Privacy Transformation - Issue 241

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments.

PRIVACY

Key takeaways from the CJEU's recent automated decision-making rulings

On 7 Dec., the Court of Justice of the European Union issued its judgment in the SCHUFA case (case C-634/21). The CJEU ruled a credit reference agency engages in automated individual decision-making when it creates credit repayment probability scores as a result of automated processing and when lenders rely heavily on these scores to establish, implement or terminate contracts.

Job cuts, the rise of AI and record data fines: The year in Tech

We were just a few days into 2023 when it became clear that the tech job cuts that began in late 2022 would continue for months to come. Also continuing into the new year were record data fines against tech giants.

💡 Insights: Unprotected APIs: How software development teams can support data privacy compliance

The term API, or application programming interface, is a method where systems and applications communicate with each other by sending predetermined parameters in a request and receiving responses in a predetermined format. APIs can serve as integration layers and be used by different systems and solution providers to exchange information between them allowing companies to share and receive their data to external third-party developers, business partners and internal departments.

DATA BREACH

Hackers steal customer data from Europe’s largest parking app operator

Europe’s largest parking app operator has reported itself to information regulators in the EU and UK after hackers stole customer data. EasyPark Group, the owner of brands including RingGo and ParkMobile, said customer names, phone numbers, addresses, email addresses and parts of credit card numbers had been taken but said parking data had not been compromised in the cyber-attack.

ENFORCEMENT

noyb: GDPR complaint against X (Twitter) over illegal micro-targeting for chat control ads

noyb has filed a complaint against X (Twitter) for unlawfully using the political views and religious beliefs of its users for targeted advertising.

RESOURCES

NIST Initial Public Drafts:

• SP 1800-28, Data Confidentiality: Identifying and Protecting Assets Against Data Breaches
• SP 1800-29: Data Confidentiality: Detect, Respond to, and Recover from Data Breaches

CONTRIBUTE
Have an interesting article, book, video, podcast or other resource that you would like to share with your fellow privacy practitioners? Please do drop me a note!