(2384,1,'2022-05-25 21:12:33','2022-05-25 21:12:33','<!-- wp:paragraph -->\n<p>I have been watching legal professionals disseminating personal data around the world. Feel my pain ? Why it especially matters? Because they are the ones advising others. They are the role model.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As the GDPR has now celebrating its 6th year and 4 years of enforcement, here is an exhaustive practical case law analysis on the importance of taking appropriate security measures and how things can go wrong.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>If you don\'t have time to read this in full detail, here are the questions at sake : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>can legal professionals, bound by confidentiality, handling sensitive data, afford to miss appropriate measures of security as required by the article 32 GDPR, starting by encryption? CNIL is not chocked by years of exchange of data via simple attachment.</li><li>Is this OK for these professionnels to use third party processors without checking their GDPR compliance and security measures? Especially, is free WeTransfer appropriate for legals to exchange documents? What about art 28 GDPR ? CNIL is OK with that.</li><li>Can these professionnels export data outside the EU without any security measure? CNIL agrees that exchanging multiple data during a long period of over a decade with a client based in China using his professional email, admitting his employer access his devices, is OK as there would be no transfer in sense of GDPR.</li><li>When victim of phishing, how to demonstrate who leak what? what are the rights of the victims? The French CNIL does not care about the victim.</li><li>Data breach has administrative sanctions given by the supervisory authorities, criminal sanctions have been introduced in national legislations,  and Article 82 has introduced civil liability for non-material damages : loss of control and distress (to be developed in a future article). This could be the only hope.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>I – Appropriate measures of security and data breach</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I have been warning about the need for encryption when handling sensitive data. I have contacted the law society who have confirmed my requests as legitimate. Encryption is essential and WeTransfer is not an option. More secured tools are available; they are dangerously ignored. French Data Protection Authority <a href=\"https://www.cnil.fr/fr/securite-securiser-les-echanges-avec-dautres-organismes\">CNIL has published recommendations</a> not to use email to exchange personal data. <a href=\"https://www.ssi.gouv.fr/uploads/2017/01/guide_hygiene_informatique_anssi.pdf\">ANSSI</a> has published several warnings concerning the risks related to email exchanges.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It was first on Marsh 2021 that I received two separate emails, in two of my email addresses I had used with one of these French legals, a notaire (some kind of solicitor/notary). The emails as shown below, <strong>reproduced previous exchanges</strong> I had with the professional. It appears as a chain of communication, with a short sentence inviting to click on the attachment. Same kind of operations were repeated in June 2021.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":2367,\"width\":553,\"height\":572,\"sizeSlug\":\"large\",\"linkDestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large is-resized\"><img src=\"https://www.datarainbow.eu/wp-content/uploads/2022/05/Phisihing-Watin-1-1-989x1024.png\" alt=\"\" class=\"wp-image-2367\" width=\"553\" height=\"572\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:image {\"id\":2369,\"sizeSlug\":\"large\",\"linkDestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://www.datarainbow.eu/wp-content/uploads/2022/05/Phishing-Watin-3-780x1024.png\" alt=\"\" class=\"wp-image-2369\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:image {\"id\":2370,\"sizeSlug\":\"large\",\"linkDestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://www.datarainbow.eu/wp-content/uploads/2022/05/Phishing-Watin-4-797x1024.png\" alt=\"\" class=\"wp-image-2370\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:image {\"id\":2383,\"sizeSlug\":\"large\",\"linkDestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://www.datarainbow.eu/wp-content/uploads/2022/05/Phishing-Watin-2-1-839x1024.png\" alt=\"\" class=\"wp-image-2383\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><strong><u>What Does that mean?</u></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list {\"ordered\":true,\"type\":\"1\"} -->\n<ol type=\"1\"><li>Someone has been able to access to previous emails to this professional ;</li><li>The mails were non-encrypted, despite my request to secure our exchanges ;</li><li>These emails have fallen in the hands of cyber-criminals ;</li><li>The cybercriminals have been to reproduce previous exchanges with the professional, including highly sensitive documents ;</li><li>This to me is a data breach that should have been notified with 72 hours to the CNIL and without undue delay to data subject concerned if a serious risk was detected. I can’t see how this was not the case when a IBAN numbers, ID cards etc were exposed ;</li><li>The phishing emails received contained a malicious zip file that has been analysed by an IT expert ;</li><li>The attack is very similar to what has been described as a <a href=\"https://tekdeeps.com/trojan-qbot-steals-e-mails-and-misuses-them-for-further-attacks-it-can-also-attack-in-the-czech-republic/\">Qbot attack</a> or <a href=\"https://www.gdata.fr/news/2021/05/36849-g-data-rapport-sur-les-menaces-qbot-remplace-emotet\">Emotet</a>. Several big companies such as <a href=\"https://www.lemagit.fr/actualites/252502320/Quel-est-le-point-commun-entre-Fujifilm-JPS-et-un-office-notarial-francais-Qbot\">Ikea, Fujifilm or JPS</a> have been victim of these email chain attacks designed to <a href=\"https://www.lemondeinformatique.fr/actualites/lire-le-malware-financier-qbot-reprend-du-service-74527.html\">extract financial data</a>.</li><li>Clicking on the <a href=\"https://blog.nviso.eu/2020/09/01/epic-manchego-atypical-maldoc-delivery-brings-flurry-of-infostealers/\">zip attachment</a> could infect the computer network to steal further financial information ;</li><li>The email appears on a mobile device only showing the name of the professional to gain the recipient’s trust. It’s only by looking more closely that a different email address appears. Therefore, it becomes relatively easy to be trapped ;</li><li>If I have received these 4 emails, there is a big chance I would not the only one ;</li><li>Actually, this could be a larger scale attack of the platform used by notaires. <a href=\"https://www.lemagit.fr/actualites/252502320/Quel-est-le-point-commun-entre-Fujifilm-JPS-et-un-office-notarial-francais-Qbot\">Two other cases have been brought to my attention</a>, one of them being the very respected lawyer representing me.</li></ol>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>After I received the first emails, I sent several emails to the notaire on a different email address to check if they knew anything. I finally called them to understand what had happened. I was told by the big boss that he had no idea, had no care and probably have they been hacked just as it happens to many….</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I then turned into the French Cyber Gendarmerie online, they told me it was a spam. But how a simple spam could reproduce my previous emails ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Anxious about the data the cybercriminals had access to, I then send a request of information to the notaire trying to understand how they secured my data. They decided they needed an extra two months without justifying it. When I asked if they had a Data Protection Officer, they remembered than indeed all ‘notaires’ have an external mutualist DPO. Only in June did they notified the CNIL (data breach have to be notified within 72 hours to the CNIL and without undue delay to data subjects. My documents contained other people’s data breached as well. To my knowledge no data subject has been notified). From a document communicated by their DPO, last year the CNIL has requested some further information from them. So maybe after all this was not a simple Spam.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>With the very slow progress with the notaire, I contacted a lawyer in Paris, Maître François-René Lebatard, who urged me to file a criminal complaint before all evidence would vanish. That was around June last year. The complaint is still under investigation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Meanwhile, I contacted the CNIL that accepted to investigate my complaint. Here is their conclusion :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>«&nbsp;Following the intervention of the CNIL, the data protection officer (DPO) of the firm, who was reminded of the obligations in force with regard to requests for access rights and the security of personal data, indicated:</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>…</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>They have, following the letter from Ms xxx of 20 March 2021 indicating that she had received fraudulent emails, questioned their IT service provider asking for a detailed expert report, investigations from which it appears that no data breach is proven, that the fraudulent emails received by Ms xxx took over emails which she was the sender, that they did not concern any email that the office would have sent to Ms xxx as a recipient and that no other office\'s client had reported having received fraudulent emails.”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>No further explanation on where these phishing emails came from. Case closed.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>When back to our business with the notaire, I had to send him a legal document. I used Protonmail encryption. Again, he expected me to send it by email simple attachment. I had to remind him his DPO had mentioned they had a secure mean of document exchange. So even after the incident, was he still convinced <a href=\"https://www.americanbar.org/groups/business_law/publications/blt/2016/06/07_borden/\">exchanging data by simple email attachment ‘as usual’ is the way to go.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Now lets talk about <strong>the law firm involved in this case</strong>. A law firm advertising their international businesses. They exchangemassive amounts of documents by email attachment before discovering the joy of the free WeTransfer. Few law firms in Paris use WeTransfer because it’s free and convenient. I have tried my best to bring to their attention the risks paused by this tool. So, lets look deeper into that free WeTransfer.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><strong><u>What’s wrong with the use of a free WeTransfer for a law firm ?</u></strong></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://teamdrive.com/en/how-secure-is-wetransfer/\">WeTransfer</a> is a platform where users can upload their documents, receive a link with a password to send to their recipients.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list {\"ordered\":true,\"type\":\"1\"} -->\n<ol type=\"1\"><li>WeTransfer has <a href=\"https://www.bleepingcomputer.com/news/security/phishing-campaign-bypasses-email-gateways-via-wetransfer-alerts/\">been attacked several times</a> <a href=\"https://wetransfer.com/corporate/178267-update-security-notice-june-26th\">in the past</a>. <a href=\"https://www.hackread.com/wetransfer-phishing-attack-spoofs-steal-credential/\">Links have been intercepted</a> or <a href=\"https://threatpost.com/popular-file-sharing-service-wetransfer-used-in-malicious-spam-campaigns/146671/\">used in malicious spam</a> ; <a href=\"https://wetransfer.pr.co/178267-security-notice\" target=\"_blank\" rel=\"noreferrer noopener\">According to WeTransfer</a>, on June 16 and 17, file transfer emails were sent to unintended email addresses</li></ol>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>“<em>We have learned that a transfer you sent or received was also delivered to some people it was not meant to go to. Our records show that those files have been accessed, but almost certainly by the intended recipient. Nevertheless, as a precaution we blocked the link to prevent further downloads,”</em>&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a href=\"https://www.bleepingcomputer.com/news/security/phishing-campaign-bypasses-email-gateways-via-wetransfer-alerts/\">A phishing campaign</a> observed by security researchers at the Cofense&nbsp;Phishing Defense Center targeting a wide range of high profile entities from industries such as media and banking was detected in july: <em>“using WeTransfer&nbsp;notifications as surrogates for the run-of-the-mill malicious URLs usually employed in these type of attacks&nbsp;was recently detected while successfully bypassing email gateways developed by Microsoft, Proofpoint, and Symantec.”</em></li><li>Again in August 2021, it is reported ‘<a href=\"https://www.hackread.com/wetransfer-phishing-attack-spoofs-steal-credential/\">New WeTransfer phishing attack spoofs file-sharing to steal credential</a>’</li><li>&nbsp;<a href=\"https://www.pearltrees.com/t/data-in-law-firms/wetransfer/id41633223/item366308782\">Free WeTransfer</a> does not give the <a href=\"https://wetransfer.zendesk.com/hc/en-us/articles/360000905623-GDPR-Requesting-a-Data-Processing-Agreement\">option of a Data Processing Agreement (DPA)</a> required for any data processor used as by <a href=\"https://ukgdpr.fieldfisher.com/chapter-4/article-28-gdpr/\">Article 28 GDPR</a> ; <a href=\"https://ukgdpr.fieldfisher.com/chapter-4/article-28-gdpr/\">Art 28-3 states</a> : “<em>Processing by a processor shall be governed by a contract or other legal act under domestic law, that is binding on the processor with regard to the controller and that sets out the subject-matter and duration of the processing, the nature and purpose of the processing, the type of personal data and categories of data subjects and the obligations and rights of the controller.</em>&nbsp;“</li><li>Data at rest is not encrypted and can be accessed ‘for technical purpose’ ;</li><li>The balance of proportionality and obligations of <a href=\"https://ukgdpr.fieldfisher.com/chapter-4/article-32-gdpr/\">article 32 GDPR</a> - combined with <a href=\"https://ukgdpr.fieldfisher.com/chapter-4/article-24-gdpr/\">Article 24</a> <a href=\"https://ukgdpr.fieldfisher.com/chapter-4/article-25-gdpr/\">and 25</a>, privacy by design - require to take account of the sensitivity of the data, balanced with the state of the art and the cost of the implementation, to take appropriate security measures, starting by encryption as reminded to the<a href=\"https://ico.org.uk/action-weve-taken/enforcement/tuckers-solicitors-llp-mpn/\"> law firm</a> <a href=\"https://ico.org.uk/action-weve-taken/enforcement/tuckers-solicitors-llp-mpn/\">Tuckers LLP fined by the UK ICO</a> or by the <a href=\"https://gdprhub.eu/index.php?title=DPC_(Ireland)_-_DPC_Case_Reference:_IN-19-9-5&amp;section=6\">Irish DPC fining Bank Of I</a>reland ; [the UK ICO referred to the “<em>state of the art</em>\", as ‘<em>relevant industry standards of good practice including the ISO27000 series, the National Institutes of Standards and Technology (\"NIST\"), the various guidance from the ICO itself, the National Cyber Security Centre (\"NCSC\"), the Solicitors Regulatory Authority (\"SRA\"), Lexcel and \'NCSC Cyber Essentials\'.</em><em> </em>‘</li><li>Recital 83 on the balance of proportionality&nbsp;:</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>“<em>In order to maintain security and to prevent processing in infringement of this Regulation, the controller or processor should evaluate the risks inherent in the processing <strong>and implement measures to mitigate those risks</strong>, <strong>such as encryption.