compliance

Volkswagen Fined by Lower Saxony DPA

Volkswagen Fined €1,100,000 For Silly Mistakes A third-part hired by Volkswagen conducted some vehicle test-drives for them. Volkswagen were the data controller, the third-party were their data processor. The vehicles in question were testing anew type of driver-assist. Specifically, the system used video input to robotic vision units to monitor what the traffic around the car, so that it could gauge whether corrective action needed to be taken. The vehicle was driven across the border into Austria, and was stopped by police near Salzburg.

Continue reading

Google Fonts Break GDPR!

Using Google Fonts on Websites Breaks GDPR A ruling on Jan. 20, 2022 by the Germany’s Landgericht München’s third civil chamber in Munich found the website owner to be in breach of the GDPR. Websites are able to make use of fonts provided by Google. Google makes these fonts available because they provide another string to its data collecting bow. When a person visits the website, the font is downloaded to their computer from Google so that the website is rendered accurately and as intended, with the correct typefaces.

Continue reading

New Artificial Intelligence Regulations On the Horizon

The Need for Legislation Software vendors and technology manufacturers seem to be racing each other to include AI in their products. Service providers, social media platforms, and online shopping giants all use AI too. Amazon uses AI to suggest products to you based on your purchase, search, and viewing history. YouTube does something similar to compile video suggestions for you. AI also touches our lives in more subtle, behind-the-scenes, ways.

Continue reading

Intelligence Services and General Warrants

GCHQ and MI5 Cannot Rely on General Warrants The High Court ruled on January 8th, 2021 that it was unlawful for the GCHQ and MI5 to use warrants issued under Section 5 of the Intelligence Services Act 1994 (ISA) to interfere with the property—including computers—of multitudes of people based on a single warrant. The High Court quashed a 2016 decision by the Investigatory Powers Tribunal (IPT), and ruled that section 5 of the Intelligence Services Act (ISA) 1994 does not permit the issuing of general or thematic warrants to authorise property interference and certain forms of computer bugging, monitoring and hacking.

Continue reading

Signal Messenger, WhatsApp, and Privacy

Signal Secure Messenger Signal is a secure messenger app published by the Signal Foundation and Signal Messenger LLC. These are not-for-profit organizations based in Mountain View, California. They were founded by Matthew Rosenfeld aka ‘Moxie Marlinspike’ and Brian Acton, to build on the work of one of Rosenfeld’s earlier start-ups Open Whisper Systems. Signal is free and open source. One of the glories of open source is that absolutely anyone can review the source code.

Continue reading

Facebook Operates Under Contract Not Consent

December 2020 Ruling in Favour of Facebook The Viennese Superior Court (Oberlandesgericht Wien) ruled on December 29th 2020 that internet giant Facebook does not need to obtain consent from its users for the use of their data. That is, Facebook does not need to obtain consent under Article 6(1)(a) of the GDPR. This is because it is covered by the contract that exists between Facebook and its users, and the small print of its terms and conditions.

Continue reading

ICO Exam Exceptions for Data Access Requests

ICO Exemptions on Exam Scripts Because of the Covid-19 pandemic, most school and university exams have been abandoned. Teachers and lecturers will be conducting and submitting pupil assessments. These will form the basis of grades. We’re getting a lot of questions regarding the rights of the pupils and students, under the General Data Protection Regulations (GDPR). What people want to know is, can you use the GDPR to find out what has been submitted by the institution about a student or pupil?

Continue reading

Google Faces Lawsuit Over Mobile App Data Collection

Data Gathered Even When Users Decline Google records user activity hundreds of thousands of mobile apps even when the users have followed Google’s instructions on how to turn off the monitoring. Google faces a class action lawsuit. The lawsuit has been filed by the law firm Boies Schiller Flexner on behalf a handful of individual consumers. Interestingly, the list of clients includes Facebook Inc and Oracle Corp. Google did not immediately respond to a request for comment on the filing.

Continue reading

Clearview Under Scrutiny

Clearview Under Scrutiny The Office of the Australian Information Commissioner (OAIC) and the Information Commissioner’s Office (ICO) in the UK have opened a joint investigation into the personal information handling practices of Clearview AI. The probe will focus on the New York-headquartered company’s use of ‘scraped’ data and biometrics of individuals. Clearview’s technology is used by law enforcement agencies in searching the internet to help identify suspects in serious crime cases.

Continue reading