(476,5,'2019-07-10 18:25:33','2019-07-10 17:25:33','<!-- wp:heading {\"level\":3} -->\n<h3>Interview Series: Tara Taubman Bassirian, Data Protection and IP Consultant at Data Rainbow</h3>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://datagrail.io/author/kyle-schryver\">Kyle Schryver</a>&nbsp;July 10, 2019&nbsp;<br><a href=\"https://datagrail.io/categories/interview-series\">Interview Series</a><a href=\"https://datagrail.io/categories/legal\">Legal</a><a href=\"https://datagrail.io/categories/privacy\">Privacy</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"width\":214,\"height\":299} -->\n<figure class=\"wp-block-image is-resized\"><img src=\"https://cdn.buttercms.com/4utxwgcTSpP31ZLDPzsI\" alt=\"undefined\" width=\"214\" height=\"299\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://medium.com/@DataGrail/interview-series-tara-taubman-bassirian-data-protection-and-ip-consultant-at-data-rainbow-c4866c9bc2e3\">DataGrail recently interviewed Tara Taubman Bassirian</a>, Data Protection and IP Consultant at <a rel=\"noreferrer noopener\" href=\"https://datarainbow.eu/\" target=\"_blank\">Data Rainbow</a> to bring you insights from a leading legal professional in the field of data privacy.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;What is your role at Data Rainbow and what inspired you to pursue a career in legal and privacy, specifically focusing on the GDPR?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;In a previous life, I was a corporate lawyer in France, and now my main focus is Data Rainbow: my consultancy. Prior to Data Rainbow, I was involved in online safety, heavily researching and advising on how to stay safe online — whether you’re an adult or a child. This lead to completing a Masters of Communication and Internet Law at Queen Mary University. In short, I’m passionate about technology and want to help others make the most out of existing technologies while mitigating any potential risks associated with the internet.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Over the last few decades, technological innovations have profoundly impacted the daily lives of nearly everyone in the developed world. Technologies on the market are constantly evolving, and even older generations are adapting to the many improvements in their everyday lives. Data has become the new oil, as it’s as valuable as any commodity.&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Unprecedented quantities of personal data are mined and analyzed. Collecting, storing, and aggregating is the new business model for many technology companies in our digital world, as data storage is inexpensive, and its value is ever increasing. Data Protection regulations — such as the GDPR — aim to reestablish the balance between the rights of data subjects and the data industry.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I strongly believe that privacy matters and want to ensure that privacy is maintained alongside the surge in data capture and analysis. Privacy equals transparency plus control. Without privacy, there’s no freedom nor human dignity. In turn, legislation needs to adapt in line with technological advancements; the right to privacy is a human right that needs to be fought for. The totality of privacy risks associated with the digital age are still largely unknown by most people, and we need to be educated on the potential negative outcomes before they arise.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;What is your favorite part of working in the legal space, specifically covering data privacy practices?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;I would recommend any newly qualified or even established lawyer who loves innovation to enter the field of data protection, as it’s intellectually stimulating. There are continuous advancements in the technology space, which can lead to breaches of privacy or personal data. Within the technology industry, data protection lawyers are truly at the forefront of regulation. The privacy issues we’re experiencing today didn’t occur 30 years ago. With information becoming more and more accessible to us, data protection lawyers can uncover what’s going on in the technology space, how to anticipate potential negative outcomes, and how to create the best solutions for it.&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>No day is routine, and each one brings about new regulations, new guidance, and new challenges. As a result, there’s a need to constantly update knowledge. Not only that, but potentially everyone is affected. Most of us in the developed world use smartphones and have social media profiles, so it’s in our best interest to be fully informed on the potential effects that technology can have on our lives. Technology greatly enriches our lives but giving up our privacy for its benefits is too big of a price to pay.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;With rising consumer privacy awareness, how can businesses best inform users that their data is secure and private?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;An organization’s website can provide an initial view of how seriously they take maintaining the privacy of its customers. A compliant website, with the required cookie banner, privacy by design with opt-in options, clear privacy notice, and sensible web developing is the first step towards compliance. We recently looked at websites using JavaScript codes that track and fingerprint users, and this is not acceptable. When commissioning a website, it’s very important to use certified developers to ensure that they respect regulations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;As someone voted Privacy Hero in 2018, what advice do you have for other privacy professionals in terms of gaining experience, knowledge, and being able to find and implement solutions for companies?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;The downside of this professional field is its high barrier of entry. It’s difficult to get your foot in the door without no practical experience. There’s a reticence towards hiring a Data Privacy lawyer who has not had prior experience in that role. This is further impacted by that fact that GDPR legislation requires that Data Protection Officers have legal qualifications. This poses an issue as lawyers can lack technical knowledge, while IT specialists lack legal knowledge.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Working as a Data Privacy lawyer requires extensive knowledge of both the legal and the technical worlds. There’s a serious need for lawyers with IT knowledge, as Law universities often do not teach IT. In effect, there’s a disconnect between the skills and experience required and what already exists within the market. Therefore, as a lawyer, I recommend using every resource available for self-education.