</strong>&nbsp;Those measures should ensure an <strong>appropriate level of security</strong>, including <strong>confidentiality</strong>, taking into account the <strong>state of the art</strong> and the <strong>costs of implementation </strong>in relation to the <strong>risks</strong> and the <strong>nature of the personal data</strong> to be protected.&nbsp;3In assessing data security risk, consideration should be given to the risks that are presented by personal data processing, such as accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed which may in particular lead to physical, material or non-material damage.”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>It happens that the French law society (CNB) that I have contacted has informed me of the existence of a secured platform lawyers can use for the transmission of their documents. Therefore no excuse to go to an unreliable free third party ;</li><li>Additionally, <a href=\"https://aws.amazon.com/solutions/case-studies/wetransfer/\">WeTransfer uses AWS servers</a> to store data, which is not without consequences with regard to the prohibition of data transfers to the US following the invalidation of the Safe Harbour then Privacy Shield based on the well-known ECJ decision in <a href=\"https://www.datarainbow.eu/schrems-ii-invalidation-of-the-privacy-shield-by-the-ecj/\">Schrems-II.</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>indisputable practicality</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I have to say, the insistence of the law firm to use WeTransfer was not innocent. They had been warned their WeTransfer links would not be touched. Their insistence to refuse more secure options was not innocent and certainly part of their dirty strategy. They have been trying to pretend to communicate evidence that does not exist. Fortunately, another party took care to transfer their WeTransfer linked documents. The document listed was not there. They have yet not reacted on the missing documents requests several months later.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The same way have they ignored to respond to the requests concerning their appropriate security measures hiding behind attorney/client privilege. They were not asked to reveal their communications with their client.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It happens that their client who has initiated the various legal proceedings in France is based in China and to my knowledge, he exclusively uses his professional email address. He has even warned about his employer accessing his personal devices for inspection : ... “<em>Unfortunately my personal computer has been confiscated by xxx [the employer is a major communication provider with close tights with the government] for security reasons so can’t access personal mail till Monday. Because I used it for work in xxxx they have to take everything out of it including Windows 7 ...”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing this abusive resistance, I had to turn into the CNIL. The CNIL requested the law firm to respond to my request. It was eventually clarified they used the free version of WeTransfer with no DPA. At least, they finally discovered they could use the secured CNB platform at their disposition. However, the password, a 6 single digit figures, was sent to all parties - including the notaire above –immediately following the link, using same channels. I personally find it hard to believe they could be that dumb. (I don’t think the CNB’s platform should allow such weak passwords. <a href=\"https://autoriteitpersoonsgegevens.nl/en/news/dutch-dpa-fines-transavia-poor-personal-data-security\">Dutch DPA has fined Transavia for poor personal data security allowing weak passwords</a> ; <a href=\"https://gdprhub.eu/index.php?title=CNIL_(France)_-_D%C3%A9lib%C3%A9ration_SAN-2021-020_du_28_d%C3%A9cembre_2021\">French CNIL has been itself rather strict in their security requirements from Slimpay fined 180.000 €. </a>)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Password strenght was highlited by ANSSI : «&nbsp;the length and complexity of a password remain basic criteria for assessing its strength.” The need for a strong password is crucial to ensure the security and confidentiality.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.cnil.fr/sites/default/files/atoms/files/recommandation_passwords_en.pdf\">CNIL’s recommendations</a> : “<em>For the sake of clarity, the Restricted Committee notes that in order to ensure a sufficient level of security and satisfy the password strength requirements, when authentication relies solely on an identifier and password, the CNIL recommends, in its Decision No. 2017-012 of 19 January 2017, that the password have at least twelve characters - containing at least one upper-case letter, one lower-case letter, one number and one special character - or at least eight characters - containing three of these four characters - if it is accompanied by an additional measure such as, for example, the timing of access to the account after several failures (temporary suspension of access, the duration of which increases as attempts are made), setting up a mechanism to guard against automated and multiple attempts (e.g. a “captcha”) and/or locking the account after several failed login attempts. </em><em>“ in CNIL SAN 2022-022&nbsp;».</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list {\"ordered\":true,\"type\":\"1\"} -->\n<ol type=\"1\"><li><a href=\"https://www.cnb.avocat.fr/fr/actualites/rgpd-une-faq-pour-comprendre-lessentiel-en-quelques-minutes\">CNB’s recommendations</a>&nbsp;: “<em>Toutes les données envoyées par courriel ou transmises au moyen d’outils d’hébergement en ligne (Cloud) sont par conséquent vulnérables. Il s’agit donc de procéder à leur chiffrement systématique avant de les adresser à un correspondant ou de les hébergerLa transmission du secret (mot de passe, clé, etc.) permettant alors de déchiffrer les données, si elle est nécessaire, doit être effectuée via un canal de confiance ou, à défaut, un canal distinct du canal de transmission des données. Ainsi, si les données chiffrées sont transmises par courriel, une remise en main propre du mot de passe ou, à défaut, par téléphone doit être privilégiée.</em>&nbsp;:</li><li><em><a href=\"“https:/www.ssi.gouv.fr/uploads/2017/01/guide_hygiene_informatique_anssi.pdf\">ANSSI Guide de l’ hygiène informatique</a></em></li></ol>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>In their letter they admited exchanging regularly with their client in China. This concerns massive amount of highly personal data for more than a decade, with no appropriate security measure. Their justifications? Well, China has voted the data protection regulation PIPL, so all is good !</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>They admit having been non-compliant for years before recently discovering the platform they had refused to use when first suggested.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Again, this month, I received a fishing email from that law firm using a similar technic as shown below.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":2372,\"sizeSlug\":\"large\",\"linkDestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://www.datarainbow.eu/wp-content/uploads/2022/05/Phishing_CBBC_Anonymised_08032022-1-1024x862.png\" alt=\"\" class=\"wp-image-2372\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Previously, in December 2020 I had received another suspicious email from that same law firm they never clarified if it came from them or not.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":2373,\"sizeSlug\":\"large\",\"linkDestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img src=\"https://www.datarainbow.eu/wp-content/uploads/2022/05/Spam-CBBC-IBP-18122020-1-808x1024.png\" alt=\"\" class=\"wp-image-2373\"/></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>CNIL closed the case satisfied by these arguments without looking at :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>the question of long years of data transfers without any appropriate security measure ;</li><li>the use of the free version of WeTransfer without DPA art 28 while they could at least afford the professional version offering better guaranties;</li><li>use of the professional email address of the client and access by his employer</li><li>CNIL accepted there has not been a transfer as the receiver is an individual to whom GDPR does not apply.</li><li>resistance to reply to my requests, The CNIL did not care that the law firm rejected my DSAR for many years.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Here is a translation of CNIL’s decision - emphasises by me</strong>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>Firstly, with regard to your difficulties relating to the exercise of the right of access to your personal data, XXXX, when questioned by the CNIL, indicated that this information was covered by professional secrecy. I confirm in this regard that, in accordance with the provisions of Article 23 of the General Data Protection Regulation (GDPR), the French legislator has, in Article 66-5 of Law No 71-1130 of 31 December 1971 reforming certain judicial and legal professions, provided for a limitation on the right of access. Under the above-mentioned article: \"In all matters, whether in the field of counsel or in that of defence, consultations sent by a lawyer to his client or intended for him, correspondence exchanged between the client and his lawyer, between the lawyer and his colleagues with the exception for the latter of those bearing the mention \"official\", the interview notes and, more generally, all documents in the file are covered by professional secrecy. ». [I don’t think I have ever questioned the confidentiality of their correspondences with their client]</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Secondly, with regard to the supervision of the transfers of your data made by XXXX, in particular to China where the firm\'s client resides to whom, according to your assertions [XXXX has XXXX clearly admitted doing so], your data would be sent, XXXX, questioned by the CNIL, indicates that there is no transfer strictly speaking.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>I confirm in this regard that it follows from the ongoing discussions at the level of the European Data Protection Board (EDPB) that a transfer exists only if the personal data are transmitted to an importer located in a third country. However, since the client of the firm to which you believe your data is transferred cannot be qualified as a controller, joint controller or processor, the transmission operation cannot be qualified as a transfer of personal data outside the European Union.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Thirdly, as regards the security measures implemented by XXXX to guarantee the integrity and confidentiality of your data, that firm has on the one hand specified the security measures deployed in the context of the use of the \"WeTransfer\" tool and on the other hand indicated that it now uses the e-Sharing platform, developed by the National Council of Bars, whose technical characteristics as described in the firm\'s response appear to meet the security obligations provided for in Article 5.1-f) of the GDPR. [Last WeTransfer link sent to me and other parties was last year. Before that for many years they exchanged via email attachment. They recognised I have been asking them – bothered them – to secure these exchanges due to highly sensitive data involved]</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Regarding the facts alleged in your message of May 10, 2022 according to which the XXXX firm recently sent you the password through the same channel (email) as that used to send the link to the platform, and that this password contains only 6 characters, XXXXX was reminded of the elementary precautions recalled by the CNIL on these points.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>In the light of these elements, I inform you to proceed to the closure of your complaint.&nbsp;»</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> Surprisingly, neither the law firm, nor the notaire care about the fraudulent use of their email addresses or name !</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Although they admitted “<em>Ms. xxx obviously benefits from the right to ask the data controller for access to personal data, the rectification or erasure thereof, or a limitation of the processing relating to the person concerned, as well as the right to object to processing and the right to data portability. These rights are however limited by the very purpose of the processing of personal data, namely the recognition, exercise or defense of legal rights (Articles 16, 17, 18 and 20 of the GDPR).”</em><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The law firm pretended holding data indirectly collected. However, they forget that some of the documents have been directly collected to comply with the principle of ‘<em>contradictoire</em>’ or adversarial principal.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>They pretend they are under no obligation to respond to my DSAR as I would already have knowledge of the information.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>- </strong>Where personal data is not collected from the data subject, any available information as to its source :they argue this information is also covered by professional secrecy. Therefore, they would not be able to reveal all of their sources [expect use of private investigators]</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“Under these conditions, if Ms. xxx actually wished to request such a copy, she is asked to specify the data or the processing operations to which her request relates, as Cabinet xxx cannot decently gather all of this information in just one months as required by the GDPR. [Did they requested an extended delay?]</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Their justification on the use of WeTransfer is rather enlightening:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Indeed, WeTransfer has indisputable practicality –</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>They add “<em>If the firm was able to effectively use this tool to transmit documents, during a well-defined and now over period, to Ms. xxx\'s lawyer, to the notary, as well as to Ms. Xxx herself, it is recalled that the processing carried out here mainly concerned personal data relating to our client who has expressly consented to the use of this medium and has requested that it be use</em>.” This is totally untrue. A legal case obviously involves exchange of personal data concerning various parties. How did CNIL not reacted to that is a mystery.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>They have recognised using free WeTransfer in several occasions when they could have easily use alternative secure tools, ognoing my requests and the high sensitivity of the data: On February 3 and 20, 2020, October 14, 2020, January 14 and 22, 2021, January 29, 2021, December 9, 2021 and January 14, 2022.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>They don’t despute my ‘<strong><em>numerous inquiries</em></strong><em> about WeTransfer’</em>. It had to come to the CNIL’s attention for them to make ‘<em>the necessary changes in order to comply with the GDPR and no longer use this service</em>”.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>II - On the question of regular long-term transfers to CHINA</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The law firm is based in France. The litigation is initiated in France based on the French nationality of their client. The client is based in China. However, he travels around the world including in Europe where some of the exchanges have occurred and while in Europe, no doubt GDPR applied to these transfers. Data transfers via China where the email servers of the employer are located.