Nos derniers articles

"The EU’s GDPR and proposed AI Act tend toward a sustainable environment of AI systems. However, they are still too lenient and the sanction in case of non-conformity with the Regulation is a monetary sanction, not a prohibition. This paper proposes a pre-approval model in which some AI developers, before launching their systems into the market, must perform a preliminary risk assessment of their technology followed by a self-certification."

"This article examines the two contrasting approaches for determining identifiability that are prevalent today: (i) the risk-based approach and (ii) the strict approach in the Article 29 Working Party’s Opinion on Anonymization Techniques (WP 216). Through two case studies, we illustrate the challenges encountered when trying to anonymize unstructured datasets. We show that, while the risk-based approach offers a more nuanced test consistent with the purposes of the GDPR, the strict approach of WP 216 makes anonymization of unstructured data virtually impossible as long as the original data continues to exist."

" ... it is ... possible to grasp the fil rouge behind the GDPR, the DSA and the AI Act as they express a common constitutional aspiration and direction."

"The analysis discusses the overall negotiations process underpinning Brexit and examines the key resulting regimes, including the Trade and Cooperation Agreement (TCA) and the EU-UK data adequacy agreements granted under the GDPR and the LED."

"Insurers are faced with a lack of consumer trust in whether premiums are established in an objective and fair manner and that claims are adequately dealt with and paid without delay. In trying to balance between consumers interests and business interests there is a risk that insurers will go too far using personal data and increasingly automated decision-making crossing the line between what is still legal and ethical."

"Contributing to the discussion on the interpretation and use of the right to data portability this paper looks specifically at the role for Article 20 of the General Data Protection Directive to help insurers gain access to personal data they would otherwise not have access to. As proposed in this paper there is potential for data portability to play a role in providing for access to vehicle data... "

"The discussion includes both de jure and de facto effects, including China’s explicit laws, recent enforcement actions in the European Union, and proposed privacy legislation in India. The focus is on effects on cybersecurity defense, rather than offensive cyber measures"

"By introducing the method of “Anonymity Assessment,” we propose an interdisciplinary approach to classifying anonymity and measuring the degree of pseudo-anonymization of a given data set in a legal and technical sense. "

"This article scrutinises the potential of the existing regulatory apparatus in Union law to tackle the social, technical, and legal challenges inherent in deploying automated systems in high-risk settings such as the workplace, with a view to setting out key lessons for the proposed EU Artificial Intelligence Act."

"This article examines… a user-held data model. This approach takes advantage of ‘personal data clouds’ that allows data subjects to store their data locally and in a more decentralised manner, thus decreasing the need for cross-border transfers and offering end-users the possibility of greater control over their data."