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;Based on your knowledge and experience with the GDPR, what advice can you give to companies in N. America who will have to face similar upcoming challenges with the CCPA and&nbsp;<a href=\"https://datagrail.io/blog/nevadas-new-privacy-law-how-it-matches-up-against-the-ccpa\">Nevada Privacy Law</a>?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;North America is quite different from the EU in the sense that there’s no blanket protection but a patchwork of sectorial regulations. Furthermore, many Americans confuse PII with Personal Data. Also, some US companies have preferred to ignore the GDPR by banning EU customers from accessing their websites. However, they will now have to comply with the CCPA and other regulations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Compliance with data protection rules creates trust amongst users. Keeping data accurate and cleaning up stored data to keep only what is necessary is a component of a good business. Data mapping is also a good start to see where data is collected and stored.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Enjoy this interview? Check out our previous&nbsp;<a href=\"https://datagrail.io/blog/interview-series-alexandra-ross\">Interview Series with Alexandra Ross</a>, Director, Global Privacy and Data Security Counsel at Autodesk!</strong></p>\n<!-- /wp:paragraph -->','Interview with DataGrail','','publish','closed','closed','','interview-with-datagrail','','','2020-01-18 13:16:35','2020-01-18 13:16:35','',0,'http://datarainbow.eu/?p=476',0,'post','',0),(477,5,'2019-07-10 18:25:33','2019-07-10 17:25:33','<!-- wp:heading {\"level\":3} -->\n<h3>Interview Series: Tara Taubman Bassirian, Data Protection and IP Consultant at Data Rainbow</h3>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://datagrail.io/author/kyle-schryver\">Kyle Schryver</a>&nbsp;July 10, 2019&nbsp;<br><a href=\"https://datagrail.io/categories/interview-series\">Interview Series</a><a href=\"https://datagrail.io/categories/legal\">Legal</a><a href=\"https://datagrail.io/categories/privacy\">Privacy</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image -->\n<figure class=\"wp-block-image\"><img src=\"https://cdn.buttercms.com/4utxwgcTSpP31ZLDPzsI\" alt=\"undefined\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>DataGrail recently interviewed Tara Taubman Bassirian, Data Protection and IP Consultant at&nbsp;<a href=\"https://datarainbow.eu/\" target=\"_blank\" rel=\"noreferrer noopener\">Data Rainbow</a>&nbsp;to bring you insights from a leading legal professional in the field of data privacy.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;What is your role at Data Rainbow and what inspired you to pursue a career in legal and privacy, specifically focusing on the GDPR?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;In a previous life, I was a corporate lawyer in France, and now my main focus is Data Rainbow: my consultancy. Prior to Data Rainbow, I was involved in online safety, heavily researching and advising on how to stay safe online — whether you’re an adult or a child. This lead to completing a Masters of Communication and Internet Law at Queen Mary University. In short, I’m passionate about technology and want to help others make the most out of existing technologies while mitigating any potential risks associated with the internet.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Over the last few decades, technological innovations have profoundly impacted the daily lives of nearly everyone in the developed world. Technologies on the market are constantly evolving, and even older generations are adapting to the many improvements in their everyday lives. Data has become the new oil, as it’s as valuable as any commodity.&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Unprecedented quantities of personal data are mined and analyzed. Collecting, storing, and aggregating is the new business model for many technology companies in our digital world, as data storage is inexpensive, and its value is ever increasing. Data Protection regulations — such as the GDPR — aim to reestablish the balance between the rights of data subjects and the data industry.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I strongly believe that privacy matters and want to ensure that privacy is maintained alongside the surge in data capture and analysis. Privacy equals transparency plus control. Without privacy, there’s no freedom nor human dignity. In turn, legislation needs to adapt in line with technological advancements; the right to privacy is a human right that needs to be fought for. The totality of privacy risks associated with the digital age are still largely unknown by most people, and we need to be educated on the potential negative outcomes before they arise.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;What is your favorite part of working in the legal space, specifically covering data privacy practices?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;I would recommend any newly qualified or even established lawyer who loves innovation to enter the field of data protection, as it’s intellectually stimulating. There are continuous advancements in the technology space, which can lead to breaches of privacy or personal data. Within the technology industry, data protection lawyers are truly at the forefront of regulation. The privacy issues we’re experiencing today didn’t occur 30 years ago. With information becoming more and more accessible to us, data protection lawyers can uncover what’s going on in the technology space, how to anticipate potential negative outcomes, and how to create the best solutions for it.&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>No day is routine, and each one brings about new regulations, new guidance, and new challenges. As a result, there’s a need to constantly update knowledge. Not only that, but potentially everyone is affected. Most of us in the developed world use smartphones and have social media profiles, so it’s in our best interest to be fully informed on the potential effects that technology can have on our lives. Technology greatly enriches our lives but giving up our privacy for its benefits is too big of a price to pay.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;With rising consumer privacy awareness, how can businesses best inform users that their data is secure and private?