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The law firm collect personal data from their client, from me directly in respect with the principal of adversarial, from the notaire, and I suspect from their communications, from private investigators. These documents are then forwarded to their client for observation. Then sent back to them. These will be used and reproduced to draft the court documents again exchanged between all parties including the client. Therefore, the law firm is data controller (see UK ICO cases of Tuckered LLP or Smith… ). Would the client be as well a data controller of the part of data he gathers, stores and processed? Possibly. In two cases, ECJ has considered individual as data controller : in the Facebook fan page admin case and in Jeowah’s Witnesses. [in <a href=\"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62017CJ0040\">ECJ Fashion ID</a> “(<em>A)s the Advocate General noted, [...-] it appears that a natural or legal person may be a controller, within the meaning of Article 2(d) of Directive 95/46, jointly with others only in respect of operations involving the processing of personal data for which it determines jointly the purposes and means. By contrast, [...] that natural or legal person cannot be considered to be a controller, within the meaning of that provision, in the context of operations that precede or are subsequent in the overall chain of processing for which that person does not determine either the purposes or the means</em>”.<br>In <a href=\"https://gdprhub.eu/index.php?title=CJEU_-_C%E2%80%9125/17_-_Tietosuojavaltuutettu\">Jehovah’s witnesses, C-25/17</a>, the CJEU considered that a religious community of Jehovah’s witnesses acted as a controller, jointly with its individual members.]</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The law firm argued that ‘<em>The “transfers” in question are in no way regular and permanent but rather punctual and occasional, as much as respect for the adversarial process has made it necessary to communicate the documents in the file. Moreover, strictly speaking, there is no transfer outside the European Union at the initiative of xxx since <strong>it is the recipient of the data who imports the data</strong> because he is domiciled outside the European Union. And it should be remembered that the GDPR does not apply to natural persons not residing in the European Union.”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Can we still talk<em> about ‘ponctual and occasional’</em> for something that has last 11 years ?! Massive amount of highly personal sensitive data have been exchanged refusing the special request to use encryption rejected.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Their argument is that the transfers almost exclusively concerned data obtained indirectly through the lawyer., the notary or the client. This is not exact as some of the data was directly collected.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Knowing that several litigations initiated since 2011 involving different jurisdictions in France, it’s difficult to admit these heavy volume of data exchanges were ‘<em>ponctual</em>’ (3 court of appeals, 4 other jurisdictions, several notaires, huissiers, or Avoués were involved each time data has been sent with no care)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In any case, their communications between the law firm and the notaire are not confidential Article 14 paragraph 5, d). – in contrary I should have been in copy on all of them</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><strong>Concerning Chinese employers practice, here is </strong><a href=\"https://www.politico.eu/article/huawei-germany-court-case-privacy/\">report by Politico</a> :</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><em>“A case filed by one of Huawei’s former managers at its European headquarters in Düsseldorf takes aim at another pitfall for the company: Its respect of European privacy rules.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Specifically, it opens up questions about whether Huawei is putting data at risk of slipping into the hands of Chinese state surveillance and intelligence operations. It also raises questions about whether Europe will sharpen its tone with China on sensitive data privacy matters — after years of focusing its ire on Silicon Valley’s giants and U.S. state surveillance.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>A judge ruled March 5 that Huawei was in breach of European privacy law when it failed to comply with the former manager’s request to view the data the company had kept on him.” &nbsp;</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><strong>Ultimately, non-compliance with GDPR is <a href=\"https://www.cnil.fr/fr/les-sanctions-penales\">a criminal offense</a></strong><strong> :</strong></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Art. 226-16</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The fact, including negligence, of carrying out or having carried out processing of personal data without having complied with the formalities prior to their implementation provided for by law is punishable by five years\' imprisonment and a fine of 300,000 euros.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Le fait, y compris par négligence, de procéder ou de faire procéder à des traitements de données à caractère personnel sans qu\'aient été respectées les formalités préalables à leur mise en oeuvre prévues par la loi est puni de cinq ans d\'emprisonnement et de 300 000 euros d\'amende.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Art. 226-17</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The fact of carrying out or having carried out a processing of personal data without implementing the measures prescribed in Articles 24, 25, 30 and 32 of Regulation (EU) 2016/679 of 27 April 2016 or in 6 ° of Article 4 and Articles 99 to 101 of Law No 78-17 of 6 January 1978 cited above is punishable by five years\' imprisonment and a fine of 300,000 euros.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Le fait de procéder ou de faire procéder à un traitement de données à caractère personnel sans mettre en oeuvre les mesures prescrites aux articles 24, 25, 30 et 32 du règlement (UE) 2016/679 du 27 avril 2016 précité ou au 6° de l\'article 4 et aux articles 99 à 101 de la loi n° 78-17 du 6 janvier 1978 précitée est puni de cinq ans d\'emprisonnement et de 300 000 euros d\'amende.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><u>Previous related CNIL’s decisions </u></strong><strong><u></u></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><u>For reference, here are previous similar cases involving the questions of security measures</u></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list {\"ordered\":true,\"type\":\"1\"} -->\n<ol type=\"1\"><li>Slimpay, lack of measures of security <a href=\"https://ukgdpr.fieldfisher.com/chapter-4/article-32-gdpr/\">article 32</a>, without the need to prove any illegitimate access to the data&nbsp;:</li></ol>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>“95. <em>The Restricted Committee then notes that the accessible data (title, surname, first name, e-mail address, postal address, telephone number, BIC/IBAN) make it possible to obtain very precise information on the persons concerned by revealing their identity and their contact information.&nbsp;In addition, specific data are in question when some relate to financial information.&nbsp;The fact in particular that the <strong>IBAN appears is not insignificant</strong>.&nbsp;As the Banque de France indicated in its book \"Payments and market infrastructures in the digital age\", <strong>IBANs are \"sensitive\" payment data</strong> (in the ordinary sense of the term) because they can be used to commit fraud. .&nbsp;The European Data Protection Board describes this type of data as \"highly personal\".&nbsp;The Restricted Committee considers that the company should have exercised particular vigilance with regard to securing such data, which may be reused by unauthorized third parties, thus harming the persons affected by the data breach.&nbsp;These are, for example, exposed to a risk of identity theft or phishing (or \"phishing\", i.e. the sending of fraudulent letters for the purpose of obtaining data) when their full identity, associated with their email address for many, was freely accessible.&nbsp;thus prejudicing the persons affected by the data breach.&nbsp;These are, for example, exposed to a risk of identity theft or phishing (or \"phishing\", i.e. the sending of fraudulent letters for the purpose of obtaining</em> <em>data) when their full identity, associated with their email address for many, was freely accessible.&nbsp;thus prejudicing the persons affected by the data breach.&nbsp;These are, for example, exposed to a risk of identity theft or phishing (or \"phishing\", i.e. the sending of fraudulent letters for the purpose of obtaining data) when their full identity, associated with their email address for many, was freely accessible.</em><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>“68. The Restricted Committee considers that the absence of proof of fraudulent use of the data has no impact on the characterization of the breach of the security obligation.&nbsp;Indeed, the risk of fraudulent use of personal data was real, independently of the cases of fraud, insofar as the data of many people were made accessible to unauthorized third parties.&nbsp;The absence of proven harm to the persons concerned does not affect the existence of the security defect, which constitutes the breach of Article 32 of the GDPR.”</em><em></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a href=\"https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000042676787\">The French DPA (CNIL) imposes a 3,000 euros fine on a doctor</a> for failing to comply with the security obligation, due to the free access on the web of his patients\' health data. CNIL recalls its own guidelines on Personal Data Security recommending encryption as a standard security measure. Similarly, the Practical Guide for Physicians encourages physicians to encrypt their patients\' data with suitable software.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Transmitting unsecured emails: the restricted training points out that it also emerges from the hearing of December 17, 2019 that “<em>Mr. [...] had also not taken care to encrypt the data contained in his personal laptop, considering that encryption slows down the execution of applications too much (medical file, image visualization tool).</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>26. In the absence of encryption, the medical data contained in that computer\'s hard drive were readable in plain text by any person taking possession of that device (for example, as a result of its loss or theft) or by any person who unduly entered the network to which that computer was connected.</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In its guidance The security of personal data, the CNIL recommends providing encryption means for nomadic workstations and mobile storage media (laptop, USB keys, external hard disk, CD-R, DVD-RW, etc.), for example via the encryption of the hard disk in its entirety when the operating system offers it, file-by-file encryption or the creation of encrypted containers (file likely to contain several files). Similarly, the Practical Guide for Physicians invites physicians to encrypt their patients\' data with appropriate software.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a href=\"https://gdprhub.eu/index.php?title=CNIL_(France)_-_SAN-2021-021\">The French DPA (CNIL) fined a mobile operator €300,000</a> for failing to respect customers\' right of access and right to object by not responding to their access requests in a timely manner and sending them marketing messages despite having been notified of their objection to such processing.</li><li><a href=\"https://gdprhub.eu/index.php?title=CNIL_-_SAN-2020-008\">The French DPA (CNIL) imposed a € 2250000 fine on Carrefour France</a> for several violations of the GDPR and French data protection law. These include : excessive data retention periods, incomplete and unclear information on data processes, lack of proper answer to data subjects\' requests, security breaches and illicit use of cookies.</li><li>The CNIL also referred to a&nbsp;<a href=\"https://www.legifrance.gouv.fr/ceta/id/CETATEXT000038388017/\">decision n°423559</a>&nbsp;by the French Supreme Administrative Court (Conseil d\'Etat) which allowed for such sanctions, even if the violation had been corrected. (NESTOR)</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Other cases in the EU</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a href=\"https://lnkd.in/dFuE5SHj\">A hospital in Sweden</a> received a fine&nbsp;of 150k EUR because it was sending medical records via email to patients and referring hospitals, unencrypted.<br>That was a&nbsp;<a href=\"https://www.linkedin.com/feed/hashtag/?keywords=gdpr&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6905436683920379904\">GDPR</a>&nbsp;<a href=\"https://www.linkedin.com/feed/hashtag/?keywords=security&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6905436683920379904\">security</a>&nbsp;<a href=\"https://www.linkedin.com/feed/hashtag/?keywords=issue&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6905436683920379904\">issue</a>, in direct breach of art 5 (1)(f) GDPR (principle of security) and art 32 GDPR (security of processing).<br>Email is an obsolete communication mechanism, start using encrypted document sharing solutions, with strong authentication!</li><li><a href=\"https://gdprhub.eu/index.php?title=ANSPDCP_(Romania)_-_Fine_against_Societatea_Civil%C4%83_Profesional%C4%83_de_Avoca%C8%9Bi_%E2%80%9ESabou,_Burz_%26_Cuc%E2%80%9D\">The Romanian DPA issued a fine of approximately €1000 on a law firm</a> for disclosing a case file with the personal data of one of its clients on an external WhatsApp group with other lawyers, in breach of Articles 6, 5(1)(a), 5(1)(b), 5(1)(c), 5(1)(f) and 5(2) GDPR.</li><li>Hungarian DPA fines Lawyer € 835 for unauthorized transmission of a confidential document to two unauthorized third parties.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>The data subject lodged a complaint with the DPA concerning the unlawful disclosure of his personal data.&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The recipient of the fine acted as a lawyer for a company that was in litigation with the complainant.&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In his complaint, the concerned party alleged that the respondent had improperly and without cause disclosed to two other parties in the case \"<em>highly confidential information\"</em>, which was a private letter to the President and Vice-President of an unnamed company.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>The view that the sending of an unencrypted e-mail might violate Art. 32 GDPR is also the opinion of the Data Protection Authority of North Rhine-Westphalia (DPA NRW), which says the following on its website:</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>\"<em>The communication by e-mail requires at least the transport encryption, as it is offered by the considerable European providers by default. ... It must be taken into account that in the case of transport encryption the e-mails are available on the e-mail servers in plain text and can basically be viewed. In the case of particularly sensitive data (e.g. account transaction data, financing data, health status data, client data from lawyers and tax consultants, employee data), transport encryption alone may not be sufficient</em>\". (DPA NRW, Technical Requirements for Technical and Organizational Measures for E-Mail Sending,&nbsp;<a href=\"https://www.ldi.nrw.de/mainmenu_Aktuelles/Inhalt/Technische-Anforderungen-an-technische-und-organisatorische-Massnahmen-beim-E-Mail-Versand/Technische-Anforderungen-an-technische-und-organisatorische-Massnahmen-beim-E-Mail-Versand.html\" target=\"_blank\" rel=\"noreferrer noopener\">available here</a>&nbsp;in German).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><em>With special thanks to the experts who have offered me their assistance on this matter :</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a rel=\"noreferrer noopener\" href=\"https://www.linkedin.com/in/davidflintscotland/\" target=\"_blank\">David Flint</a>, Commercial Law Consultant at Inksters; Visiting Professor at Creighton University School of Law.