⚠️📢 Le site cnil.fr est actuellement indisponible. Nos équipes techniques travaillent à son rétablissement. Merci de votre compréhension.

Data Act and GDPR!

AI SAFETY GOVERNANCE FRAMEWORK by China National Technical Committee 260 on Cybersecurity of SAC. See tc260.org.cn/upload/2024-09…

Schrems (Communication de données au grand public) Case C-446/21 Date of delivery 04/10/2024

Here's the new CNIL’s questionnaire: linkedin.com/posts/felicien… If it is established that a model has memorized personal data, under what conditions should the mere possession of the model be treated as a retention of personal data subject to the GDPR:

I cannot wait to read the draft Australian privacy reform bill!

The Albanese government has decided to do privacy reform in two tranches. The first bill, likely to go to caucus on Tuesday and be introduced to parliament on Thursday, would create a right to sue for serious privacy’s breaches & implement Labor’s promise to crack down on doxing.

Statement by the Privacy Commissioner welcoming the Federal Court of Appeal’s decision on Facebook: priv.gc.ca/en/opc-news/sp…

Statement by the Privacy Commissioner welcoming the Federal Court of Appeal’s decision on Facebook lnkd.in/e-aF9pkX

“I would allow the appeal with costs, declare that Facebook’s practices between 2013 and 2015 breached Principle 3 as set out in clause 4.3, Principle 7 as set out in in clause 4.7, and once in force, section 6.1 of PIPEDA. I would advise that the Court.”

🆕📢The EDPB will work together with the European Commission to clarify and give guidance on the interplay between #GDPR and #DMA 🛡️🇪🇺💻 ➡️Read more europa.eu/!jXNkWD

EDPB to work together with European Commission to develop guidance on interplay GDPR and DMA | European Data Protection Board edpb.europa.eu/news/news/2024…

The end of an era:

Today, the Commission is hosting the first official meeting of the Artificial Intelligence (AI) Board, following the entry into force of the AI Act on 1 August. digital-strategy.ec.europa.eu/en/news/artifi…

It was the responsibility of the Court to define an objective, reasonable expectation of meaningful consent. To decline to do so in the absence of subjective and expert evidence was an error.

"I add to this that many of Facebook’s privacy settings default to disclosure, and that this requires both an understanding on the part of the user as to the risks associated with these default settings and a positive step on the part of the user to vary their settings."

Big impact! "The only conclusion open to the Federal Court on the evidence was that Facebook failed to obtain meaningful consent from friends of users to disclose their data, and thus breached PIPEDA."