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;An organization’s website can provide an initial view of how seriously they take maintaining the privacy of its customers. A compliant website, with the required cookie banner, privacy by design with opt-in options, clear privacy notice, and sensible web developing is the first step towards compliance. We recently looked at websites using JavaScript codes that track and fingerprint users, and this is not acceptable. When commissioning a website, it’s very important to use certified developers to ensure that they respect regulations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;As someone voted Privacy Hero in 2018, what advice do you have for other privacy professionals in terms of gaining experience, knowledge, and being able to find and implement solutions for companies?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;The downside of this professional field is its high barrier of entry. It’s difficult to get your foot in the door without no practical experience. There’s a reticence towards hiring a Data Privacy lawyer who has not had prior experience in that role. This is further impacted by that fact that GDPR legislation requires that Data Protection Officers have legal qualifications. This poses an issue as lawyers can lack technical knowledge, while IT specialists lack legal knowledge.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Working as a Data Privacy lawyer requires extensive knowledge of both the legal and the technical worlds. There’s a serious need for lawyers with IT knowledge, as Law universities often do not teach IT. In effect, there’s a disconnect between the skills and experience required and what already exists within the market. Therefore, as a lawyer, I recommend using every resource available for self-education.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;Based on your knowledge and experience with the GDPR, what advice can you give to companies in N. America who will have to face similar upcoming challenges with the CCPA and&nbsp;<a href=\"https://datagrail.io/blog/nevadas-new-privacy-law-how-it-matches-up-against-the-ccpa\">Nevada Privacy Law</a>?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;North America is quite different from the EU in the sense that there’s no blanket protection but a patchwork of sectorial regulations. Furthermore, many Americans confuse PII with Personal Data. Also, some US companies have preferred to ignore the GDPR by banning EU customers from accessing their websites. However, they will now have to comply with the CCPA and other regulations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Compliance with data protection rules creates trust amongst users. Keeping data accurate and cleaning up stored data to keep only what is necessary is a component of a good business. Data mapping is also a good start to see where data is collected and stored.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Enjoy this interview? Check out our previous&nbsp;<a href=\"https://datagrail.io/blog/interview-series-alexandra-ross\">Interview Series with Alexandra Ross</a>, Director, Global Privacy and Data Security Counsel at Autodesk!</strong></p>\n<!-- /wp:paragraph -->','Interview with DataGrail','','inherit','closed','closed','','476-revision-v1','','','2019-07-10 18:25:33','2019-07-10 17:25:33','',476,'https://datarainbow.eu/2019/07/10/476-revision-v1/',0,'revision','',0),(480,5,'2019-07-25 18:46:40','2019-07-25 17:46:40','<!-- wp:paragraph -->\n<p>Much confusion around the concept of Legitimate Interest justifying Personal Data Processing. Worth going back to the roots.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Article 6(1) of the GDPR</strong> sets out the conditions that must be met for the processing of personal data to be lawful. They are:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>(a) the data subject has given <strong>consent</strong> to the processing of their personal data for one or more specific purposes;&nbsp;</em><br><em>(b) processing is necessary for the performance of a <strong>contract</strong> to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;&nbsp;</em><br><em>(c) processing is necessary for compliance with a <strong>legal obligation</strong> to which the controller is subject;&nbsp;</em><br><em>(d) processing is necessary in order to protect the <strong>vital interests</strong> of the data subject;&nbsp;</em><br><em>(e) processing is necessary for the performance of a task carried out in the <strong>public interest</strong> or in the exercise of official authority vested in the controller;&nbsp;</em><br><em>(f) processing is necessary for the purposes of the <strong>legitimate interests</strong> pursued by a controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. This shall not apply to processing carried out by public authorities in the performance of their tasks.</em><br>These conditions are all equally valid, regardless the order of appearance. Organisations should assess which of these grounds are most appropriate for different processing activities and then fulfil any further requirements the GDPR sets out for these conditions (GDPR Article 5).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Many organisations have been wrongly advised to opt for consent. The new regulation that entered into force on May 2018 requires a higher standard of consent. That explains the deluge of re-consent emails sent out around May last year. The other inconvenient of consent is the requirement to keep a register of all granted consents, with the risk that at anytime the data subject could withdraw its consent to processing. Imagine an individual giving consent for his image to be used in a commercial movie. at anytime, this person could revise its position and withdraw its consent, The organisation will have to pull out the movie. That should explain why consent is not always the most appropriate basis.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/legitimate-interests/when-can-we-rely-on-legitimate-interests/\">The UK ICO</a> website explain : \"<em>Legitimate interests is the most flexible of the six lawful bases. It is not focused on a particular purpose and therefore gives you more scope to potentially rely on it in many different circumstances.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>It may be the most appropriate basis when:</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>the processing is not required by law but is of a clear benefit to you or others;</em></li><li><em>there’s a limited privacy impact on the individual;</em></li><li><em>the individual should reasonably expect you to use their data in that way; and</em></li><li><em>you cannot, or do not want to, give the individual full upfront control (ie consent) or bother them with disruptive consent requests when they are unlikely to object to the processing.