Privacy Transformation - Issue 239

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments.


PRIVACY

European Union squares the circle on the world’s first AI rulebook

The AI Act is a landmark bill to regulate Artificial Intelligence based on its capacity to cause harm. The file passed the finishing line of the legislative process as the European Commission, Council, and Parliament settled their differences in a so-called trilogue.

Irish Data Protection Commission ‘hugely frustrated’ at EU regulator over Meta demands

Ireland’s data watchdog has launched a stinging attack on Europe’s top privacy regulator, in a sign of rising tensions over the policing of tech giants headquartered in Dublin.

EU Commission seeks third way between ‘pay or consent’ in voluntary pledges

The EU’s consumer protection department presented draft pledging principles for the digital advertising industry as part of its initiative to phase out cookie banners that include the provision of a third, less intrusive alternative to the pay-or-consent model.

Credit scoring firms face curbs after landmark EU data protection ruling

Credit scoring companies operating in the European Union could be facing tighter curbs under the bloc’s privacy laws following a ruling issued by the Court of Justice (CJEU). The referral relates to complaints brought against the practices of a German credit scoring company, called Schufa, but could have wider significance for credit information agencies operating in the region where the General Data Protection Regulation applies.

Irish policymakers draw on report to implement forthcoming EU health data law

As the European Parliament adopted the proposal on Wednesday (13 December) to create a European Health Data Space (EHDS) to improve access to personal health data across the bloc, Ireland has high hopes for the results of its implementation.


ENFORCEMENT

ICO: ICO fines Ministry of Defence for Afghan evacuation data breach

The Information Commissioner’s Office has fined the Ministry of Defence £350,000 for disclosing personal information of people seeking relocation to the UK shortly after the Taliban took control of Afghanistan in 2021.


GUIDANCE & OPINIONS

ICO: Two new employment guidance pieces out for consultation

The UK Information Commissioner is producing an online resource with topic-specific guidance on employment practices and data protection. They will be releasing drafts of the different topic areas in stages and have begun with the following topics:


CONTRIBUTE
Have an interesting article, book, video, podcast or other resource that you would like to share with your fellow privacy practitioners? Please do drop me a note!