</li><li><a rel=\"noreferrer noopener\" href=\"https://www.linkedin.com/in/peter-stephenson-phd-cissp-faafs-3a6788108/\" target=\"_blank\">Peter Stephenson</a>, PhD, CISSP, FAAFS Writer, researcher and educator in cyber criminology and cyber jurisprudence.</li><li><a rel=\"noreferrer noopener\" href=\"https://www.linkedin.com/in/alexandre-blanc-cyber-security-88569022/\" target=\"_blank\">Alexandre Blanc</a> Cyber Security - vCISO - ISO/IEC 27001 and 27701 Lead Implementer - best Cyber Risk Communicator of 2019 and 2020 - MCNA - MITRE ATT&amp;CK - LinkedIn Top Voice 2020 in Technology - Cyber Sentinel Award 2020-21 – Speaker</li><li><a rel=\"noreferrer noopener\" href=\"https://www.linkedin.com/in/valerymarchive/\" target=\"_blank\">Valery Rieß-Marchive</a> Rédacteur-en-chef, LeMagITTalks about malware, offrecyber, ransomware, cyberattaque, and threatintelligence</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>A special thank to <a href=\"https://twitter.com/alexislintS\" target=\"_blank\" rel=\"noreferrer noopener\">Lord\'Aliosha</a> for his breathaking photo reproduced with his special permission</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And Fieldfisher for their useful links to GDPR articles, <a href=\"https://ukgdpr.fieldfisher.com/chapter-4/article-32-gdpr/\" target=\"_blank\" rel=\"noreferrer noopener\">here</a></p>\n<!-- /wp:paragraph -->','Advocating Privacy and Data Protection for More Than a Decade And Still Fighting Resistance','<!-- wp:paragraph -->\n<p>I have been watching legal professionals disseminating personal data around the world. Feel my pain ? Why it especially matters? Because they are the ones advising others. They are the role model.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As the GDPR has now celebrating it’s 6 years and 4 years of enforcement, Here an exhaustive practical case law analysis of the importance of taking appropriate security measures and how things can go wrong.</p>\n<!-- /wp:paragraph -->','inherit','closed','closed','','2364-revision-v1','','','2022-05-25 21:12:33','2022-05-25 21:12:33','',2364,'https://www.datarainbow.eu/?p=2384',0,'revision','',0),(2386,1,'2022-05-27 14:22:33','2022-05-27 14:22:33','<!-- wp:heading -->\n<h2>and their threats to fundamental human rights and security</h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Leaked EU documents were intercepted by Euractiv journalist Samuel Stolton who published and article <a href=\"https://www.euractiv.com/section/digital/news/leak-commission-considers-facial-recognition-ban-in-ai-white-paper/\" target=\"_blank\" rel=\"noreferrer noopener\">\"LEAK: Commission considers facial recognition ban in AI ‘white paper’.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU Commission white paper suggests a temporary ban of 3 to 5 years on facial recognition in public spaces. Reminding this could provoke a serious conflict between The <a rel=\"noreferrer noopener\" href=\"https://twitter.com/EU_Commission\" target=\"_blank\">EU_Commission</a> and certain member states  - such as <a rel=\"noreferrer noopener\" href=\"http://www.rfi.fr/en/france/20200108-government-wants-test-facial-recognition-video-surveillance-security-civil-liberties\" target=\"_blank\">France</a> and <a rel=\"noreferrer noopener\" href=\"https://www.euractiv.com/section/data-protection/news/german-ministers-plan-to-expand-automatic-facial-recognition-meets-fierce-criticism/\" target=\"_blank\">Germany </a>having already taken different positions. Read more about various <a href=\"https://www.pearltrees.com/t/facial-recognition/call-for-regulation/id39330333\" target=\"_blank\" rel=\"noreferrer noopener\">calls for regulation</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fact, the French CNIL published a document in November 2019 with an English version in December \"<a href=\"https://www.cnil.fr/en/facial-recognition-debate-living-challenges\" target=\"_blank\" rel=\"noreferrer noopener\">Facial recognition: for a debate living up to the challenges\"</a> calling for an in-depth political debate. The purpose of which should be \'to determine in which cases facial recognition is necessary in a democratic society, and in which cases it is not.\' Suggesting a <strong>balanced overview</strong> of the different biometrics existing technologies to assess the risks and determine which technologies are not acceptable in a democratic society and which ones can be assumed with appropriate safeguards. Within the framework of the GDPR, the CNIL has already had the opportunity to allow certain uses in principle, while regulating them in practical terms (border control at airports), and to refuse others (controlling student access in schools).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The <a href=\"https://edpb.europa.eu/news/national-news/2019/facial-recognition-school-renders-swedens-first-gdpr-fine_en\" target=\"_blank\" rel=\"noreferrer noopener\">Swedish data protection authority recently imposed a fine </a>on a school for testing <a href=\"https://www.pearltrees.com/t/facial-recognition/in-sweden/id39330651\">facial recognition technology to track its students’ attendance</a>. On the other hand, the <a href=\"https://iapp.org/news/a/swedish-dpa-authorizes-police-to-use-facial-recognition/\" target=\"_blank\" rel=\"noreferrer noopener\">Swedish DPA authorise the use of FR by police forces.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.forbes.com/sites/marisagarcia/2019/11/27/iberia-launches-facial-recognition-app-as-airline-industry-biometric-adoption-advances/amp/\" target=\"_blank\" rel=\"noreferrer noopener\">Iberia Launches Facial Recognition App As Airline Industry Biometric Adoption Advances</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>San Francisco recently became the first US city to <a href=\"https://www.theguardian.com/us-news/2019/may/14/san-francisco-facial-recognition-police-ban\" target=\"_blank\" rel=\"noreferrer noopener\">ban police and other agencies from using automated facial recognition</a>, following widespread condemnation of China’s use of the technology to impose <a href=\"https://www.theguardian.com/news/2019/apr/11/china-hi-tech-war-on-muslim-minority-xinjiang-uighurs-surveillance-face-recognition\" target=\"_blank\" rel=\"noreferrer noopener\">control over millions of Uighur Muslims</a> in the western region of Xinjiang. Somerville, Massachusetts, then <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\" target=\"_blank\" rel=\"noreferrer noopener\">Oakland</a> have <a href=\"https://www.technologyreview.com/s/613536/facial-recognition-ban-san-francisco-surveillance-privacy-private-corporate-interests/\" target=\"_blank\" rel=\"noreferrer noopener\">banned government use of facial recognition</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the <a href=\"https://www.telegraph.co.uk/news/2019/10/07/london-council-used-facial-recognition-technology-streets-without/\" target=\"_blank\" rel=\"noreferrer noopener\">London council used facial recognition technology on streets without consulting residents,</a> the UK Information Commissioner\'s Office published its Opinion 2019/01 on the use of live facial recognition technology (LFR) by law enforcement in public places dated 31-10-2019. in summary :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(1) The use of LFR involves the processing of personal data and therefore #data protection law applies, whether it is for a trial or routine operational deployment.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(2) The processing of personal data by ‘competent authorities’ for ‘the law enforcement purposes’ is covered by UK law.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(3) The use of LFR for the law enforcement purposes constitutes ‘sensitive processing’ as it involves the processing of biometric data for the purpose of uniquely identifying a data subject.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(4) Such sensitive processing relates to all facial images captured and analysed by the software. A data protection impact assessment and an ‘appropriate policy document’ must be in place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(5) Sensitive processing occurs irrespective of whether that image yields a match to a person on a watchlist or the biometric data of unmatched persons is subsequently deleted within a short space of time.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(6) Data protection law applies to the whole process of LFR, from consideration about the necessity and proportionality for deployment, the compilation of watchlists, the processing of the biometric data through to the retention and deletion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial images are biometric data as: ‘relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person’ (GDPR Art. 2(14)). The GDPR generally forbids the processing of biometric data for uniquely identifying purposes unless relying on one of the ten exemptions listed in Art. 9(2).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For such technology to be deployed, given that it relies on the large-scale processing of sensitive data, consent would need to be explicit as well as freely-given, informed and specific.&nbsp;Additionally, when deployed in public spaces, how anyone could opt out?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK ICO questioned how far should we, as a society, consent to police forces reducing our privacy in order to keep us safe? They found that \'the current combination of laws, codes and practices relating to LFR will not drive the ethical and legal approach that’s needed to truly manage the risk that this technology presents.\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Statement from Elizabeth Denham, Information Commissioner, on the use of live facial recognition technology in King\'s Cross, London : <em>“Scanning people’s faces as they lawfully go about their daily lives, in order to identify them, is a potential threat to privacy that should concern us all. That is especially the case if it is done without people’s knowledge or understanding. “I remain deeply concerned about the growing use of facial recognition technology in public spaces, not only by law enforcement agencies but also increasingly by the private sector. My office and the judiciary are both independently considering the legal issues and whether the current framework has kept pace with emerging technologies and people’s expectations about how their most sensitive personal data is used. “Facial recognition technology is a priority area for the ICO and when necessary, we will not hesitate to use our investigative and enforcement powers to protect people’s legal rights. “We have launched an investigation following concerns reported in the media regarding the use of live facial recognition in the King\'s Cross area of central London, which thousands of people pass through every day. “As well as requiring detailed information from the relevant organisations about how the technology is used, we will also inspect the system and its operation on-site to assess whether or not it complies with data protection law. “Put simply, any organisations wanting to use facial recognition technology must comply with the law - and they must do so in a fair, transparent and accountable way. They must have documented how and why they believe their use of the technology is legal, proportionate and justified. “We support keeping people safe but new technologies and new uses of sensitive personal data must always be balanced against people’s legal rights.”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>After the High Court ruled in September that the <a href=\"https://www.bbc.co.uk/news/uk-wales-50251643\" target=\"_blank\" rel=\"noreferrer noopener\">South Wales Police had acted lawfully when a shopper complained his human rights</a> were breached when he was photographed, civil rights group Liberty said it was akin to the unregulated taking of DNA or fingerprints without consent, and  is campaigning for an outright ban of the practice. <a href=\"https://www.theguardian.com/technology/2019/jun/07/facial-recognition-technology-liberty-says-england-wales-police-use-should-be-banned\" target=\"_blank\" rel=\"noreferrer noopener\">Facial Recognition is Arsenic in Water of Democracy </a>said Liberty. Martha Spurrier, a human rights lawyer, said the technology had such fundamental problems that, despite police enthusiasm for the equipment, its use on the streets should not be permitted.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham said the use of facial recognition tools represents a \"step change\" in policing techniques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An investigation by commissioner Elizabeth Denham has raised \"serious concerns\" over use of the technology.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham called on the government to introduce a statutory code of practice.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"https://www.bitsoffreedom.nl\" target=\"_blank\" rel=\"noreferrer noopener\">civil liberties </a>organisations<a href=\"https://www.bitsoffreedom.nl\">,</a> such as the <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\" target=\"_blank\" rel=\"noreferrer noopener\">Electronic Frontier Foundation,</a><a href=\"https://epic.org/banfacesurveillance/\" target=\"_blank\" rel=\"noreferrer noopener\"> EPIC</a> or <a href=\"https://edri.org/facial-recognition-and-fundamental-rights-101/\" target=\"_blank\" rel=\"noreferrer noopener\">EDRI </a> have expressed concerns. As the CNIL pointed out, facial recognition has the potential to become a particularly ubiquitous and intrusive tool. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The use of FR in Hong Kong and London Kings Cross has been seen as <a href=\"https://www.dezeen.com/2019/10/09/facial-recognition-hong-kong-threat/\" target=\"_blank\" rel=\"noreferrer noopener\">\"a fundamental threat to society\"</a> says Owen Hopkins.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The European Data Protection Supervisor, Wojciech Wiewiórowski, questioned: <a href=\"https://www.pearltrees.com/t/facial-recognition/call-for-regulation/id39330333#item446366630\">Facial recognition A solution in search of a problem?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Based on a probability rather than on the absolute certainty of a match between the faces being compared and the baseline \"template\". Variations in performance can therefore have far-reaching consequences for individuals who are mis-identified. Over-reliance on technology can result on serious mis-judgements. The lack of accuracy has serious consequences for individuals being falsely identified whether as criminals or otherwise. Its <a href=\"https://www.pearltrees.com/t/facial-recognition/low-accuracy/id39330401\">accuracy has been challenged</a> by several researchers.  They are serious potential <a href=\"https://www.kairos.com/blog/face-off-confronting-bias-in-face-recognition-ai\" target=\"_blank\" rel=\"noreferrer noopener\">dangers associated with current racial biases</a> in face recognition, and misidentification could lead to wrongful conviction, or far worse.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>To resist against the rise of the intrusive technology, designers have created <a href=\"https://www.pearltrees.com/t/facial-recognition/escaping-frt/id49625120\">clothing and accessories that helps to conceal people\'s identities from A.I.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Whatever the EU decide or regulate, <a href=\"https://www.pearltrees.com/t/facial-recognition/in-china/id39330328\">the technology comes from China</a> or the US where <a href=\"https://threatpost.com/amazon-ring-facial-recognition-watch-list/150681/\">Amazon Plans Ring Facial Recognition-Based ‘Watch List’, Report</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/10/11/technology/flickr-facial-recognition.html\" target=\"_blank\" rel=\"noreferrer noopener\">This article </a>by the privacy expert journalist Kashmir Hill is thought provoking on the use of children\'s pictures posted by parents online on website such as Flickr. