Locations
Tune in to the action-packed latest episode of Fieldfisher's new Data & Privacy Matters podcast, as Camille Ebden, Matthew Gregson and James Lim look at the key data and privacy news from June 2024.
The episode kicks off with a discussion of the latest on EU AI Act (which is expected to enter into force on 1 August 2024), followed by exploring the reaction to Meta's announced plans to train its AI products on UK and EU users' personal data, and the swift decision to pause those plans. The team touch on the potential impact of the UK election on data and privacy, before discussing the data breaches suffered by Ticketmaster, the UK Post Office and the NHS.
Next up the episode considers two European Court of Justice cases on data breach damages, followed by a summary of the enforcement decision against Avanza bank by the Swedish data protection authority for sending sensitive financial and account data to Meta via incorrect configuration of Meta's marketing pixel.
The team reflects on new EDPS guidance on generative AI for European Union institutions; the EDPB's opinion regarding a code of conduct for clinical research service providers; and the European Commission's opening of a consultation on the EU’s Network and Information Systems 2 Directive (NIS2). Turning back to the UK, the episode explores the ICO's now published decision into Snap Inc’s “My AI” chatbot and the ICO's announcement of a review of its public sector approach.
The podcast explores key developments from the US, including updates on the American Privacy Rights Act, new US state privacy laws and a step forward for the Swiss-US Data Protection Framework. The episode is wrapped up with mention of Apple's delay on rolling out new AI features in the EU; plus noyb's complaints against Microsoft regarding the processing of children's data in its 365 education services.
With the volume of continuous developments in the data and privacy ecosystem, it can be hard to stay on top of the key news stories. This is a must-listen podcast to catch up on notable data and privacy news in the past month and consider what your business or organisation needs to be doing in response.
Source of the news discussed:
EU AI Act
- European AI Office - European AI Office | Shaping Europe’s digital future (europa.eu)
- EU AI Board - Commission hosts High-Level meeting for the upcoming EU's AI Board to Drive AI Act Implementation Forward | Shaping Europe’s digital future (europa.eu)
AI Update
- Meta - Statement in response to Meta's plans to train generative AI with user data | ICO
- Meta - The DPC's Engagement with Meta on AI
- EDPS Guidelines - EDPS Guidelines on generative AI: embracing opportunities, protecting people | European Data Protection Supervisor (europa.eu)
Election
- Labour party manifesto - Change Labour Party Manifesto 2024
- Conservative party manifesto - Conservative-Manifesto-GE2024.pdf (conservatives.com)
Data breaches
- Post Office - Post Office accidentally leaks names of sub-postmasters - BBC News
- Ticketmaster - Ticketmaster hit by data hack that may affect 560m customers | Cybercrime | The Guardian
- Synnovis - Statement in response to Synnovis cyber attack | ICO
Case law
- PS (Adresse erronée) C-590/22 - CURIA - Documents (europa.eu)
- Scalable Capital Joined Cases C-182/22, C-189/22 - CURIA - Documents (europa.eu)
Enforcement update
EDPB / European Commission news
- EDPB Opinion - Opinion 12/2024 on the draft decision of the French Supervisory Authority regarding the “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF | European Data Protection Board (europa.eu)
- NIS2 - Commission seeks feedback on draft implementing act under the NIS2 Directive | Shaping Europe’s digital future (europa.eu)
ICO News
- Snap - snap-my-ai-non-confidential-decision-21-may-2024-20240619-redacted.pdf (ico.org.uk)
- Revised approach to public sector enforcement - ICO sets out revised approach to public sector enforcement | ICO
ROW/US News
- American privacy Rights Act - American Privacy Rights Act markup cancelled, next US House steps uncertain | IAPP
- New State Privacy Laws - New State Privacy Laws Take Effect Beginning on July 1 | ArentFox Schiff - JDSupra
Other news