organization has to make before tackling AI and privacy guardrails. I think whole of state approach is spot on. https://lnkd.in/gPkVv59z

🍀 What could be a more fitting start to Privacy Week (January 22-28) than an insightful chat with Tahir Latif, FIP about his journey through data privacy, AI governance, and the current industry challenges? Tahir isn't just a member of the IAPP - International Association of Privacy Professionals Global Training Advisory Board; he's also one of the trainers for the IAPP's new "AI Governance Professional Certification (AIGP)", which is most likely to soon become an industry standard, much like others, for those interested in working in this area and eager to learn more. As we all know, a lot is happening on the AI front right now, with the new #AI #Act on its way, emphasising responsible and ethical governance. 👉🏽 We will now have more conversations about the potential risks of using AI technologies, especially concerning "#high-#risk #AI #systems". 👉🏽 The legal requirements for these systems now differ in aspects such as data governance, documentation, record-keeping, and transparency. 👉🏽 We'll be discussing terms like "information provision to users" and "human oversight," as well as talking about the "#robustness," "#accuracy," and "#security" of the information more frequently. 👉🏽 With the EU’s AI Act leading the way, we'll likely see similar AI acts emerging globally. 🌿 We're transitioning to a more technology-focused approach to governance, where discussions can't just revolve around compliance. 🌿 Our conversations will need to deeply integrate an understanding of the technology, with a strong focus on #data #minimisation, and it's vital to prepare ourselves if we will be working in the area and guiding companies on data collection, storage, and security. We will hopefully have more talks about 'data protection by design' as well. I think #Privacy #Enhancing #Technologies(PETs) will play a significant role in achieving this; they will need to become more well-known by companies developing/utilising AI systems and privacy professionals who want to work in this space. (I'll share two great resources in the comments if you want to get started.🌸) Yes, it’s never a dull day in the world of privacy because of the significance of the work we do, protecting human rights, but also due to the rapid changes in technology and how it affects human lives as the ways and volume of data processed evolve. All in all, it was great to discuss with Tahir how AI developments and regulatory efforts will uniquely shape the sector and how they are expected to integrate with our profession. 🌼 As you can see, we had gloomy weather today, but we definitely didn't let that affect our mood! 😄⚡️ ✨ An old wise woman once said, "There can't be sun every day, but there will always be reasons to smile." :))) Stay with privacy, stay updated, stay with love (had to include, yes)! 💛 #aigovernance #aiact #responsibleai #aiethics #governance #privacy #dataprotection #gdpr

A new joint statement on #privacy and #datascraping by 12 privacy regulators from the UK, Australia, HK, etc. looks to social media companies like #Bytedance #Alphabet #Meta and #XCorp (#Twitter) to prevent illegal data scraping of personal information but "neglects to address some of the *benefits* of data scraping - namely the liberation of data from platforms' data silos." Excellent analysis by Omer Tene below, and you can read the actual joint statement here https://lnkd.in/gEnDcCDW #ai #ailaw #generativeai #aiethics

🚀 Advancing Privacy Management in the AI Era: Nymity PMAF's Comprehensive Approach In a digital landscape increasingly driven by AI, the integration of advanced AI capabilities and regulations into privacy frameworks is crucial. TrustArc's recent blog showcases how the Nymity Privacy Management Accountability Framework™ (PMAF) excels in this new era by incorporating cutting-edge AI data privacy governance. 🌟 Why Nymity PMAF is Essential for AI-Driven Privacy Management 1️⃣ AI-Forward Framework: Nymity PMAF leads the way in adapting to AI innovations and regulations, setting it apart from other frameworks like NIST or ISO 27001/2. 2️⃣ Comprehensive and Integrative: It offers an all-encompassing approach to privacy, blending various framework elements, ideal for flexible, framework-neutral privacy programs. 3️⃣ Benchmarking & Taxonomy Excellence: The inclusion of AI governance provisions ensures that the Nymity PMAF stays ahead, making it a forward-thinking choice for contemporary privacy challenges. The framework's esteemed taxonomy, combined with PrivacyCentral, provides a solid foundation for benchmarking and navigating the complexities of AI in privacy management. 4️⃣ Proactive AI Data Privacy Governance: Nymity PMAF's recent focus on AI governance ensures it remains at the forefront, addressing modern privacy challenges head-on. 🔏 A Privacy Tool for Today’s AI Challenges and Beyond: The Nymity PMAF is not just a framework; it is a forward-thinking privacy solution in the age of AI. In aligning with global regulations and embedding AI governance within its structure, it is adept at meeting the evolving needs of today's organizations. 🔗 I invite you to explore the latest blog post on TrustArc, which offers an in-depth perspective on this topic. #DataPrivacy #AIGovernance #BrandTrust #PrivacyManagement #ComplianceInnovation #AI #blogs

Two important bills to keep track of if you're following ethical AI development, Canadian Bills C-26 and C-27: Bill C-26 Title: An Act respecting cybersecurity, amending the Telecommunications Act and making consequential amendments to other Acts. Current Status: The bill is under consideration in committee in the House of Commons. Progress:   - First Reading: Completed on June 14, 2022.  - Second Reading: Completed on March 27, 2023.  - Committee Consideration: No activity reported as of now. Sponsor: Introduced by Marco Mendicino, a member of the Liberal party. https://lnkd.in/dfFvcuwe Bill C-27 Title: An Act to enact the Consumer Privacy Protection Act, the Personal Information and Data Protection Tribunal Act, and the Artificial Intelligence and Data Act, along with consequential and related amendments to other Acts. Current Status: The bill has completed the second reading and is currently under consideration in the committee stage. Progress:  - First Reading: Completed on June 16, 2022.  - Second Reading: Completed on April 24, 2023.  - Committee Consideration: In progress, handled by the Standing Committee on Industry and Technology. Specifics: This bill aims to enact new acts related to consumer privacy protection, data protection, and artificial intelligence, as well as making related amendments to other existing acts. These bills represent significant steps in cybersecurity and data privacy legislation in Canada. Bill C-26 focuses on cybersecurity, particularly in relation to the telecommunications sector, while Bill C-27 addresses broader issues of consumer privacy protection and the regulation of artificial intelligence and data. The progression of these bills through the legislative process indicates ongoing efforts to update and strengthen Canada's legal framework in these critical areas. https://lnkd.in/de3kz9K6

TrustArc Empowers Organizations with Accountable AI Data Privacy ... - PR Newswire: TrustArc Empowers Organizations with Accountable AI Data Privacy ...  PR Newswire #datagovernance #CDO #finperform

Great article on Privacy and AI by ISMS.online, including insights by ISACA. Take a few minutes to read it in the following link! #Privacy #ai #isaca https://lnkd.in/dQFp7Vjy