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is a technology with many caveats and a major societal impacts. You are invited to read more <a href=\"https://www.pearltrees.com/t/facial-recognition/id17167432\" target=\"_blank\" rel=\"noreferrer noopener\">HERE</a> from various sources to make your own opinion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->','Facial Recognition technologies','Facial Recognition technology collect sensitive biometrics data, they are inacurate and put data at risk.','inherit','closed','closed','','532-revision-v1','','','2022-05-27 14:22:33','2022-05-27 14:22:33','',532,'https://www.datarainbow.eu/?p=2386',0,'revision','',0),(2388,1,'2022-05-27 14:34:29','2022-05-27 14:34:29','<!-- wp:heading {\"level\":4} -->\n<h4><a href=\"https://ai-regulation.com/first-decision-ever-of-a-french-court-applying-gdpr-to-facial-recognition/\">FIRST EVER DECISION OF A FRENCH COURT APPLYING GDPR TO FACIAL RECOGNITION</a></h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>In a ruling on 27th of February, a French court canceled a decision by the South-Est Region of France (Provence-Alpes-Côte d’Azur – PACA) to undertake a series of tests using facial recognition at the entrance of two High schools considering that this would be illegal. This has been a well noticed decision  of the French Court applying the General Data Protection Regulation (GDPR) on Facial Recognition Technologies (FRTs).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A great win for « La Quadrature du Net », la Ligue des droits de l’Homme, parent association of state schools of Alpes-Maritimes et CGT Union Educ’Action of Alpes-Maritimes,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following previous recommendations by the <a href=\"https://www.cnil.fr/fr/reconnaissance-faciale-pour-un-debat-la-hauteur-des-enjeux\" target=\"_blank\" rel=\"noreferrer noopener\">CNIL</a>, the Administratif court ruled that the processing of biometric data are subject to strict conditions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The local region of  Provence-Alpes-Côte d’Azur had set a tripartite agreement for a trial with schools and Cisco International Limited  to install<br>access control, facial recognition and tracking in three high schools.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial recognition data processing relate to biometrics, special category data under the General Data Protection Regulation. As such their processing is in principal prohibited. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9 lists the conditions for processing special category data:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(a) Explicit consent<br>(b) Employment, social security and social protection (if authorised by law)<br>(c) Vital interests<br>(d) Not-for-profit bodies<br>(e) Made public by the data subject<br>(f) Legal claims or judicial acts<br>(g) Reasons of substantial public interest (with a basis in law)<br>(h) Health or social care (with a basis in law)<br>(i) Public health (with a basis in law)<br>(j) Archiving, research and statistics (with a basis in law)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The municipality had based its ground of processing on student\'s consents and for minors, their parents\'s consent collected on a signed form. The court objected against the legality of this project based on the imbalance of power.   </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9(2)(a) permits to process special category if:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“the data subject has given <strong>explicit consent</strong> to the processing of those personal data for one or more specified purposes”.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In order to be valid, explicit consent must be <strong>freely given, specific, affirmative (opt-in) and unambiguous</strong>, and able to be withdrawn at any time. In practice, the extra requirements for consent to be ‘explicit’ are likely to be:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>explicit consent must be confirmed in a clear statement (whether oral or written), rather than by any other type of affirmative action;</li><li>it must specify the nature of the special category data; and</li><li>it should be separate from any other consents.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>It must be made sure that a <strong>genuine choice</strong> over whether and how you use their data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In particular, if consent is required as a condition of  access to services, or wherever there is a position of power over the individual,  such as a public authority or their employer, consent cannot be freely given and deemed to be invalid.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In a context of a consent required by a local authority from students, without allowing any alternative, knowing the imbalance of power, it is with no surprise that the Administratif court has invalidated the facial recognition monitoring in school.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is unreasonable to believe ALL students, present and future, would freely consent to have their biometrics processed, without alternative. Additionally, are concerned all staff and visitors, including minors.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Convinced by the imbalance of powers, the Court then argued the lack of proportionality, ruling the security aim could be reached in a less intrusive manner with student badges. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the <a href=\"https://www.bfmtv.com/tech/reconnaissance-faciale-dans-les-lycees-un-dispositif-juge-disproportionne-1795950.html\" target=\"_blank\" rel=\"noreferrer noopener\">CNIL</a> opinion, the court ruled that facial recognition is a disproportionate measure to manage the access to school, especially since alternative measures could reach the same result in a less intrusive manner. Student badges. are much less detrimental to rights exist to do this. On this subject,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Another case will be heard on Monday, March 2, 2020 at the Marseille administrative court. An appeal filed with the Ligue des Droits Humains against automated video surveillance (which identifies among other things \"suspicious behavior\" of  individuals on the public highway.<br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have warned previously against <a href=\"https://datarainbow.eu/2020/01/17/facial-recognition-technologies/\" target=\"_blank\" rel=\"noreferrer noopener\">the issue of biometrics data processing in surveillance </a>and the inherent security issues of a <a href=\"https://edition.cnn.com/2020/02/10/tech/clearview-ai-ceo-hoan-ton-that/index.html\" target=\"_blank\" rel=\"noreferrer noopener\">data thirsty technology</a>. Every data base creates risks of data leak. Clearview data base has since revealed a major leak.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\" target=\"_blank\" rel=\"noreferrer noopener\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.bloomberglaw.com/privacy-and-data-security/clearview-ai-faces-california-illinois-lawsuit-after-breach\" target=\"_blank\" rel=\"noreferrer noopener\">Clearview AI Faces California, Illinois Lawsuit After Breach (1).</a> The question will remain how to monetise the compensation resulting from the harm caused by the loss of control over something as unique as biometrics. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'Clearview AI, a <a href=\"https://www.cnet.com/news/clearview-app-lets-strangers-find-your-name-info-with-snap-of-a-photo-report-says/\" target=\"_blank\" rel=\"noreferrer noopener\">controversial facial recognition app</a> being used by US law enforcement to identify suspects and other people, is facing <a href=\"https://www.cnet.com/news/clearview-ai-faces-lawsuit-following-facial-recognition-privacy-concerns/\" target=\"_blank\" rel=\"noreferrer noopener\">another lawsuit</a>. The new suit, filed Thursday, seeks class-action status and $5 million in damages for what it calls <a rel=\"noreferrer noopener\" href=\"https://twitter.com/RMac18/status/1228097214578225153\" target=\"_blank\">willful, reckless or negligent violations of biometrics laws in Illinois by Clearview</a> and CDW.\'  in <a href=\"https://www.cnet.com/news/clearview-ai-facial-recognition-company-faces-another-lawsuit/\" target=\"_blank\" rel=\"noreferrer noopener\">CNET</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>New York facial recognition startup </em><a href=\"https://clearview.ai/\"><em>Clearview AI</em></a><em> – which has amassed a huge database of more than three billion images scraped from employment sites, news sites, educational sites, and social networks including Facebook, YouTube, Twitter, Instagram and Venmo – is being sued in a potential class action lawsuit that claims the company gobbled up photos out of “pure greed” to sell to law enforcement.</em>\' writes <a href=\"https://nakedsecurity.sophos.com/2020/01/28/facial-recognition-firm-sued-for-scraping-3-billion-faceprints/\" target=\"_blank\" rel=\"noreferrer noopener\">Lisa Vaas in Naked Security</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\" target=\"_blank\" rel=\"noreferrer noopener\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://theconversation.com/facial-recognition-is-spreading-faster-than-you-realise-132047\" target=\"_blank\" rel=\"noreferrer noopener\">Facial recognition is spreading faster than you realise.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:embed {\"url\":\"https://algorithmwatch.org/en/story/face-recognition-police-europe/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"wordpress\",\"className\":\"is-provider-algorithmwatch\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-algorithmwatch\"><div class=\"wp-block-embed__wrapper\">\nhttps://algorithmwatch.org/en/story/face-recognition-police-europe/\n</div></figure>\n<!-- /wp:embed -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\" target=\"_blank\" rel=\"noreferrer noopener\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:embed {\"url\":\"https://www.neweurope.eu/article/facial-recognition-technology-breaches-gdpr-says-vestager/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"wordpress\",\"className\":\"is-provider-new-europe\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-new-europe\"><div class=\"wp-block-embed__wrapper\">\nhttps://www.neweurope.eu/article/facial-recognition-technology-breaches-gdpr-says-vestager/\n</div></figure>\n<!-- /wp:embed -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\" target=\"_blank\" rel=\"noreferrer noopener\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is 81% inaccurate and could be illegal.\" -<a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\" target=\"_blank\" rel=\"noreferrer noopener\"> Sky News</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Concerning the processing of biometrics, Susan Brown, Executive Chairwoman and Founder of Zortrex wrote : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Time to wake up!  Data Pipeline - Personalisation Marketing/advertising - taking our identities, the bad actors see this open air gap and taking over the data output and input. Biometrics is not security, your actually giving away your DNA!  If <a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23governments&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">governments </a><a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23companies&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\" target=\"_blank\" rel=\"noreferrer noopener\">companies</a> do not start securing identities now, going to be disastrous.  You cannot replace your DNA or your Identity. Every day, mass surveillance, greed, humans are the product, if we do not start securing the future children now and their education and their financial banking, their medical history then everyone may just give up while the world comes to an end. \"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Finally, the UK ICO in his guidance give an example :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>A gym introduces a facial recognition system to allow members access to the facilities. It requires all members to agree to facial recognition as a condition of entry – there is no other way to access the gym. This is not valid consent as the members are not being given a real choice – if they do not consent, they cannot access the gym. Although facial recognition might have some security and convenience benefits, it is not objectively necessary in order to provide access to gym facilities, so consent is not freely given.</p><p>However, if the gym provides an alternative, such as a choice between access via facial recognition and access via a membership card, consent could be considered freely given. The gym could rely on explicit consent for processing the biometric facial scans of the members who indicate that they prefer that option.</p><cite><br></cite></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>Despite that, <a href=\"https://ipvm.com/reports/ico-conference\" target=\"_blank\" rel=\"noreferrer noopener\">UK ICO Approves Unconsented Facial Recognition At Security Conferences</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\" target=\"_blank\" rel=\"noreferrer noopener\">The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is not accurate, and could be illegal.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://onezero.medium.com/this-filter-makes-your-photos-invisible-to-facial-recognition-a26929b5ccf\" target=\"_blank\" rel=\"noreferrer noopener\">This Filter Makes Your Photos Invisible to Facial Recognition.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The European regulatory corpus applicable to facial recognition is composed of:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>2012: Working Party 29,&nbsp;<strong><a href=\"https://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2012/wp193_en.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Opinion 3/2012 on developments in biometric technologies</a></strong></li><li>2016:&nbsp;<strong><a href=\"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016L0680&amp;from=FR\" target=\"_blank\" rel=\"noreferrer noopener\">Directive 2016/680 Data Protection Law Enforcement Directive</a></strong></li><li>2016:&nbsp;<strong><a href=\"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&amp;from=FR\" target=\"_blank\" rel=\"noreferrer noopener\">Regulation 2016/679 General Data Protection Regulation (GDPR)</a></strong></li><li>2019: EU Agency for Fundamental Rights (FRA),&nbsp;<strong><a href=\"https://fra.europa.eu/sites/default/files/fra_uploads/fra-2019-facial-recognition-technology-focus-paper-1_en.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Facial Recognition Technology : fundamental rights considerations in the context of law enforcement</a></strong>.</li><li>2020: European Commission (EC),&nbsp;<strong><a href=\"https://ec.europa.eu/info/sites/info/files/commission-white-paper-artificial-intelligence-feb2020_en.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">White Paper on AI</a></strong></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Find all curations on <a rel=\"noreferrer noopener\" href=\"https://www.pearltrees.com/idigital2/biometrics/id17167428\" target=\"_blank\">Biometrics</a> and <a rel=\"noreferrer noopener\" href=\"https://www.pearltrees.com/t/facial-recognition/id17167432\" target=\"_blank\">Facial Recognition technologies</a> on these <a rel=\"noreferrer noopener\" href=\"https://www.pearltrees.com/idigital2\" target=\"_blank\">Pearltrees</a>. Although there shouldn\'t be much personal data involved, this free tool drops cookies and unfortunately is not always using SSL for non members. Memberships is free. Please contact us if you had any issue. It\'s always recommended to check your browser. We have no tights with Pearltrees tool.</p>\n<!-- /wp:paragraph -->','Court said NO to Facial Recognition Technology','FIRST EVER DECISION OF A FRENCH COURT APPLYING GDPR TO FACIAL RECOGNITION﻿. Facial recognition technology deemed disproportionate measure in schools.','inherit','closed','closed','','564-revision-v1','','','2022-05-27 14:34:29','2022-05-27 14:34:29','',564,'https://www.datarainbow.eu/?p=2388',0,'revision','',0);

