Loading

Tag: GDPR

Tag: GDPR
Page 2

Enforcement notices issued to two public organisations

The UK ICO has issued enforcement notices to two public bodies under the Freedom of Information Act of 2000, ordering them to address a backlog of requests from the public.    The Information Commissioner’s Office (ICO) recently took action against two public service organisations for their ongoing failures to meet fundamental Freedom of Information Act

EU AI Act Enforcement Overview

Penalties will be imposed by Member States under the EU AI Act, with the support of various authorities and bodies including an AI Board, AI Office, Advisory Forum and Scientific Panel.    The EU AI Act establishes a comprehensive framework for regulating Artificial Intelligence (AI) in the European Union. The regulation aims to ensure that

Transparency obligations under the EU AI Act

Under the EU AI Act, what are transparency obligations imposed upon organisations, and what requirements and implications do these obligations carry?   The EU AI Act aims to regulate the development and use of AI in the EU. One of the key elements of the proposed Act is the requirement for transparency. This means that

Biometric identification and the EU AI Act

How does the EU AI Act address biometric identification, and how do its provisions compare to those of the GDPR regarding biometric data?   Biometric identification encompasses a variety of methods for verifying an individual’s identity. It can be utilized for various purposes, such as user authentication (e.g., unlocking smartphones) or verification at border crossings

High risk AI and the EU AI Act

What AI systems fall under the “high-risk” category and what requirements do they need to comply with under the EU AI Act?    The European Union Artificial Intelligence (AI) Act, officially approved by the Council of Ministers through a voting process in May 2024, is a landmark piece of legislation that will have a profound

Aphaia delivers a presentation on the new EU AI Act and the GDPR on 42Workspace in Rotterdam

Aphaia has opened its new office at 42Workspace in Rotterdam and had the chance to deliver the presentation “EU AI Act with GDPR fundamentals” to the Rotterdam tech community on 5th June.   42Workspace is the tech coworking space in Rotterdam, comprising a community of more than 40 startups and scale-ups providing digital services in

Right to be forgotten: how unfit data deletion protocol resulted in a fine from Dutch DPA

A company was fined by the Dutch Data Protection Agency for failure to delete data after receiving such requests, thereby violating individuals’ right to be forgotten under the GDPR.   The Dutch Data Protection Authority (DPA) has imposed a fine of 6,000 euros on a recruitment company. The company was fined for failing to delete

Data Protection and AI chatbots: Advice from the ICO

Following an investigation into the technology company Snap Inc, the ICO has published data protection advice with the use of AI chatbots.   Lately, it has become increasingly common for businesses and organisations to offer the option of an AI chatbot for website visitors and app users. Whether it be a social media chatbot, or

Guidance on the Use of Wi-Fi Tracking Technology

The AEPD has published guidance on the use of wi-fi technology in compliance with the GDPR.    In a collaborative effort to address the growing concerns surrounding Wi-Fi tracking technology, the Spanish Data Protection Agency (AEPD), in conjunction with the Catalan Data Protection Authority, the Basque Data Protection Authority, and the Transparency and Data Protection

Combat the threat of cyber attacks: A call to action from the ICO

The ICO has called on organisations to take action to combat the threat of cyber attacks, providing guidance based on 2023 data breach reports.    In light of the escalating risk of cyber threats, The Information Commissioner’s Office (ICO) is urging all organisations to strengthen their cyber security measures and safeguard the personal data under