Generative AI: Capabilities, Risks and Safeguards

Rapid advances in Generative AI (GenAI), which creates text, images, and media – drawing on the patterns and structure of input data to generate new data with similar characteristics – has seen its use grow over the past few years. Predictably, we are also witnessing how technological development is outpacing regulatory developments, exposing organisations to […]
The ICO’s Guidance on Workers Monitoring: Key Hints for Companies

On October 3, 2023, the Information Commissioner’s Office (ICO) adopted a guidance to assist employers in adhering to data protection laws while monitoring workers. The guidance applies to any form of monitoring (both systematic and occasional) of people who carry out work on behalf of an organisation, regardless of the nature of the contract between […]
Navigating Data Scraping Challenges: Protecting User Privacy in the Digital Age

On August 24, 2023, 12 data protection authorities members of the Global Privacy Alliance’s International Enforcement Cooperation Working Group, including the Information Commissioner’s Office, adopted a joint statement concerning data scraping. The joint statement primarily addresses the privacy risks associated with data scraping and also offers an overview of measures that organizations and individuals can […]
Italian Data Protection Authority (DPA) imposes fine on the use of publicly available personal data

Despite the lack of official guidance on the topic of processing publicly available personal data, some General Data Protection Regulation (GDPR) provisions apply to the processing of such data. In general, the GDPR sees publicly available data as ‘data that have not been obtained from the data subject’. Furthermore, Article 86 and Recital 154 GDPR […]
An Introduction to the ICO’s Guidance on Privacy-Enhancing Technologies

In June 2023, the UK Information Commissioner’s Office (ICO) published its guidance on enterprise privacy-enhancing technologies (PETs). Alongside it, the regulator has issued a call for organisations to adopt PETs within the next five years. Leaders will want to understand these technical, privacy-preserving solutions to capture the benefits of data collection, sharing and analysis in […]
Irelands Data Retention Bill (Communications (Retention of Data) Amendment Act 2022) and your privacy rights.

Background For the first time since 2011, Irish Legislation governing the retention of mobile phone data such as texts, call and location data is schedule to change. The Data Retention Bill (Communications (Retention of Data) Amendment Act 2022) will address the impact of recent EU case laws, including the Graham Dwyer murder conviction. The proposed […]
How to keep COVID-19 temperature checks privacy compliant

In order to protect staff, customers and visitors from exposure to COVID-19, many businesses and organisations are installing temperature checking systems to monitor individuals when on-site. It is important, however, to ensure that business owners fulfil their (new) public health management assistance in a manner which respects privacy, data protection and personal sensitivities. Maintaining a […]
Rights to privacy and data protection – Reiterating the basics and busting a few myths for managers

It has been a significant few weeks for data protection with the latest ruling from the European Court of Justice. After seven years of debate and legal action (Hannah Kuchler, “Max Schrems: the man who took on Facebook — and won”, Financial Times), Max Schrems’ position has gained legal recognition, which has highlighted the real […]
DPO for clinical trials: Protect participants’ data privacy throughout the clinical trial lifecycle

Clinical trials are research studies performed on people that are aimed at evaluating a medical, surgical or behavioural intervention. Clinical trials recruit participants whose personal and health data is analysed to determine whether a new treatment, like a drug or medical device, is safe and effective for widespread use. Clinical trials conducted in Europe must […]
What is it like to participate in a Witness Seminar in the time of COVID-19?

This article outlines the meaning and structure of a “witness seminar”, with a focus on the importance of privacy and data protection, in particular related to the technical solutions developed in response to the COVID-19 pandemic.