--
-- Table structure for table `wp_term_relationships`
--

CREATE TABLE `wp_term_relationships` (
  `object_id` bigint(20) unsigned NOT NULL DEFAULT '0',
  `term_taxonomy_id` bigint(20) unsigned NOT NULL DEFAULT '0',
  `term_order` int(11) NOT NULL DEFAULT '0',
  PRIMARY KEY (`object_id`,`term_taxonomy_id`),
  KEY `term_taxonomy_id` (`term_taxonomy_id`)
) ENGINE=MyISAM DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_520_ci;

--
-- Dumping data for table `wp_term_relationships`
--

INSERT INTO `wp_term_relationships` (`object_id`, `term_taxonomy_id`, `term_order`) VALUES (42,1,0),(43,1,0),(44,1,0),(1719,163,0),(1726,9,0),(1905,9,0),(50,164,0),(51,164,0),(53,164,0),(2255,91,0),(62,163,0),(63,163,0),(64,163,0),(65,163,0),(66,163,0),(67,163,0),(69,163,0),(2255,14,0),(72,163,0),(73,163,0),(74,163,0),(76,163,0),(77,163,0),(2255,103,0),(2342,196,0),(81,163,0),(162,19,0),(330,19,0),(963,19,0),(1059,163,0),(1060,59,0),(1060,81,0),(1060,91,0),(1060,125,0),(1060,7,0),(1060,9,0),(1060,18,0),(1061,5,0),(1061,7,0),(1061,9,0),(1061,18,0),(1061,59,0),(1061,81,0),(1061,91,0),(1061,125,0),(1062,81,0),(1062,90,0),(1062,91,0),(1062,94,0),(1062,109,0),(1062,121,0),(1062,128,0),(1062,147,0),(1062,18,0),(1063,7,0),(1063,9,0),(1063,18,0),(1063,62,0),(1063,64,0),(1063,88,0),(1063,97,0),(1063,110,0),(1063,113,0),(1063,115,0),(1063,125,0),(1063,150,0),(1063,158,0),(1064,12,0),(1964,14,0),(1064,126,0),(1065,25,0),(1065,27,0),(1065,28,0),(1065,43,0),(1065,44,0),(1065,85,0),(1065,91,0),(1065,111,0),(1065,117,0),(1065,140,0),(1065,146,0),(1065,154,0),(1065,18,0),(1066,5,0),(1066,7,0),(1066,9,0),(1066,18,0),(1066,47,0),(1066,59,0),(1066,78,0),(1066,91,0),(1066,120,0),(1066,127,0),(1066,151,0),(1067,54,0),(1067,58,0),(1067,81,0),(1067,91,0),(1067,125,0),(1067,18,0),(1067,19,0),(134,7,0),(134,9,0),(204,43,0),(204,44,0),(204,91,0),(204,94,0),(204,102,0),(204,127,0),(204,132,0),(204,144,0),(204,145,0),(204,4,0),(204,7,0),(204,9,0),(204,15,0),(204,18,0),(217,7,0),(217,9,0),(217,17,0),(266,19,0),(267,44,0),(267,91,0),(267,102,0),(267,4,0),(267,7,0),(267,9,0),(267,11,0),(267,15,0),(267,18,0),(307,59,0),(307,66,0),(307,69,0),(307,75,0),(307,86,0),(307,91,0),(307,92,0),(307,7,0),(307,9,0),(307,18,0),(336,21,0),(336,24,0),(336,30,0),(336,34,0),(336,59,0),(336,82,0),(336,89,0),(336,125,0),(336,7,0),(336,9,0),(336,18,0),(376,44,0),(376,65,0),(376,120,0),(376,124,0),(376,4,0),(376,7,0),(376,13,0),(376,15,0),(376,18,0),(1045,19,0),(1047,19,0),(1983,176,0),(1073,19,0),(402,40,0),(428,22,0),(428,47,0),(428,82,0),(428,87,0),(428,100,0),(428,149,0),(428,5,0),(428,7,0),(428,9,0),(428,15,0),(428,18,0),(458,125,0),(467,37,0),(467,55,0),(467,59,0),(467,91,0),(467,107,0),(467,125,0),(467,138,0),(467,7,0),(467,9,0),(467,18,0),(476,37,0),(476,55,0),(476,59,0),(476,61,0),(476,108,0),(476,125,0),(476,7,0),(476,18,0),(217,125,0),(484,20,0),(484,35,0),(484,51,0),(484,52,0),(484,59,0),(484,7,0),(484,9,0),(484,13,0),(484,18,0),(493,59,0),(493,91,0),(493,7,0),(493,9,0),(493,17,0),(493,18,0),(493,168,0),(498,52,0),(498,59,0),(498,91,0),(498,125,0),(498,7,0),(498,9,0),(498,18,0),(498,19,0),(503,7,0),(503,17,0),(503,18,0),(503,73,0),(503,91,0),(503,96,0),(503,125,0),(508,38,0),(508,59,0),(508,83,0),(508,99,0),(508,125,0),(508,7,0),(508,9,0),(508,18,0),(511,7,0),(511,9,0),(511,125,0),(532,7,0),(532,9,0),(532,14,0),(564,32,0),(564,44,0),(564,83,0),(564,125,0),(564,4,0),(564,7,0),(564,9,0),(564,14,0),(564,18,0),(583,44,0),(583,57,0),(583,91,0),(583,130,0),(583,4,0),(583,7,0),(583,9,0),(583,14,0),(583,19,0),(601,4,0),(601,7,0),(601,9,0),(601,14,0),(601,15,0),(601,18,0),(601,156,0),(601,161,0),(688,4,0),(688,7,0),(688,9,0),(688,14,0),(688,15,0),(688,18,0),(688,74,0),(688,103,0),(688,125,0),(688,138,0),(688,155,0),(688,161,0),(688,162,0),(716,4,0),(716,7,0),(716,9,0),(716,14,0),(716,18,0),(716,46,0),(716,48,0),(716,49,0),(716,63,0),(716,76,0),(716,77,0),(716,118,0),(716,142,0),(716,143,0),(807,9,0),(807,14,0),(807,18,0),(807,121,0),(810,59,0),(810,125,0),(810,7,0),(810,9,0),(810,14,0),(810,18,0),(814,21,0),(814,23,0),(814,152,0),(532,18,0),(812,7,0),(812,9,0),(812,14,0),(812,18,0),(812,91,0),(812,134,0),(817,59,0),(817,91,0),(817,101,0),(817,112,0),(817,138,0),(817,7,0),(817,9,0),(817,10,0),(817,14,0),(817,18,0),(819,21,0),(819,33,0),(819,40,0),(819,59,0),(819,68,0),(819,99,0),(819,119,0),(819,125,0),(819,133,0),(819,159,0),(819,7,0),(819,9,0),(819,14,0),(819,18,0),(838,54,0),(829,125,0),(829,143,0),(829,14,0),(829,18,0),(831,3,0),(831,7,0),(831,9,0),(831,14,0),(831,18,0),(831,29,0),(831,68,0),(831,80,0),(831,125,0),(831,131,0),(833,165,0),(838,18,0),(814,3,0),(844,8,0),(844,18,0),(844,79,0),(844,116,0),(2026,177,0),(2026,14,0),(2026,9,0),(2024,163,0),(2054,7,0),(2019,163,0),(2044,163,0),(2035,163,0),(2145,4,0),(2030,163,0),(2026,81,0),(2026,136,0),(898,48,0),(898,50,0),(898,114,0),(898,148,0),(898,7,0),(898,9,0),(898,18,0),(951,50,0),(951,104,0),(951,106,0),(951,129,0),(951,6,0),(951,9,0),(951,18,0),(967,7,0),(967,9,0),(967,14,0),(967,18,0),(967,70,0),(967,82,0),(967,91,0),(967,95,0),(967,122,0),(967,125,0),(975,31,0),(975,56,0),(975,71,0),(975,128,0),(975,135,0),(975,137,0),(975,153,0),(975,7,0),(975,9,0),(975,16,0),(975,18,0),(1033,5,0),(1033,7,0),(1033,9,0),(1033,13,0),(1033,14,0),(1033,16,0),(1033,18,0),(1033,160,0),(1074,56,0),(1074,123,0),(1074,7,0),(1074,9,0),(1074,14,0),(1074,16,0),(1074,18,0),(1076,31,0),(1076,71,0),(1076,72,0),(1076,135,0),(1076,136,0),(1076,5,0),(1076,9,0),(1076,14,0),(1076,16,0),(1076,18,0),(1079,164,0),(1083,164,0),(1085,163,0),(1090,163,0),(1092,163,0),(2255,125,0),(1095,163,0),(1099,163,0),(1100,163,0),(1102,163,0),(1103,163,0),(1104,163,0),(1105,163,0),(1106,163,0),(1107,163,0),(1108,163,0),(1109,163,0),(1110,163,0),(1111,163,0),(1112,163,0),(1113,163,0),(1114,163,0),(1121,163,0),(1130,163,0),(1140,163,0),(1964,12,0),(2311,75,0),(1170,163,0),(1983,18,0),(1970,174,0),(1970,175,0),(1964,5,0),(1964,9,0),(1921,4,0),(1921,5,0),(1912,7,0),(402,143,0),(402,125,0),(134,14,0),(493,14,0),(2311,9,0),(2145,14,0),(2145,182,0),(2145,15,0),(841,166,0),(2145,9,0),(2054,136,0),(2091,163,0),(2255,189,0),(2054,9,0),(2051,163,0),(1070,18,0),(2088,163,0),(2054,56,0),(2311,193,0),(2311,195,0),(833,18,0),(833,14,0),(2145,183,0),(2311,10,0),(833,9,0),(833,7,0),(1983,13,0),(1970,138,0),(1970,14,0),(1964,4,0),(1921,138,0),(1921,7,0),(1918,91,0),(1912,9,0),(1905,75,0),(402,18,0),(134,18,0),(1062,9,0),(2255,7,0),(2145,13,0),(2145,181,0),(2145,18,0),(2243,91,0),(2145,11,0),(2054,31,0),(2090,163,0),(532,83,0),(2054,16,0),(2047,163,0),(1070,9,0),(2084,163,0),(2054,135,0),(2255,10,0),(2311,194,0),(2243,187,0),(2145,44,0),(2255,9,0),(838,186,0),(2243,14,0),(1326,164,0),(1983,91,0),(1983,9,0),(1970,9,0),(1964,47,0),(1921,172,0),(1921,10,0),(1918,44,0),(1918,4,0),(1912,171,0),(402,14,0),(134,91,0),(1065,14,0),(1346,163,0),(1347,163,0),(1348,163,0),(1349,163,0),(1350,163,0),(1351,163,0),(1352,163,0),(511,167,0),(1360,163,0),(1362,163,0),(511,14,0),(1367,163,0),(467,13,0),(1371,163,0),(1372,163,0),(1374,163,0),(1375,163,0),(1383,164,0),(1392,163,0),(467,14,0),(1726,5,0),(1396,163,0),(1397,163,0),(1983,47,0),(1983,15,0),(1970,6,0),(1964,125,0),(1921,59,0),(1921,9,0),(1918,18,0),(1918,7,0),(1912,55,0),(402,7,0),(458,14,0),(1065,7,0),(1414,163,0),(2311,7,0),(2364,207,0),(2364,209,0),(2364,208,0),(2364,206,0),(2364,205,0),(2255,18,0),(2396,163,0),(2398,163,0),(2364,210,0),(2397,163,0),(2311,138,0),(2311,43,0),(1457,164,0),(2255,59,0),(1070,14,0),(1983,14,0),(1964,78,0),(1964,173,0),(1921,101,0),(1921,18,0),(1918,9,0),(1918,5,0),(1912,37,0),(458,170,0),(134,125,0),(1065,9,0),(2309,163,0),(821,7,0),(821,18,0),(821,14,0),(2243,188,0),(821,3,0),(2054,179,0),(1726,47,0),(2255,190,0),(2054,18,0),(2046,163,0),(2045,163,0),(2089,163,0),(2054,178,0),(2311,66,0),(2357,7,0),(2243,18,0),(1726,43,0),(2311,16,0),(838,185,0),(2243,7,0),(1983,78,0),(1983,16,0),(1964,91,0),(2341,18,0),(2341,14,0),(2341,195,0),(2341,199,0),(2341,198,0),(2341,189,0),(2341,55,0),(2341,59,0),(2341,91,0),(2255,191,0),(2364,10,0),(2364,18,0),(2364,14,0),(2243,151,0),(2364,9,0),(814,18,0),(2364,7,0),(2255,101,0),(2364,55,0),(2364,43,0),(2364,138,0),(2357,204,0),(2364,136,0),(2311,192,0),(2357,3,0),(2243,9,0),(1607,164,0),(1608,164,0),(1613,164,0),(1614,164,0),(1615,164,0),(1616,164,0),(2364,59,0),(1618,163,0),(2311,18,0),(2026,184,0),(2243,15,0),(1656,1,0),(2341,7,0),(2357,128,0),(2341,9,0),(2357,203,0),(2357,201,0),(2357,200,0),(2357,176,0),(2357,173,0),(2357,18,0),(2357,16,0),(2357,14,0),(2357,9,0),(1905,91,0),(1905,18,0),(1726,18,0),(1652,2,0),(1655,164,0);

--
-- Table structure for table `wp_term_taxonomy`
--

CREATE TABLE `wp_term_taxonomy` (
  `term_taxonomy_id` bigint(20) unsigned NOT NULL AUTO_INCREMENT,
  `term_id` bigint(20) unsigned NOT NULL DEFAULT '0',
  `taxonomy` varchar(32) COLLATE utf8mb4_unicode_520_ci NOT NULL DEFAULT '',
  `description` longtext COLLATE utf8mb4_unicode_520_ci NOT NULL,
  `parent` bigint(20) unsigned NOT NULL DEFAULT '0',
  `count` bigint(20) NOT NULL DEFAULT '0',
  PRIMARY KEY (`term_taxonomy_id`),
  UNIQUE KEY `term_id_taxonomy` (`term_id`,`taxonomy`),
  KEY `taxonomy` (`taxonomy`)
) ENGINE=MyISAM AUTO_INCREMENT=211 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_520_ci;

