Tag: GDPR Compliance

What to do after appointing a DPO

Appointing a Data Protection Officer (DPO) is a significant step in ensuring compliance with data protection regulations. However, this appointment does not absolve the company of its compliance responsibilities. In reality, the role of the officer is to guide and advise, not to shoulder the entire burden of compliance. As DPO for companies around the […]

Data protection digest 17 – 31 Oct 2024: clinical research service providers, non-for-profit, commercially available AI

Non-for-Profit Updated privacy guidance for not-for-profit has been released by the Office of the Australian Information Commissioner. It includes a discussion on what to consider when engaging third-party providers, such as for fundraising, or software vendors. For instance, when entering into arrangements with third parties, your non-for-profit should take reasonable steps to ensure that the third […]

Embracing the GDPR as a non-EU company

6 years after becoming enforceable, the GDPR has not died out in popularity as a conversation topic among board members. While is remains the elephant in the room for many a stakeholder, non-EU companies who have embraced its application and requirements are finding it much easier to remain contenders on the European market. This article […]

Data protection digest 2 – 16 Oct 2024: knowing your processors and sub-processors, automated driving, election technologies

Reliance on processors and sub-processors The EDPB has issued an opinion on the interpretation of certain duties of controllers relying on processors and sub-processors, arising from Art. 28 of the GDPR, as well as the wording of controller-processor contracts. In particular, controllers should have information on the identity of all processors and sub-processors etc. readily […]

Beyond Compliance: Elevating AI Ethics with a Data Officer’s Expertise

Introduction The ethical development and usage of artificial intelligence (AI) is essential to ensure fairness, transparency, and justice, as AI systems increasingly impact society and individuals. There are various frameworks and principles that organizations can use to mitigate risks such as bias, discrimination, and privacy violations. Appointing a Data Officer provides a strategic advantage by […]

The Future of Responsible AI: The Essential Role of a Data Officer

EU Digital Compliance Landscape After long discussions and a feedback process, we finally have the AI Act. The AI Act covers major concerns such as the ethical use of AI, AI governance, and risk management for AI systems. The future of responsible AI now has a clear legal path. It is hard to capture all […]

Data protection digest 2 – 16 Sep 2024: New SCCs initiative, data asset deals, probabilistic method and GDPR

In this digest we look at the perception of the term privacy in the digital era, data protection measures when concluding “asset deals”, the new SCCs initiative for international transfers from the EU, the probability method and data accuracy, and much more. Stay up to date! Sign up to receive our fortnightly digest via email. […]

Navigating the Ethical Maze: How a Data Officer Can Guide Your AI Journey

 Introduction With the growing developments in the effectiveness of artificial intelligence (AI), the use of AI has become increasingly common in organizations. Organizations are already relying more frequently on the use of generative AI or other tools and services that have integrated AI capabilities. As a result, if AI is processing personal information or involved […]

The Intersection of AI and Ethics: Why Your Organization Needs a Data Officer

Artificial Intelligence (AI) has become a key player in many industries and for different aspects of a business, from HR to product development, to the product itself. Its popularity and potential economic interest is only growing, with businesses and organizations intending to profit from its seemingly endless capabilities. For example, increased productivity and global greenhouse […]

Data protection digest 18 Aug – 2 Sep 2024: Swiss-US data transfers, BCR guide, Clearview AI fine

In this digest issue, we explore the latest Clearview AI fine, the secure Swiss-US data transfers, the data controller’s violation of the GDPR as subject to collective actions, the privacy risks of e-shop apps, and a new privacy policy generator and BCR monitoring tool. Stay up to date! Sign up to receive our fortnightly digest […]

Do you need support on data protection, privacy or GDPR? TechGDPR can help.

Request your free consultation