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>However, it must be clear that Legitimate Interest is not simply the interest of the organisation. It is framed within strict conditions. A three part assessment that needs to be carefully conducted and communicated to the data subject at the time the data is collected. The jurisprudence has based the conditions of necessity and the respect of rights and freedoms of individuals.  Legitimate Interest, when validly demonstrated, can exempt from requesting formal consent. In a way, consent can be implicite as the data controller will be processing the data the way it is expected to act. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Extracts of the UK ICO website, for processing for marketing purposes to be lawful : \"<em>You still need to show that your processing passes the necessity and balancing tests</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>You may also need to be more specific about your purposes for some elements of your processing in order to show that processing is necessary and to weigh the benefits in the balancing test. For example, if you use profiling to target your marketing.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>When looking at the balancing test, you should also consider factors such as:</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>whether people would expect you to use their details in this way;</em></li><li><em>the potential nuisance factor of unwanted marketing messages; and</em></li><li><em>the effect your chosen method and frequency of communication might have on more vulnerable individuals.</em>\"</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Rowenna Fielding - a <em>\"Professional Data Protection Nerd, Information Governance\"</em> as she describes herself on her Linkedin profile - published a very useful reminder that hopefully will help to clarify some of the misinformation around Legitimate Interest. I could not say it any better, so I reproduce this here with her authorisation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>&nbsp;10 Legitimate Interests Lessons for Marketers :</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1. Just because you\'re interested, doesn\'t make it legitimate.  </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2. You can\'t use LI to avoid getting consent when you suspect the answer will be \"No\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> 3. Whether LI can be applied depends on your own assessment of what you\'re doing, why and how - which you will be expected to justify and defend. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4. LI is not \'unclear\' or \'ambiguous\'; it requires thinking to be done and a decision to be made. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>5. Publish your Legitimate Interests Assessments (LIA) if you anticipate/plan to reject objections to processing. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>6. If a law says you have to get consent for a processing activity, then forget about LI. You can\'t use it. Move on. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>7. LI is only a valid lawful basis for processing personal data if you\'re adhering to all of the principles. It\'s not a loophole around compliance. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>8. If your LIA is post-hoc rationalisation of something you won\'t consider ceasing to do even though you suspect it\'s a bit dodgy; then you wasted your time. Just make sure you have funds set aside to deal with complaints, regulatory action and reputation damage when you get found out. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>9. The ICO is not responsible for your continuing professional development 10. No-one else can do your thinking for you.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The same way that consent is not a universal panacea, Legitimate Interest has to be balanced and where there is a contract to justify the processing of personal data it can be better suited. The UK ICO has an <a href=\"https://ico.org.uk/for-organisations/resources-and-support/lawful-basis-interactive-guidance-tool\">online interactive tool</a> that helps select the most appropriate lawful base of processing.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>UPDATE by the UK ICO : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO has published a report highlighting major data protection concerns  in the advertising industry and the real time bidding (online advertising space sold to bidders almost instantaneously). Data about users, including personal data collected from cookies is shared, in real time, in order for marketplace participants to be informed about viewers of the advertising space . The data is being used without a lawful basis and that appropriate consent to deploy cookies under PECR has not been obtained.  </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO has flagged an incorrect reliance on legitimate interests as the lawful basis for processing personal data. When personal data is collected from cookies, consent is the only appropriate lawful basis under the GDPR and consent is nevertheless also a prerequisite under PECR for the associated cookies to be placed. The report highlights issues with transparency and accountability, control and supervision by market participants over the flows and sharing of data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Contact us at Data@DataRainbow.eu if you need further assistance to take you trough some of these complexities.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This publication is licensed under a Creative Commons Attribution 4.0 International<br>More information on the licence can be found <a href=\"http://creativecommons.org/licenses/by/4.0/\">here</a>. </p>\n<!-- /wp:paragraph -->','How to Understand the GDPR Legitimate Interest','Much confusion around the concept of Legitimate Interest justifying Personal Data Processing. Worth going back to the roots.','inherit','closed','closed','','267-revision-v1','','','2019-07-25 18:46:40','2019-07-25 17:46:40','',267,'https://datarainbow.eu/2019/07/25/267-revision-v1/',0,'revision','',0),(481,5,'2019-07-25 18:47:17','2019-07-25 17:47:17','<!-- wp:paragraph -->\n<p>Much confusion around the concept of Legitimate Interest justifying Personal Data Processing. Worth going back to the roots.