--
-- Dumping data for table `wp_term_taxonomy`
--

INSERT INTO `wp_term_taxonomy` (`term_taxonomy_id`, `term_id`, `taxonomy`, `description`, `parent`, `count`) VALUES (1,1,'nav_menu','',0,4),(2,2,'nav_menu','',0,1),(3,3,'category','',0,4),(4,4,'category','',0,12),(5,5,'category','',0,9),(6,6,'category','',0,2),(7,7,'category','',0,50),(8,8,'category','',0,1),(9,9,'category','',0,57),(10,10,'category','',0,5),(11,11,'category','',0,2),(12,12,'category','',0,2),(13,13,'category','',0,6),(14,14,'category','',0,37),(15,15,'category','',0,9),(16,16,'category','',0,8),(17,17,'category','',0,3),(18,18,'category','',0,60),(19,19,'category','',0,3),(20,20,'post_tag','',0,1),(21,21,'post_tag','',0,3),(22,22,'post_tag','',0,1),(23,23,'post_tag','',0,1),(24,24,'post_tag','',0,1),(25,25,'post_tag','',0,1),(26,26,'post_tag','',0,0),(27,27,'post_tag','',0,1),(28,28,'post_tag','',0,1),(29,29,'post_tag','',0,1),(30,30,'post_tag','',0,1),(31,31,'post_tag','',0,3),(32,32,'post_tag','',0,1),(33,33,'post_tag','',0,1),(34,34,'post_tag','',0,1),(35,35,'post_tag','',0,1),(36,36,'post_tag','',0,0),(37,37,'post_tag','',0,3),(38,38,'post_tag','',0,1),(39,39,'post_tag','',0,0),(40,40,'post_tag','',0,2),(41,41,'post_tag','',0,0),(42,42,'post_tag','',0,0),(43,43,'post_tag','',0,5),(44,44,'post_tag','',0,8),(45,45,'post_tag','',0,0),(46,46,'post_tag','',0,1),(47,47,'post_tag','',0,5),(48,48,'post_tag','',0,2),(49,49,'post_tag','',0,1),(50,50,'post_tag','',0,2),(51,51,'post_tag','',0,1),(52,52,'post_tag','',0,2),(53,53,'post_tag','',0,0),(54,54,'post_tag','',0,2),(55,55,'post_tag','',0,5),(56,56,'post_tag','',0,3),(57,57,'post_tag','',0,1),(58,58,'post_tag','',0,1),(59,59,'post_tag','',0,18),(60,60,'post_tag','',0,0),(61,61,'post_tag','',0,1),(62,62,'post_tag','',0,1),(63,63,'post_tag','',0,1),(64,64,'post_tag','',0,1),(65,65,'post_tag','',0,1),(66,66,'post_tag','',0,2),(67,67,'post_tag','',0,0),(68,68,'post_tag','',0,2),(69,69,'post_tag','',0,1),(70,70,'post_tag','',0,1),(71,71,'post_tag','',0,2),(72,72,'post_tag','',0,1),(73,73,'post_tag','',0,1),(74,74,'post_tag','',0,1),(75,75,'post_tag','',0,3),(76,76,'post_tag','',0,1),(77,77,'post_tag','',0,1),(78,78,'post_tag','',0,3),(79,79,'post_tag','',0,1),(80,80,'post_tag','',0,1),(81,81,'post_tag','',0,5),(82,82,'post_tag','',0,3),(83,83,'post_tag','',0,3),(84,84,'post_tag','',0,0),(85,85,'post_tag','',0,1),(86,86,'post_tag','',0,1),(87,87,'post_tag','',0,1),(88,88,'post_tag','',0,1),(89,89,'post_tag','',0,1),(90,90,'post_tag','',0,1),(91,91,'post_tag','',0,25),(92,92,'post_tag','',0,1),(93,93,'post_tag','',0,0),(94,94,'post_tag','',0,2),(95,95,'post_tag','',0,1),(96,96,'post_tag','',0,1),(97,97,'post_tag','',0,1),(98,98,'post_tag','',0,0),(99,99,'post_tag','',0,2),(100,100,'post_tag','',0,1),(101,101,'post_tag','',0,3),(102,102,'post_tag','',0,2),(103,103,'post_tag','',0,2),(104,104,'post_tag','',0,1),(105,105,'post_tag','',0,0),(106,106,'post_tag','',0,1),(107,107,'post_tag','',0,1),(108,108,'post_tag','',0,1),(109,109,'post_tag','',0,1),(110,110,'post_tag','',0,1),(111,111,'post_tag','',0,1),(112,112,'post_tag','',0,1),(113,113,'post_tag','',0,1),(114,114,'post_tag','',0,1),(115,115,'post_tag','',0,1),(116,116,'post_tag','',0,1),(117,117,'post_tag','',0,1),(118,118,'post_tag','',0,1),(119,119,'post_tag','',0,1),(120,120,'post_tag','',0,2),(121,121,'post_tag','',0,2),(122,122,'post_tag','',0,1),(123,123,'post_tag','',0,1),(124,124,'post_tag','',0,1),(125,125,'post_tag','',0,24),(126,126,'post_tag','',0,1),(127,127,'post_tag','',0,2),(128,128,'post_tag','',0,3),(129,129,'post_tag','',0,1),(130,130,'post_tag','',0,1),(131,131,'post_tag','',0,1),(132,132,'post_tag','',0,1),(133,133,'post_tag','',0,1),(134,134,'post_tag','',0,1),(135,135,'post_tag','',0,3),(136,136,'post_tag','',0,4),(137,137,'post_tag','',0,1),(138,138,'post_tag','',0,7),(139,139,'post_tag','',0,0),(140,140,'post_tag','',0,1),(141,141,'post_tag','',0,0),(142,142,'post_tag','',0,1),(143,143,'post_tag','',0,3),(144,144,'post_tag','',0,1),(145,145,'post_tag','',0,1),(146,146,'post_tag','',0,1),(147,147,'post_tag','',0,1),(148,148,'post_tag','',0,1),(149,149,'post_tag','',0,1),(150,150,'post_tag','',0,1),(151,151,'post_tag','',0,2),(152,152,'post_tag','',0,1),(153,153,'post_tag','',0,1),(154,154,'post_tag','',0,1),(155,155,'post_tag','',0,1),(156,156,'post_tag','',0,1),(157,157,'post_tag','',0,0),(158,158,'post_tag','',0,1),(159,159,'post_tag','',0,1),(160,160,'post_tag','',0,1),(161,161,'post_tag','',0,2),(162,162,'post_tag','',0,1),(163,163,'nav_menu','',0,75),(164,164,'nav_menu','',0,15),(171,171,'post_tag','',0,1),(165,165,'post_tag','',0,1),(166,166,'category','',0,1),(167,167,'category','',0,1),(168,168,'post_tag','',0,1),(169,169,'post_tag','',0,0),(170,170,'post_tag','',0,1),(172,172,'post_tag','',0,1),(173,173,'post_tag','',0,2),(174,174,'post_tag','',0,1),(175,175,'category','',0,1),(176,176,'post_tag','',0,2),(177,177,'category','',0,1),(178,178,'post_tag','',0,1),(179,179,'post_tag','',0,1),(180,180,'post_tag','',0,0),(181,181,'post_tag','',0,1),(182,182,'post_tag','',0,1),(183,183,'post_tag','',0,1),(184,184,'post_tag','',0,1),(185,185,'post_tag','',0,1),(186,186,'post_tag','',0,1),(187,187,'post_tag','',0,1),(188,188,'post_tag','',0,1),(189,189,'post_tag','',0,2),(190,190,'post_tag','',0,1),(191,191,'post_tag','',0,1),(192,192,'post_tag','',0,1),(193,193,'post_tag','',0,1),(194,194,'post_tag','',0,1),(195,195,'post_tag','',0,2),(196,196,'wp_theme','',0,1),(197,197,'post_tag','',0,0),(198,198,'post_tag','',0,1),(199,199,'post_tag','',0,1),(200,200,'post_tag','',0,1),(201,201,'post_tag','',0,1),(202,202,'post_tag','',0,0),(203,203,'post_tag','',0,1),(204,204,'post_tag','',0,1),(205,205,'post_tag','',0,1),(206,206,'post_tag','',0,1),(207,207,'post_tag','',0,1),(208,208,'post_tag','',0,1),(209,209,'post_tag','',0,1),(210,210,'post_tag','',0,1);

--
-- Table structure for table `wp_termmeta`
--

CREATE TABLE `wp_termmeta` (
  `meta_id` bigint(20) unsigned NOT NULL AUTO_INCREMENT,
  `term_id` bigint(20) unsigned NOT NULL DEFAULT '0',
  `meta_key` varchar(255) COLLATE utf8mb4_unicode_520_ci DEFAULT NULL,
  `meta_value` longtext COLLATE utf8mb4_unicode_520_ci,
  PRIMARY KEY (`meta_id`),
  KEY `term_id` (`term_id`),
  KEY `meta_key` (`meta_key`(191))
) ENGINE=MyISAM DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_520_ci;

--
-- Dumping data for table `wp_termmeta`
--


--
-- Table structure for table `wp_terms`
--

CREATE TABLE `wp_terms` (
  `term_id` bigint(20) unsigned NOT NULL AUTO_INCREMENT,
  `name` varchar(200) COLLATE utf8mb4_unicode_520_ci NOT NULL DEFAULT '',
  `slug` varchar(200) COLLATE utf8mb4_unicode_520_ci NOT NULL DEFAULT '',
  `term_group` bigint(10) NOT NULL DEFAULT '0',
  PRIMARY KEY (`term_id`),
  KEY `slug` (`slug`(191)),
  KEY `name` (`name`(191))
) ENGINE=MyISAM AUTO_INCREMENT=211 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_520_ci;

--
-- Dumping data for table `wp_terms`
--

INSERT INTO `wp_terms` (`term_id`, `name`, `slug`, `term_group`) VALUES (1,'Primary Menu','primary-menu',0),(2,'Footer Menu','footer-menu',0),(3,'AI','ai',0),(4,'Consent','consent',0),(5,'Cookies','cookies',0),(6,'COVID19','covid19',0),(7,'Data Protection','data-protection',0),(8,'eReputation','ereputation',0),(9,'GDPR','gdpr',0),(10,'Law Firm','law-firm',0),(11,'Legitimate Interest','legitimate-interest',0),(12,'MC PÉROUX','mc-peroux',0),(13,'PECR','pecr',0),(14,'privacy','privacy',0),(15,'Privacy Notice','privacy-notice',0),(16,'Privacy Schield','privacy-schield',0),(17,'PriVacyDay','privacyday',0),(18,'Tara Taubman-Bassirian','tara-taubman-bassirian',0),(19,'Uncategorised','uncategorised',0),(20,'Adequacy','adequacy',0),(21,'AI','ai',0),(22,'Ajax','ajax',0),(23,'algorithm','algorithm',0),(24,'anti-Trust','anti-trust',0),(25,'App','app',0),(26,'Assessment','assessment',0),(27,'Assistance Centre d\'Appel','assistance-centre-dappel',0),(28,'Association 42','association-42',0),(29,'Autonomous cars','autonomous-cars',0),(30,'AWS cloud','aws-cloud',0),(31,'BCR','bcr',0),(32,'biometrics','biometrics',0),(33,'Body Scanners','body-scanners',0),(34,'Breach','breach',0),(35,'Brexit','brexit',0),(36,'Brexit Cybersecurity','brexit-cybersecurity',0),(37,'British Airways','british-airways',0),(38,'CCPA','ccpa',0),(39,'CCT','cct',0),(40,'CCTV','cctv',0),(41,'CCTV cameras','cctv-cameras',0),(42,'Civil Liberties','civil-liberties',0),(43,'CNIL','cnil',0),(44,'Consent','consent',0),(45,'Consent. PPI','consent-ppi',0),(46,'CONTACT TRACING','contact-tracing',0),(47,'Cookies','cookies',0),(48,'Coronavirus','coronavirus',0),(49,'COVID-19','covid-19',0),(50,'COVID19','covid19',0),(51,'CyberSecurity','cybersecurity',0),(52,'Cybertalks','cybertalks',0),(53,'Daneiel Solove','daneiel-solove',0),(54,'Data','data',0),(55,'Data Breach','data-breach',0),(56,'Data flow','data-flow',0),(57,'Data Minimisation','data-minimisation',0),(58,'Data Privacy Day','data-privacy-day',0),(59,'Data Protection','data-protection',0),(60,'Data Protection DPA','data-protection-dpa',0),(61,'Datagrail','datagrail',0),(62,'Delete','delete',0),(63,'Democratie','democratie',0),(64,'Digital','digital',0),(65,'Direct Marketing','direct-marketing',0),(66,'DPA','dpa',0),(67,'DPIA','dpia',0),(68,'Drones','drones',0),(69,'DSGVO','dsgvo',0),(70,'Dutch','dutch',0),(71,'ECJ','ecj',0),(72,'EDPB','edpb',0),(73,'Education','education',0),(74,'encryption','encryption',0),(75,'Enforcement','enforcement',0),(76,'EPIDEMIA','epidemia',0),(77,'EPIDEMIE','epidemie',0),(78,'ePrivacy','eprivacy',0),(79,'eReputation','ereputation',0),(80,'Ethics','ethics',0),(81,'EU','eu',0),(82,'Facebook','facebook',0),(83,'Facial Recognition','facial-recognition',0),(84,'Facial recognition Technology','facial-recognition-technology',0),(85,'FIDZUP','fidzup',0),(86,'Fines','fines',0),(87,'Fingerprinting','fingerprinting',0),(88,'Forgetting','forgetting',0),(89,'FTC','ftc',0),(90,'Fundamnetal Right','fundamnetal-right',0),(91,'GDPR','gdpr',0),(92,'Germany','germany',0),(93,'Germany GDPR','germany-gdpr',0),(94,'Google','google',0),(95,'Grandma','grandma',0),(96,'Human dignity','human-dignity',0),(97,'Identity','identity',0),(98,'image','image',0),(99,'IoT','iot',0),(100,'JavaScript','javascript',0),(101,'Law Firm','law-firm',0),(102,'Legitimate Interest','legitimate-interest',0),(103,'liability','liability',0),(104,'Libertés Publiques','libertes-publiques',0),(105,'Live Facial Recognition','live-facial-recognition',0),(106,'Lois d\'urgence','lois-durgence',0),(107,'Marrioot','marrioot',0),(108,'Marriott Hotels','marriott-hotels',0),(109,'Material Scope','material-scope',0),(110,'memory','memory',0),(111,'Mobile','mobile',0),(112,'Mossak Fonseca','mossak-fonseca',0),(113,'Neuralink','neuralink',0),(114,'NHSX','nhsx',0),(115,'Online','online',0),(116,'Online Reviews','online-reviews',0),(117,'Optical Centre','optical-centre',0),(118,'PANDEMIC','pandemic',0),(119,'Pearltrees','pearltrees',0),(120,'PECR','pecr',0),(121,'Personal Data','personal-data',0),(122,'Photos','photos',0),(123,'PLI','pli',0),(124,'PPI','ppi',0),(125,'privacy','privacy',0),(126,'Privacy by Design','privacy-by-design',0),(127,'Privacy notice','privacy-notice',0),(128,'Privacy Shield','privacy-shield',0),(129,'Proportionalité','proportionalite',0),(130,'Proportionality','proportionality',0),(131,'Regulation','regulation',0),(132,'RGDP','rgdp',0),(133,'Robotics','robotics',0),(134,'Royal Mail','royal-mail',0),(135,'SCC','scc',0),(136,'Schrems-II','schrems-ii',0),(137,'SchremsII','schremsii',0),(138,'Security','security',0),(139,'Sensitive data','sensitive-data',0),(140,'SINGLEPOST','singlepost',0),(141,'Special category data','special-category-data',0),(142,'STOPCOVID','stopcovid',0),(143,'SURVEILLANCE','surveillance',0),(144,'Targeted Adverstisement','targeted-adverstisement',0),(145,'Targeted Advertising','targeted-advertising',0),(146,'TEEMO','teemo',0),(147,'Territorial Scole','territorial-scole',0),(148,'TRACING APP','tracing-app',0),(149,'tracking','tracking',0),(150,'Transhumanism','transhumanism',0),(151,'Transparency','transparency',0),(152,'United Airline','united-airline',0),(153,'US','us',0),(154,'Vectuary','vectuary',0),(155,'videconferencing','videconferencing',0),(156,'Video-conferencing','video-conferencing',0),(157,'Videoconferencing','videoconferencing',0),(158,'Viktor Mayer Schonberger','viktor-mayer-schonberger',0),(159,'Webcam','webcam',0),(160,'Website security','website-security',0),(161,'Zoom','zoom',0),(162,'zoombombing','zoombombing',0),(163,'MenuDirectionel','menudirectionel',0),(164,'NAVIGATION MENU','navigation-menu',0),(165,'Right to be Forgotten','right-to-be-forgotten',0),(166,'Copyright','copyright',0),(167,'Kurt Brand','kurt-brand',0),(168,'Rebecca Herold','rebecca-herold',0),(169,'Data Grail','data-grail',0),(170,'STEWART ROOM','stewart-room',0),(171,'Air Canada','air-canada',0),(172,'CYBERATTACK','cyberattack',0),(173,'AdTech','adtech',0),(174,'COVID 19','covid-19-2',0),(175,'Andrew Jenkinson','andrew-jenkinson',0),(176,'IAB','iab',0),(177,'Daniel Aldridge','daniel-aldridge',0),(178,'Standard Contractual Clauses','standard-contractual-clauses',0),(179,'UK ADEQUACY','uk-adequacy',0),(180,'AMAZON LA QUADRATURE','amazon-la-quadrature',0),(181,'AMAZON','amazon',0),(182,'LA QUADRATURE DU NET','la-quadrature-du-net',0),(183,'LUXEMBOURG','luxembourg',0),(184,'International Data Flow','international-data-flow',0),(185,'Big data','big-data',0),(186,'Information','information',0),(187,'WATSAPP','watsapp',0),(188,'IRISH DPC','irish-dpc',0),(189,'Non-Material Damage','non-material-damage',0),(190,'Compensation','compensation',0),(191,'CONFIDENTIALITY','confidentiality',0),(192,'Data Protection Agreement','data-protection-agreement',0),(193,'Notification','notification',0),(194,'Slimpay','slimpay',0),(195,'Fine','fine',0),(196,'mesmerize-pro','mesmerize-pro',0),(197,'Non-','non',0),(198,'Civil liability','civil-liability',0),(199,'Criminal liability','criminal-liability',0),(200,'Online Safety Bill','online-safety-bill',0),(201,'RTBF','rtbf',0),(202,'U+IAB','uiab',0),(203,'Clearview','clearview',0),(204,'DMA','dma',0),(205,'`Data transfer','data-transfer',0),(206,'China','china',0),(207,'WeTransfer','wetransfer',0),(208,'Phishing','phishing',0),(209,'Qbot','qbot',0),(210,'Emotet','emotet',0);

