Loading

Category: Data Protection

Clearview AI faces a punishment from Dutch DPA for Illegal Facial Recognition Data Collection

Clearview AI faces a punishment of 30.5 million euros from the Dutch DPA for Illegal Facial Recognition Data Collection.   Clearview AI faces a punishment of 30.5 million euros from the Dutch Data Protection Authority (AP) and up to 5 million euros in penalty payments. The US based company provides services using its facial recognition

Hong Kong’s AI model framework: the Personal Data (Privacy) Ordinance

The Hong Kong PCPD’s AI Model Framework provides guidelines for organisations using AI systems that process personal data, emphasising compliance with the PDPO.   On June 11, 2024, the Hong Kong Office of the Privacy Commissioner for Personal Data (PCPD) unveiled its Artificial Intelligence Model Personal Data Protection Framework (Model Framework). This framework serves as

Provisional decision from the ICO to fine a software company following a ransomware attack

Following a ransomware attack, the ICO has made a provisional decision to impose a £6 million fine, and urged organisations to secure external connections.    The Information Commissioner’s Office (ICO) released a statement earlier this month, announcing that they have issued a provisional decision to fine Advanced Computer Software Group Ltd (Advanced), a healthcare technology

High risk AI and the EU AI Act

What AI systems fall under the “high-risk” category and what requirements do they need to comply with under the EU AI Act?    The European Union Artificial Intelligence (AI) Act, officially approved by the Council of Ministers through a voting process in May 2024, is a landmark piece of legislation that will have a profound

General-purpose AI and Systemic risk in the EU AI Act

As Europe continues to embrace the potential of general-purpose AI, it is essential that a calculated approach is taken to address the systemic risks associated with the technology.    General-purpose Artificial Intelligence (GPAI) models are ones that have a wide range of possible uses, both intended and unintended by the developers. They can be used

Aphaia delivers a presentation on the new EU AI Act and the GDPR on 42Workspace in Rotterdam

Aphaia has opened its new office at 42Workspace in Rotterdam and had the chance to deliver the presentation “EU AI Act with GDPR fundamentals” to the Rotterdam tech community on 5th June.   42Workspace is the tech coworking space in Rotterdam, comprising a community of more than 40 startups and scale-ups providing digital services in

Right to be forgotten: how unfit data deletion protocol resulted in a fine from Dutch DPA

A company was fined by the Dutch Data Protection Agency for failure to delete data after receiving such requests, thereby violating individuals’ right to be forgotten under the GDPR.   The Dutch Data Protection Authority (DPA) has imposed a fine of 6,000 euros on a recruitment company. The company was fined for failing to delete

Data Protection and AI chatbots: Advice from the ICO

Following an investigation into the technology company Snap Inc, the ICO has published data protection advice with the use of AI chatbots.   Lately, it has become increasingly common for businesses and organisations to offer the option of an AI chatbot for website visitors and app users. Whether it be a social media chatbot, or

Guidance on the Use of Wi-Fi Tracking Technology

The AEPD has published guidance on the use of wi-fi technology in compliance with the GDPR.    In a collaborative effort to address the growing concerns surrounding Wi-Fi tracking technology, the Spanish Data Protection Agency (AEPD), in conjunction with the Catalan Data Protection Authority, the Basque Data Protection Authority, and the Transparency and Data Protection

Combat the threat of cyber attacks: A call to action from the ICO

The ICO has called on organisations to take action to combat the threat of cyber attacks, providing guidance based on 2023 data breach reports.    In light of the escalating risk of cyber threats, The Information Commissioner’s Office (ICO) is urging all organisations to strengthen their cyber security measures and safeguard the personal data under