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Article 6(1) of the GDPR</strong> sets out the conditions that must be met for the processing of personal data to be lawful. They are:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>(a) the data subject has given <strong>consent</strong> to the processing of their personal data for one or more specific purposes;&nbsp;</em><br><em>(b) processing is necessary for the performance of a <strong>contract</strong> to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;&nbsp;</em><br><em>(c) processing is necessary for compliance with a <strong>legal obligation</strong> to which the controller is subject;&nbsp;</em><br><em>(d) processing is necessary in order to protect the <strong>vital interests</strong> of the data subject;&nbsp;</em><br><em>(e) processing is necessary for the performance of a task carried out in the <strong>public interest</strong> or in the exercise of official authority vested in the controller;&nbsp;</em><br><em>(f) processing is necessary for the purposes of the <strong>legitimate interests</strong> pursued by a controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. This shall not apply to processing carried out by public authorities in the performance of their tasks.</em><br>These conditions are all equally valid, regardless the order of appearance. Organisations should assess which of these grounds are most appropriate for different processing activities and then fulfil any further requirements the GDPR sets out for these conditions (GDPR Article 5).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Many organisations have been wrongly advised to opt for consent. The new regulation that entered into force on May 2018 requires a higher standard of consent. That explains the deluge of re-consent emails sent out around May last year. The other inconvenient of consent is the requirement to keep a register of all granted consents, with the risk that at anytime the data subject could withdraw its consent to processing. Imagine an individual giving consent for his image to be used in a commercial movie. at anytime, this person could revise its position and withdraw its consent, The organisation will have to pull out the movie. That should explain why consent is not always the most appropriate basis.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/legitimate-interests/when-can-we-rely-on-legitimate-interests/\">The UK ICO</a> website explain : \"<em>Legitimate interests is the most flexible of the six lawful bases. It is not focused on a particular purpose and therefore gives you more scope to potentially rely on it in many different circumstances.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>It may be the most appropriate basis when:</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>the processing is not required by law but is of a clear benefit to you or others;</em></li><li><em>there’s a limited privacy impact on the individual;</em></li><li><em>the individual should reasonably expect you to use their data in that way; and</em></li><li><em>you cannot, or do not want to, give the individual full upfront control (ie consent) or bother them with disruptive consent requests when they are unlikely to object to the processing.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>However, it must be clear that Legitimate Interest is not simply the interest of the organisation. It is framed within strict conditions. A three part assessment that needs to be carefully conducted and communicated to the data subject at the time the data is collected. The jurisprudence has based the conditions of necessity and the respect of rights and freedoms of individuals.  Legitimate Interest, when validly demonstrated, can exempt from requesting formal consent. In a way, consent can be implicite as the data controller will be processing the data the way it is expected to act. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Extracts of the UK ICO website, for processing for marketing purposes to be lawful : \"<em>You still need to show that your processing passes the necessity and balancing tests</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>You may also need to be more specific about your purposes for some elements of your processing in order to show that processing is necessary and to weigh the benefits in the balancing test. For example, if you use profiling to target your marketing.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>When looking at the balancing test, you should also consider factors such as:</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>whether people would expect you to use their details in this way;</em></li><li><em>the potential nuisance factor of unwanted marketing messages; and</em></li><li><em>the effect your chosen method and frequency of communication might have on more vulnerable individuals.</em>\"</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Rowenna Fielding - a <em>\"Professional Data Protection Nerd, Information Governance\"</em> as she describes herself on her Linkedin profile - published a very useful reminder that hopefully will help to clarify some of the misinformation around Legitimate Interest. I could not say it any better, so I reproduce this here with her authorisation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>&nbsp;10 Legitimate Interests Lessons for Marketers :</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1. Just because you\'re interested, doesn\'t make it legitimate.  </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2. You can\'t use LI to avoid getting consent when you suspect the answer will be \"No\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> 3. Whether LI can be applied depends on your own assessment of what you\'re doing, why and how - which you will be expected to justify and defend. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4. LI is not \'unclear\' or \'ambiguous\'; it requires thinking to be done and a decision to be made. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>5. Publish your Legitimate Interests Assessments (LIA) if you anticipate/plan to reject objections to processing. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>6. If a law says you have to get consent for a processing activity, then forget about LI. You can\'t use it. Move on. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>7. LI is only a valid lawful basis for processing personal data if you\'re adhering to all of the principles. It\'s not a loophole around compliance. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>8. If your LIA is post-hoc rationalisation of something you won\'t consider ceasing to do even though you suspect it\'s a bit dodgy; then you wasted your time. Just make sure you have funds set aside to deal with complaints, regulatory action and reputation damage when you get found out. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>9. The ICO is not responsible for your continuing professional development 10. No-one else can do your thinking for you.