PrivacyDesigner’s Post

Today, the AI Act has been published in the Official Journal of the European Union meaning that the countdown starts now ⌛ If you are looking for a platform to manage AI Act's requirements, take a look at PrivacyDesigner Software. We have been busy implementing different AI Act requirements into our tool. 👉 Keep an up-to-date inventory of all your AI systems 👉 Visualize your AI use cases to make them more understandable, transparent and easier to manage 👉 Conduct risk and compliance assessments (including DPIAs) for AI systems as well as AI use cases and manage risks and tasks in the PrivacyDesigner Software 👉 Keep track of your compliance progress towards AI Act's requirements (and other frameworks such as the GDPR, ISO standards etc.)

We PrivacyDesigner took part in the 37th Conference of Privacy Laws&Business #PLB2024 in Cambridge, UK. Heikki Tolvanen was a panelist this year and will also be speaking next year the topic relating the the compliance of the requirements of AI Act. The level of expertice was amazing form supervisory authorities to the best known privacy professionals around the world 😍! See you there next summer! #PLB2024 #AI Act #GRPR

Swedish DPA IMY fines Avanza Bank AB 15 million SEK (around 1.3m€) for using Meta Pixel on its website without implementing proper technical and organizational measures, leading to unauthorized transfer of personal data, including personal IDs and financial information, to Meta (Facebook). IMY received a breach notification from Avanza Bank AB in 2021. The notification showed that personal data of 500k – 1 million data subjects was erroneously transferred to Facebook (now Meta). Among the data transferred were social security numbers, loan amounts and account number. From the investigation of the case IMY found that personal data of bank's customers and website visitors were transferred to Meta. The personal data transferred has included, among other things social security numbers and extensive financial information. The information, including detailed information about customers' finances, has in several cases been transmitted in plain text. IMY notes that the data subjects have legitimate expectations of a high degree of confidentiality and a robust protection against unauthorized access. The data transferred has been covered by statutory duty of confidentiality. The processing of personal data has taken place within the framework of the bank's core business, which entails even higher requirements for the level of protection. Link in the comments!

NOYB is asking the Austrian DPA to order Google to bring its processing operations into compliance with the GDPR, to stop the processing of data collected on the basis of invalid consent, and to inform the data recipients that they must stop processing this data. After years of growing criticism over invasive ad tracking, Google announced in September 2023 that it would phase out third-party cookies from its Chrome browser . Since then, users have been gradually tricked into enabling a supposed “ad privacy feature” that actually tracks people. While the so-called “Privacy Sandbox” is advertised as an improvement over extremely invasive third-party tracking, the tracking is now simply done within the browser by Google itself. Link in the comments! #Privacy #Tietosuoja #Consent #Tracking

PrivacyDesigner in Tampere this week attending Imagine the metaverse 2024 as Microsoft Partner! Heikki Tolvanen will speak how to assess the compliance of AI Act and GDPR risks from 14:45 to 15:05 both days at Microsoft Stage. Come to listen and say hello 😊 . #Imaginethemetaverse2024 #AiAct #GDPR

We're thrilled to announce that PrivacyDesigner has received a positive decision to enhance our internationalization capabilities! This support from the Centre for Economic Development, Transport and Environment and the Just transition fund (JTF) will enable us to further develop our PrivacyDesigner SaaS service for international markets. The project will be carried out from September 2023 to August 2025, aiming to significantly boost PrivacyDesigner's long-term competitiveness. Through this initiative, we will enhance our export readiness and tailor the PrivacyDesigner SaaS software to meet the demands of target markets with the help of technological advancements. The granted funding will have a substantial impact on the realization of this project. Stay tuned for more updates on our journey! 🚀

PrivacyDesigner osallistuu Kuntaliitto | Kommunförbundet (Association of Finnish Local and Regional Authorities) Digiviikolle! Olemme mukana keskiviikkona 5.6 puhumassa tietosuojalainsäädännön ja tekoälyasetuksen vaatimustenmukaisuuden arvioinnista. Tule kuulemaan Heikki Tolvanen puheenvuoro ja saat käytännön vinkkejä siitä, miten varmistat tietosuoja-asetuksen ja tekoälysääntelyn noudattamisen omassa organisaatiossa. Nähdään Digiviikolla! #digiviikko #tekoälyasetus #tietosuoja #vaatimustenmukaisuus

The Chinese state has hacked the Ministry of Defence, Sky News understands. MPs will be told on Tuesday of a massive data breach involving the Ministry of Defence, targeting service personnel. The government will not name the country involved, but Sky News understands this to be China. The Chinese state is to be accused of two or three attempts at hacking MoD employees - including personnel. The cyberattack was on a payroll system with current service personnel and some veterans. It is largely names and bank details that have been exposed. Tobias Ellwood, a Conservative MP and former soldier, told Sky News that China "was probably looking at the financially vulnerable with a view that they may be coerced in exchange for cash". Link in the comments!