CDP Institute

Removing a lot of drama from the highly fraught question of identifying gender identity, the EU Court of Justice ruled a person can go by their lived identity rather than being required to submit medical records of proof. What a concept!! This came after Hungary would not allow an Iranian asylum seeker to specify current gender identity as opposed to that at birth.

Ignoring pleas of civil rights advocates, US politicians and media, the UK High Court is conducting its case demanding back-door access to Apple user data in secret. Citing privacy concerns for doing so, the High Court is seeking to gain future access to Apple data when it believes it can benefit UK law enforcement. This violates Apple’s policy of not allowing access to private information.

Watch for the EU Data Act this fall. The EU law governing distribution, sharing and mobility of data that’s collected by networked products and services comes into effect in September. Among its requirements are that users must have direct access to data where feasible, that they can request having data shared with third parties, and that they be allowed to switch between data processors.

There are lots of reasons to be concerned for kid safety these days, not least of which are increased access to guns, online threats and a growing mental health crisis. However, surreptitiously surveilling them is both unlawful (at least so far) and sets the groundwork for mistrust. Yet, the Education Reporting Collaborative, a coalition of eight newsrooms including the Associated Press, Dallas Morning News and Seattle Times, found AI tools from Gaggle Safety Management and other school safety tech vendors capture student laptop entries and allow access to anyone with... Read More >

This ensures valuable time will be spent on that rather than ensuring enforcement of the Health Insurance Portability and Accountability Act (HIPAA) and investigating data breaches.

A report by Monash University shows how playing up cybersecurity measures while downplaying breaches and lax data privacy is a strategy some organizations use to dupe customers into a false sense of security.