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The same way that consent is not a universal panacea, Legitimate Interest has to be balanced and where there is a contract to justify the processing of personal data it can be better suited. The UK ICO has an <a href=\"https://ico.org.uk/for-organisations/resources-and-support/lawful-basis-interactive-guidance-tool\">online interactive tool</a> that helps select the most appropriate lawful base of processing.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>UPDATE by the UK ICO : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO has published a report highlighting major data protection concerns  in the advertising industry and the real time bidding (online advertising space sold to bidders almost instantaneously). Data about users, including personal data collected from cookies is shared, in real time, in order for marketplace participants to be informed about viewers of the advertising space . The data is being used without a lawful basis and that appropriate consent to deploy cookies under PECR has not been obtained.  </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO has flagged an incorrect reliance on legitimate interests as the lawful basis for processing personal data. When personal data is collected from cookies, consent is the only appropriate lawful basis under the GDPR and consent is nevertheless also a prerequisite under PECR for the associated cookies to be placed. The report highlights issues with transparency and accountability, control and supervision by market participants over the flows and sharing of data. Here is the full <a href=\"https://ico.org.uk/media/about-the-ico/documents/2615156/adtech-real-time-bidding-report-201906.pdf\">report</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Contact us at Data@DataRainbow.eu if you need further assistance to take you trough some of these complexities.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This publication is licensed under a Creative Commons Attribution 4.0 International<br>More information on the licence can be found <a href=\"http://creativecommons.org/licenses/by/4.0/\">here</a>. </p>\n<!-- /wp:paragraph -->','How to Understand the GDPR Legitimate Interest','Much confusion around the concept of Legitimate Interest justifying Personal Data Processing. Worth going back to the roots.','inherit','closed','closed','','267-revision-v1','','','2019-07-25 18:47:17','2019-07-25 17:47:17','',267,'https://datarainbow.eu/2019/07/25/267-revision-v1/',0,'revision','',0),(484,5,'2019-10-12 00:33:36','2019-10-11 23:33:36','<!-- wp:paragraph -->\n<p>Cybertalks publish WOMEN IN CYBER! Here is a sneak preview of 5 amazing women that are experts in cybersecurity speaking out about the importance of women in the cyber industry! <a href=\"https://www.linkedin.com/in/ACoAAAAteKcBtFc457ep-RMibE_gH95vaVzQIMg/\">Jane Frankland</a><a href=\"https://www.linkedin.com/in/ACoAAANQufwBINTh-Zhy2lClO-PQbpRDybfy11A/\">ASLI YILDIZ, LLM</a><a href=\"https://www.linkedin.com/in/ACoAACH29hIBq7uJ5veyfswA_nDM__CxmgPfD40/\">Erica Stanford</a><a href=\"https://www.linkedin.com/in/ACoAAAEjZSMBPHCDNL0ZfbkbHBFk7NBEwjLsbi0/\"> </a>including<a href=\"https://www.linkedin.com/in/ACoAAAEjZSMBPHCDNL0ZfbkbHBFk7NBEwjLsbi0/\"> Tara TAUBMAN-BASSIRIAN LLM.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tara is interviewed about Brexit and the UK data Protection. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK Information commissionner has drafted a guidance <a href=\"https://ico.org.uk/for-organisations/data-protection-and-brexit/data-protection-if-theres-no-brexit-deal/\">Data protection if there\'s no Brexit deal</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From the EDPB <a href=\"https://edpb.europa.eu/sites/edpb/files/files/file1/edpb-2019-02-12-infonote-nodeal-brexit_en.pdf\">Information note on data transfers under the GDPR in the<br> event of a no-deal Brexit,&nbsp;</a>Adopted on 12 February 2019</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From the French Data Protection Authority, the CNIL : <a href=\"https://www.cnil.fr/fr/cnil-direct/question/1267\">Règlement européen : Brexit (\"British Exit\"), quelles conséquences sur l\'application du règlement européen au Royaume-Uni ?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The main point is with a no deal Brexit, UK becomes a country of non adequate data protection. Data could still be exported from the UK to the EU, however, import of data from the EU to the UK will have to be protected in case by case, with Standard Contractual Clauses to be approved, a lengthy process. Binding Corporate Rules are less common. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>What happens when data is being processed \"on behalf of\" the UK (or non-EU) controller Art 44 GDPR? There is no set of Clauses which deal with processor to controller transfers. Additionally, organisations regularly trading with EU will have to appoint a representative in the EU country where they have the most activity. Non EU organisations who had adopted UK as a country of their representation will have to define a new representative within the EU. This is not going to be the only complexity of dealing with the Brexit with no deal. Is your organisation ready for the jump?</p>\n<!-- /wp:paragraph -->','WOMEN IN CYBER! Brexit no Deal','Cybertalks publish WOMEN IN CYBER! Tara Taubman-Bassirian is interviewed about Brexit and the UK data Protection.','publish','closed','closed','','women-in-cyber-brexit-no-deal','','','2019-10-12 00:33:39','2019-10-11 23:33:39','',0,'http://datarainbow.eu/?p=484',0,'post','',0),(485,5,'2019-10-11 18:33:53','2019-10-11 17:33:53','<!-- wp:paragraph -->\n<p>Cybertalks publish WOMEN IN CYBER! Here is a sneak preview of 5 amazing women that are experts in cybersecurity speaking out about the importance of women in the cyber industry! <a href=\"https://www.linkedin.com/in/ACoAAAAteKcBtFc457ep-RMibE_gH95vaVzQIMg/\">Jane Frankland</a><a href=\"https://www.linkedin.com/in/ACoAAANQufwBINTh-Zhy2lClO-PQbpRDybfy11A/\">ASLI YILDIZ, LLM</a><a href=\"https://www.linkedin.com/in/ACoAACH29hIBq7uJ5veyfswA_nDM__CxmgPfD40/\">Erica Stanford</a><a href=\"https://www.linkedin.com/in/ACoAAAEjZSMBPHCDNL0ZfbkbHBFk7NBEwjLsbi0/\"> </a>including<a href=\"https://www.linkedin.com/in/ACoAAAEjZSMBPHCDNL0ZfbkbHBFk7NBEwjLsbi0/\"> Tara TAUBMAN-BASSIRIAN LLM. </a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tara is interviewed about Brexit and the UK data Protection. