News

IT’S THE LAW (03/12/2024)

Singapore has issued guidelines for deterministic AI system use tying in with its Personal Data Protection Act (PDPA). The guidance, which is not legally binding, clarifies how the PDPA will apply when organizations use personal data to train AI.

More News

Next Article

EU Commission must remediate Microsoft 365 problems & other privacy rule violation

March 12, 2024

The European Data Protection Supervisor (EDPS), which oversees EU institutional privacy compliance, found the EU Commission in violation of GDPR through its use of Microsoft 365. This includes neglecting to implement adequate safeguards for data transfer and failing to specify types and purposes for personal data collection. Corrective measures will include suspension of data flows to Microsoft and its affiliates in non-EU/EEA countries that lack adequacy decisions, and aligning data processing with regulations.

CDPI Privacy Newsletter
Previous Article

Intentional or not, women’s health & wellness data not well protected

March 12, 2024

A four-year study of cybersecurity, privacy, trust and bias issues in femtech, the data related to women’s health, wellness and sexuality, found sensitive information is often not adequately safeguarded and is sometimes intentionally leaked. Multi-disciplinary research teams based at Royal Holloway, Newcastle University, the University of London and ETH Zurich focused on laws in the UK, EU, and Switzerland. They found women’s health protection underserved in large part because many of the devices and apps used in femtech are not considered “medical,” so fall outside protective guidelines.

CDPI Privacy Newsletter