Olivia rolls back the years to when the internet was reshaping laws and – would you believe it? – data protection wasn’t considered a sexy subject.
Read Olivia’s article “It was the dawn of e-commerce, and we were trying to apply offline law to the new online world” published in issue 363 of PC Pro, available to buy now. PC Pro website: pcpro.co.uk.
Olivia Whitcroft, principal of OBEP, 18 November 2024
The Data (Use and Access) Bill (DUA Bill) was introduced into the House of Lords on 23 October 2024. It revives some (but not all) of the proposed changes to data protection law under the former Conservative Government’s Data Protection and Digital Information Bill (DPDI Bill, which was changed for a few months to DPDI 2, before going back to DPDI).
What a fantastic PDP Conference 2024! I’ve thoroughly enjoyed attending PDP’s 23rd Annual Data Protection Compliance Conference, and presenting at one of their workshops on lawful basis for processing (with more to come from me this afternoon…).
On Day 1, a great range of hot topics were covered by brilliant speakers. Emily Keaney from the ICO gave us an update on the ICO’s activities, with a “how to, not don’t do” approach. Jenna Franklin took us through AI Governance, suggesting using the EU’s AI Act as good guidance for risk assessment. Later in the day, Tim Hickman took us through the territorial applicability of the EU AI Act, with the potential to reach deployments of AI around the world, due to some aggressive drafting on use of outputs in the EU!
While the term “lawful basis” may fail to excite, it’s a rule that’s making the likes of Meta think twice before using your data to train its AI.
Read Olivia’s article “Every different use of personal data bout someone needs a lawful basis” published in issue 361 of PC Pro, available to buy now. PC Pro website: pcpro.co.uk.
The UK Information Commissioner’s Office (ICO) has published its annual report, containing details of its activities and financial statements between April 2023 and March 2024. The Information Commissioner, John Edwards, comments on the diverse nature of his roles, from investigating a case of an email which didn't use bcc, to assessing the risks of AI and novel technologies!
The ICO continued its approach of giving reprimands for a lot of breaches, and only using more formal enforcement notices or fines for the more serious breaches, for example where people are a most risk of harm. The biggest fine issued was £12.7m against TikTok in April 2023. Two energy companies were also issued with a combined £250,000 fine for unlawful marketing calls.
If your company transfers any data to the US, or other countries, then you need to stay on top of the legal rules – or risk huge fines.
Read Olivia’s article “Even those who created the rules were finding it difficult to comply with them” published in issue 359 of PC Pro, available to buy now. PC Pro website: pcpro.co.uk.
Copyright and ownership of digital assets are even more complicated than they are for physical assets – such as an issue of PC Pro.
Read Olivia’s article “Is it possible to own digital assets? If not, what are you getting legally when you buy a digital item?” published in issue 357 of PC Pro, available to buy now. PC Pro website: pcpro.co.uk.
If you haven’t updated your privacy notice for a while, now is an excellent time – and if you’re doing it as a box-ticking exercise, you’re doing it wrong.
Read Olivia’s article “When someone asks me to prepare a privacy notice, I find it hard to meet their expectations” published in issue 355 of PC Pro, available to buy now. PC Pro website: pcpro.co.uk.
Where do Quantum Leap and the law meet? Right here in this article, as Olivia explains the legal ramifications of using AI.
Read Olivia’s article “There is debate over the extent to which the law addresses the risks arising from the use of AI” published in issue 353 of PC Pro, available to buy now. PC Pro website: pcpro.co.uk.