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK Information commissionner has drafted a guidance <a href=\"https://ico.org.uk/for-organisations/data-protection-and-brexit/data-protection-if-theres-no-brexit-deal/\">Data protection if there\'s no Brexit deal</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From the EDPB <a href=\"https://edpb.europa.eu/sites/edpb/files/files/file1/edpb-2019-02-12-infonote-nodeal-brexit_en.pdf\">Information note on data transfers under the GDPR in the<br> event of a no-deal Brexit, </a>Adopted on 12 February 2019</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From the French Data Protection Authority, the CNIL : Règlement européen : Brexit (\"British Exit\"), quelles conséquences sur l\'application du règlement européen au Royaume-Uni ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The main point is with a no deal Brexit, UK becomes a country of non adequate data protection. Data could still be exported from the UK to the EU, however, import of data from the EU to the UK will have to be protected in case by case, with Standard Contractual Clauses to be approved, a lengthy process. Additionally, organisations regularly trading with EU will have to appoint a representative in the EU country where they have the most activity. Non EU organisations who had adopted UK as a country of their representation will have to define a new representative within the EU. This is not going to be the only complexity of dealing with the Brexit with no deal. Is your organisation ready for the jump?</p>\n<!-- /wp:paragraph -->','WOMEN IN CYBER! Brexit no Deal','','inherit','closed','closed','','484-revision-v1','','','2019-10-11 18:33:53','2019-10-11 17:33:53','',484,'https://datarainbow.eu/2019/10/11/484-revision-v1/',0,'revision','',0),(486,5,'2019-10-12 00:33:36','2019-10-11 23:33:36','<!-- wp:paragraph -->\n<p>Cybertalks publish WOMEN IN CYBER! Here is a sneak preview of 5 amazing women that are experts in cybersecurity speaking out about the importance of women in the cyber industry! <a href=\"https://www.linkedin.com/in/ACoAAAAteKcBtFc457ep-RMibE_gH95vaVzQIMg/\">Jane Frankland</a><a href=\"https://www.linkedin.com/in/ACoAAANQufwBINTh-Zhy2lClO-PQbpRDybfy11A/\">ASLI YILDIZ, LLM</a><a href=\"https://www.linkedin.com/in/ACoAACH29hIBq7uJ5veyfswA_nDM__CxmgPfD40/\">Erica Stanford</a><a href=\"https://www.linkedin.com/in/ACoAAAEjZSMBPHCDNL0ZfbkbHBFk7NBEwjLsbi0/\"> </a>including<a href=\"https://www.linkedin.com/in/ACoAAAEjZSMBPHCDNL0ZfbkbHBFk7NBEwjLsbi0/\"> Tara TAUBMAN-BASSIRIAN LLM.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tara is interviewed about Brexit and the UK data Protection. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK Information commissionner has drafted a guidance <a href=\"https://ico.org.uk/for-organisations/data-protection-and-brexit/data-protection-if-theres-no-brexit-deal/\">Data protection if there\'s no Brexit deal</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From the EDPB <a href=\"https://edpb.europa.eu/sites/edpb/files/files/file1/edpb-2019-02-12-infonote-nodeal-brexit_en.pdf\">Information note on data transfers under the GDPR in the<br> event of a no-deal Brexit,&nbsp;</a>Adopted on 12 February 2019</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From the French Data Protection Authority, the CNIL : <a href=\"https://www.cnil.fr/fr/cnil-direct/question/1267\">Règlement européen : Brexit (\"British Exit\"), quelles conséquences sur l\'application du règlement européen au Royaume-Uni ?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The main point is with a no deal Brexit, UK becomes a country of non adequate data protection. Data could still be exported from the UK to the EU, however, import of data from the EU to the UK will have to be protected in case by case, with Standard Contractual Clauses to be approved, a lengthy process. Binding Corporate Rules are less common. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>What happens when data is being processed \"on behalf of\" the UK (or non-EU) controller Art 44 GDPR? There is no set of Clauses which deal with processor to controller transfers. Additionally, organisations regularly trading with EU will have to appoint a representative in the EU country where they have the most activity. Non EU organisations who had adopted UK as a country of their representation will have to define a new representative within the EU. This is not going to be the only complexity of dealing with the Brexit with no deal. Is your organisation ready for the jump?</p>\n<!-- /wp:paragraph -->','WOMEN IN CYBER! Brexit no Deal','Cybertalks publish WOMEN IN CYBER! Tara Taubman-Bassirian is interviewed about Brexit and the UK data Protection.','inherit','closed','closed','','484-revision-v1','','','2019-10-12 00:33:36','2019-10-11 23:33:36','',484,'https://datarainbow.eu/2019/10/12/484-revision-v1/',0,'revision','',0),(493,5,'2019-11-26 21:41:07','2019-11-26 21:41:07','<!-- wp:embed {\"url\":\"https:\\/\\/www.voiceamerica.com\\/episode\\/112620\\/null\"} -->\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttps://www.voiceamerica.com/episode/112620/null\n</div></figure>\n<!-- /wp:embed -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4><strong>GDPR, Data Privacy Day and The Need for Privacy</strong></h4>\n<!-- /wp:heading -->\n\n<!-- wp:heading {\"level\":5} -->\n<h5>Hosted by Rebecca Herold</h5>\n<!-- /wp:heading -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td><a target=\"_blank\" href=\"https://www.voiceamerica.com/guest/42903/tara-taubman-bassirian\" rel=\"noreferrer noopener\">Tara Taubman-Bassirian</a></td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4><a href=\"https://www.voiceamerica.com/episode/112620/gdpr-data-privacy-day-and-the-need-for-privacy\">Episode Description</a></h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>2018 privacy hero of the year, Tara Taubman-Bassirian, discusses the EU GDPR, the increasing need for protecting privacy in the increasingly technology-rich environment, and some activities for Data Privacy Day on January 28, 2019. What are the benefits of GDPR? Where can it be improved upon? What do companies struggle with most for GDPR compliance? What is a “hot potato” GDPR issue? How are binding corporate rules (BCRs) used for non-adequate countries? How has Brexit impacted GDPR compliance? Why does privacy matter? What are the current largest threats to privacy? What are some activities for Data Privacy Day? Hear Tara discuss these topics, and more, <a href=\"https://www.voiceamerica.com/episode/112620/gdpr-data-privacy-day-and-the-need-for-privacy\">with Rebecca</a>.</p>\n<!