PrivacyFin

Attending the IAPP AI governance Training in Washington at the moment. Interesting to be at the other side of the table - usually I am teaching, now I am a student again.

I am attending the #Data Space Symposium 2024 in Darmstadt.
Very interesting discussions, even about what a data space is ;)
This time many companies and also the usal suspects like the Data Space Support Center and MyData. If you are also in Darmstadt, please let me know, happy to chat about data.

Feyo from our Dutch office and I were speaking today on the future of the #DataAct.
Happy to hear what would be your questions on this super complex piece of legislation!

Op-Ed: “ ‘Scoring’ for Data Protection Rights: The Court of Justice’s First Judgment on Article 22 GDPR (Case C-634/21 and Joined Cases C-26/22 and C-64/22)” by Francesca Palmiotto - EU Law Live On the 7th of December 2023, the Court of Justice delivered two landmark judgments for the protection of the right to data protection against automated credit scoring (Schufa Holding …   Read more

Op-Ed: “ ‘Scoring’ for Data Protection Rights: The Court of Justice’s First Judgment on Article 22 GDPR (Case C-634/21 and Joined Cases C-26/22 and C-64/22)” by Francesca Palmiotto

www.fitness-insights.at/wp-content/u....
This one is also advertised as free. And it is indeed. Very simple plans, but at least truthful.

Btw, I would totally understand that those plans are not for free. I do not like that something that is pay only is advertised as free. #workout

Next in the series „free workoutplans“ => ModusX. Says they are free, next page it turns out that it is only paid. Verdict: lie.

First „omo-app“. Asks a lot of questions, like 50+ , some are repetative. Almost seems like clickbait stuff, so long. After the end, turns out it is not free. Uses some simple psychological tricks to get people to pay. Verdict: Lie.

Something new: I am looking for free workout plans => am testing different sites that come up in search with free workout plans.

In my career as an in-house counsel long time back, I learned one thing: the least practical thing what one can do is to have a long meeting where everyone says “let’s find a practical solution.” Just do it.

CJEU, data protection law

New judgment clarifies when damages might be claimed following a hack

Fun question for your yearly GDPR quiz: the European Data protection authorities use the example names Titius, Gaius and Sempronius as examples in one of their guidelines. Does anyone know which guideline? (You might win a prize!)

Regional dialects!

My teenage son is really into survival. What are the best books on the topic?
#notdatalawthistime

High Court rules that Getty v Stability AI case can proceed While most of the attention regarding artificial intelligence and copyright has been centred in the United States, it’s useful to remember that one of the main pieces of litigation is taking …

New blog post: High Court rules that Getty v Stability AI case can proceed.

Next: Data spaces, a quite essential concept, are only defined in passing as purpose-or sector specific or cross-sectoral interoperable frameworks for common standards and practices to share or jointly process data for eg development of new products/services, research or civil society initiatives

Here comes a series on inconsistencies and not ideal legal drafting in the #dataact. Starting with something small.
Article 14: "data holders that are legal persons, other than public sectors bodies, which hold those data"

Data holders by definition are obliged to make the data available.

Data protection law
New judgment clarifies what GDPR permits/does not permit re credit agencies

I finished yesterday the correction of my course on data protection. It took me two days to correct 60 case studies all of them around 10 pages. I’m a little bit fed up with the work. Does anyone have ideas how to test students in a way that is fair and also ChatGPT proof? #university #teaching

Happy Independence Day Finland 🇫🇮💙

Whistleblowing channels will become mandatory for organizations with >49 employees from 17th December 2023 in Finnland. Often a tricky question is how reports should be handled that do not concern the list of reportable off fences in the finish whistleblowing act.

Thank you to Dr. Natallia Karniyevich from Bird & Bird Germany presenting on #cybersecurity with a focus on #nis2. She has worked with this area of law since joining Bird & Bird 7 years ago.
It is great that we can pull in experts from around the world (#slush2023 helps)!

That’s what I want to believe , but I did not find anything yet to support that view. Mobile phones have a lot of sensors; maybe one could argue that they they do not transmit “product data” = data generated by the use of a connected product? Needs further investigation

Has anyone considered whether laptops and mobile phones are connected products under the EU #data act? #askingforafriend
# data protection

IMO that cannot be intended, but then again we only have the defining in Article 2

Not quite sure why that type of language was included in the Data Act.
It sounds to me like if it is not changed it is not changed and if it is changed, it is changed. #drafting

Data act will be the next big thing for data and data protection lawyers!

Had a chance to write a guest article to The French Dispatch on Meta's "Pay or Consent" solution. This is also my very first article on data protection topic that has been published. 😃

Summary of the legal challenge

EU data protection law, new case

Summary of TikTok's legal challenge to a decision of the European Data Protection Board

Data protection news!

Ehdottomasti nastat -> no excuses!