--
-- Table structure for table `wp_usermeta`
--

CREATE TABLE `wp_usermeta` (
  `umeta_id` bigint(20) unsigned NOT NULL AUTO_INCREMENT,
  `user_id` bigint(20) unsigned NOT NULL DEFAULT '0',
  `meta_key` varchar(255) COLLATE utf8mb4_unicode_520_ci DEFAULT NULL,
  `meta_value` longtext COLLATE utf8mb4_unicode_520_ci,
  PRIMARY KEY (`umeta_id`),
  KEY `user_id` (`user_id`),
  KEY `meta_key` (`meta_key`(191))
) ENGINE=MyISAM AUTO_INCREMENT=68 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_520_ci;

--
-- Dumping data for table `wp_usermeta`
--

INSERT INTO `wp_usermeta` (`umeta_id`, `user_id`, `meta_key`, `meta_value`) VALUES (1,1,'nickname','TaraT'),(2,1,'first_name','TaraT'),(3,1,'last_name',''),(4,1,'description',''),(5,1,'rich_editing','true'),(6,1,'syntax_highlighting','true'),(7,1,'comment_shortcuts','false'),(8,1,'admin_color','fresh'),(9,1,'use_ssl','0'),(10,1,'show_admin_bar_front','true'),(11,1,'locale',''),(12,1,'wp_capabilities','a:1:{s:13:\"administrator\";b:1;}'),(13,1,'wp_user_level','10'),(14,1,'dismissed_wp_pointers',''),(15,1,'show_welcome_panel','1'),(16,1,'session_tokens','a:1:{s:64:\"d94dbe67ff74b21f2863bb598aae2a36867b90776520b3be17d1748725b5ae44\";a:4:{s:10:\"expiration\";i:1665305669;s:2:\"ip\";s:13:\"92.19.255.221\";s:2:\"ua\";s:117:\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36\";s:5:\"login\";i:1665132869;}}'),(17,1,'wp_user-settings','deleted=undefined&ampampampampampamplibraryContent=browse&ampampamplibraryContent=browse&ampamplibraryContent=browse&libraryContent=browse'),(18,1,'wp_user-settings-time','1649088761'),(67,1,'default_password_nag',''),(19,1,'wp_dashboard_quick_press_last_post_id','2393'),(20,1,'community-events-location','a:1:{s:2:\"ip\";s:11:\"92.19.255.0\";}'),(22,2,'nickname','tara'),(23,2,'first_name',''),(24,2,'last_name',''),(25,2,'description',''),(26,2,'rich_editing','true'),(27,2,'syntax_highlighting','true'),(28,2,'comment_shortcuts','false'),(29,2,'admin_color','fresh'),(30,2,'use_ssl','0'),(31,2,'show_admin_bar_front','true'),(32,2,'locale',''),(33,2,'wp_capabilities','a:1:{s:13:\"administrator\";b:1;}'),(34,2,'wp_user_level','10'),(35,2,'dismissed_wp_pointers',''),(37,3,'nickname','tara2'),(38,3,'first_name',''),(39,3,'last_name',''),(40,3,'description',''),(41,3,'rich_editing','true'),(42,3,'syntax_highlighting','true'),(43,3,'comment_shortcuts','false'),(44,3,'admin_color','fresh'),(45,3,'use_ssl','0'),(46,3,'show_admin_bar_front','true'),(47,3,'locale',''),(48,3,'wp_capabilities','a:1:{s:13:\"administrator\";b:1;}'),(49,3,'wp_user_level','10'),(50,3,'dismissed_wp_pointers',''),(51,3,'default_password_nag',''),(53,3,'session_tokens','a:3:{s:64:\"942a930ed1ed7fd2d485463b91fb60da01b64521d83946dd101a37e4a45eb43f\";a:4:{s:10:\"expiration\";i:1606528803;s:2:\"ip\";s:14:\"10.117.170.188\";s:2:\"ua\";s:115:\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36\";s:5:\"login\";i:1606356003;}s:64:\"6d8a6e39426c8384586d9c0b23546a952e5e3331a5b5bfcec53770b3d590d0e8\";a:4:{s:10:\"expiration\";i:1606529052;s:2:\"ip\";s:14:\"10.117.170.188\";s:2:\"ua\";s:115:\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36\";s:5:\"login\";i:1606356252;}s:64:\"b049f93bdad3b86e24e324a8ef84b98e9bc18d2c1f2d1618ffdf3058b031ad35\";a:4:{s:10:\"expiration\";i:1606637849;s:2:\"ip\";s:13:\"82.137.16.117\";s:2:\"ua\";s:115:\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36\";s:5:\"login\";i:1606465049;}}'),(54,3,'wp_dashboard_quick_press_last_post_id','1492'),(55,3,'community-events-location','a:1:{s:2:\"ip\";s:11:\"82.137.16.0\";}'),(56,1,'nav_menu_recently_edited','163'),(57,1,'managenav-menuscolumnshidden','a:4:{i:0;s:15:\"title-attribute\";i:1;s:11:\"css-classes\";i:2;s:3:\"xfn\";i:3;s:11:\"description\";}'),(58,1,'metaboxhidden_nav-menus','a:3:{i:0;s:12:\"add-post_tag\";i:1;s:25:\"add-coblocks_pattern_type\";i:2;s:29:\"add-coblocks_pattern_category\";}'),(59,2,'session_tokens','a:1:{s:64:\"1040c2151ed2647e44e588c3d76691c824bc451e4f7d7dd0c3259123cdb41b17\";a:4:{s:10:\"expiration\";i:1608429060;s:2:\"ip\";s:12:\"92.118.13.43\";s:2:\"ua\";s:128:\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 dntapi\";s:5:\"login\";i:1608256260;}}'),(60,2,'wp_dashboard_quick_press_last_post_id','1956'),(61,2,'community-events-location','a:1:{s:2:\"ip\";s:11:\"92.118.13.0\";}'),(62,2,'wp_user-settings','libraryContent=browse'),(63,2,'wp_user-settings-time','1606371718'),(64,2,'nav_menu_recently_edited','163'),(65,2,'managenav-menuscolumnshidden','a:5:{i:0;s:11:\"link-target\";i:1;s:11:\"css-classes\";i:2;s:3:\"xfn\";i:3;s:11:\"description\";i:4;s:15:\"title-attribute\";}'),(66,2,'metaboxhidden_nav-menus','a:3:{i:0;s:12:\"add-post_tag\";i:1;s:25:\"add-coblocks_pattern_type\";i:2;s:29:\"add-coblocks_pattern_category\";}');

--
-- Table structure for table `wp_users`
--

CREATE TABLE `wp_users` (
  `ID` bigint(20) unsigned NOT NULL AUTO_INCREMENT,
  `user_login` varchar(60) COLLATE utf8mb4_unicode_520_ci NOT NULL DEFAULT '',
  `user_pass` varchar(255) COLLATE utf8mb4_unicode_520_ci NOT NULL DEFAULT '',
  `user_nicename` varchar(50) COLLATE utf8mb4_unicode_520_ci NOT NULL DEFAULT '',
  `user_email` varchar(100) COLLATE utf8mb4_unicode_520_ci NOT NULL DEFAULT '',
  `user_url` varchar(100) COLLATE utf8mb4_unicode_520_ci NOT NULL DEFAULT '',
  `user_registered` datetime NOT NULL DEFAULT '0000-00-00 00:00:00',
  `user_activation_key` varchar(255) COLLATE utf8mb4_unicode_520_ci NOT NULL DEFAULT '',
  `user_status` int(11) NOT NULL DEFAULT '0',
  `display_name` varchar(250) COLLATE utf8mb4_unicode_520_ci NOT NULL DEFAULT '',
  PRIMARY KEY (`ID`),
  KEY `user_login_key` (`user_login`),
  KEY `user_nicename` (`user_nicename`),
  KEY `user_email` (`user_email`)
) ENGINE=MyISAM AUTO_INCREMENT=4 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_520_ci;

--
-- Dumping data for table `wp_users`
--

INSERT INTO `wp_users` (`ID`, `user_login`, `user_pass`, `user_nicename`, `user_email`, `user_url`, `user_registered`, `user_activation_key`, `user_status`, `display_name`) VALUES (1,'admin','$P$Bafz29ACq6qYH7V6nAx3BVOwLMPPd4.','admin','clarinettet@gmail.com','https://www.datarainbow.eu','2020-11-25 17:34:10','',0,'TaraT'),(2,'tara','$P$Be7tkeUN4CcgPELbfU/EIqudWyefAg1','tara','data@datarainbow.eu','','2020-11-26 00:51:29','1613154254:$P$Bu/GtU7kMH7Az5r/tK.wGk1bc5oJgU1',0,'tara'),(3,'tara2','$P$BzJJ6E.42hf7BbSAsaDSjbxtBMopUP/','tara2','tarataubman@gmail.com','','2020-11-26 01:00:50','',0,'tara2');

--
-- Dumping events for database 'i6928996_wp1'
--

--
-- Dumping routines for database 'i6928996_wp1'
--