-- /wp:paragraph -->','Interview With the Privacy Professor Rebecca Herold','2018 privacy hero of the year, Tara Taubman-Bassirian, discusses the EU GDPR, the increasing need for protecting privacy in the increasingly technology-rich environment, and some activities for Data Privacy Day on January 28, 2019. What are the benefits of GDPR? Where can it be improved upon? What do companies struggle with most for GDPR compliance? What is a “hot potato” GDPR issue? How are binding corporate rules (BCRs) used for non-adequate countries? How has Brexit impacted GDPR compliance? Why does privacy matter? What are the current largest threats to privacy? What are some activities for Data Privacy Day? Hear Tara discuss these topics, and more, with Rebecca.','publish','closed','closed','','interview-with-the-privacy-professor-rebecca-herold','','','2020-01-18 13:06:41','2020-01-18 13:06:41','',0,'http://datarainbow.eu/?p=493',0,'post','',0),(494,5,'2019-11-26 21:37:37','2019-11-26 21:37:37','{{unknown}}','','','publish','closed','closed','','5e49e2f84f6e8c3ca86f42b803c9421f','','','2019-11-26 21:37:37','2019-11-26 21:37:37','',0,'https://datarainbow.eu/2019/11/26/5e49e2f84f6e8c3ca86f42b803c9421f/',0,'oembed_cache','',0),(495,5,'2019-11-26 21:41:07','2019-11-26 21:41:07','<!-- wp:embed {\"url\":\"https://www.voiceamerica.com/episode/112620/null\"} -->\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttps://www.voiceamerica.com/episode/112620/null\n</div></figure>\n<!-- /wp:embed -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4><strong>GDPR, Data Privacy Day and The Need for Privacy</strong></h4>\n<!-- /wp:heading -->\n\n<!-- wp:heading {\"level\":5} -->\n<h5>Hosted by Rebecca Herold</h5>\n<!-- /wp:heading -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td><a target=\"_blank\" href=\"https://www.voiceamerica.com/guest/42903/tara-taubman-bassirian\" rel=\"noreferrer noopener\">Tara Taubman-Bassirian</a></td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4>Episode Description</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>2018 privacy hero of the year, Tara Taubman-Bassirian, discusses the EU GDPR, the increasing need for protecting privacy in the increasingly technology-rich environment, and some activities for Data Privacy Day on January 28, 2019. What are the benefits of GDPR? Where can it be improved upon? What do companies struggle with most for GDPR compliance? What is a “hot potato” GDPR issue? How are binding corporate rules (BCRs) used for non-adequate countries? How has Brexit impacted GDPR compliance? Why does privacy matter? What are the current largest threats to privacy? What are some activities for Data Privacy Day? Hear Tara discuss these topics, and more, with Rebecca.</p>\n<!-- /wp:paragraph -->','Interview With the Privacy Professor Rebecca Herold','','inherit','closed','closed','','493-revision-v1','','','2019-11-26 21:41:07','2019-11-26 21:41:07','',493,'https://datarainbow.eu/2019/11/26/493-revision-v1/',0,'revision','',0),(497,5,'2019-11-26 21:42:24','2019-11-26 21:42:24','<!-- wp:embed {\"url\":\"https://www.voiceamerica.com/episode/112620/null\"} -->\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttps://www.voiceamerica.com/episode/112620/null\n</div></figure>\n<!-- /wp:embed -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4><strong>GDPR, Data Privacy Day and The Need for Privacy</strong></h4>\n<!-- /wp:heading -->\n\n<!-- wp:heading {\"level\":5} -->\n<h5>Hosted by Rebecca Herold</h5>\n<!-- /wp:heading -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td><a target=\"_blank\" href=\"https://www.voiceamerica.com/guest/42903/tara-taubman-bassirian\" rel=\"noreferrer noopener\">Tara Taubman-Bassirian</a></td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4>Episode Description</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>2018 privacy hero of the year, Tara Taubman-Bassirian, discusses the EU GDPR, the increasing need for protecting privacy in the increasingly technology-rich environment, and some activities for Data Privacy Day on January 28, 2019. What are the benefits of GDPR? Where can it be improved upon? What do companies struggle with most for GDPR compliance? What is a “hot potato” GDPR issue? How are binding corporate rules (BCRs) used for non-adequate countries? How has Brexit impacted GDPR compliance? Why does privacy matter? What are the current largest threats to privacy? What are some activities for Data Privacy Day? Hear Tara discuss these topics, and more, with Rebecca.</p>\n<!-- /wp:paragraph -->','Interview With the Privacy Professor Rebecca Herold','2018 privacy hero of the year, Tara Taubman-Bassirian, discusses the EU GDPR, the increasing need for protecting privacy in the increasingly technology-rich environment, and some activities for Data Privacy Day on January 28, 2019. What are the benefits of GDPR? Where can it be improved upon? What do companies struggle with most for GDPR compliance? What is a “hot potato” GDPR issue? How are binding corporate rules (BCRs) used for non-adequate countries? How has Brexit impacted GDPR compliance? Why does privacy matter? What are the current largest threats to privacy? What are some activities for Data Privacy Day? Hear Tara discuss these topics, and more, with Rebecca.','inherit','closed','closed','','493-revision-v1','','','2019-11-26 21:42:24','2019-11-26 21:42:24','',493,'https://datarainbow.eu/2019/11/26/493-revision-v1/',0,'revision','',0),(498,5,'2019-11-26 21:43:43','2019-11-26 21:43:43','<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/cybertalks.co.uk\\/interviews\\/ico-slow-to-fine-organisations\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"cybertalks\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-cybertalks\"><div class=\"wp-block-embed__wrapper\">\nhttps://cybertalks.co.uk/interviews/ico-slow-to-fine-organisations/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Pre GDPR data privacy principles were ignored…and companies are still complacent as the ICO has been slow to fine organisations for failure to comply.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://cybertalks.co.uk/profile/tara-taubman-bassirian/\">Tara Taubman-Bassirian</a> LLM, GDPR, Data Protection and IP consultant – Voted Privacy Hero of the Year, talks to <a href=\"https://cybertalks.co.uk/profile/karla-reffold/\">Karla Reffold</a> in a <a href=\"https://cybertalks.co.uk/interviews/ico-slow-to-fine-organisations/\">Cybertals interview</a> about GDPR and the rights of Data Subjects.</p>\n<!-- /wp:paragraph -->','Interview by Cybertalks','','publish','closed','closed','','interview-by-cybertalks','','','2020-01-18 01:04:47','2020-01-18 01:04:47','',0,'http://datarainbow.eu/?p=498',0,'post','',0),(499,5,'2019-11-26 21:43:43','2019-11-26 21:43:43','<!-- wp:core-embed/wordpress {\"url\":\"https://cybertalks.co.uk/interviews/ico-slow-to-fine-organisations/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"cybertalks\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-cybertalks\"><div class=\"wp-block-embed__wrapper\">\nhttps://cybertalks.co.uk/interviews/ico-slow-to-fine-organisations/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Pre GDPR data privacy principles were ignored…and companies are still complacent as the ICO has been slow to fine organisations for failure to comply.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://cybertalks.co.uk/profile/tara-taubman-bassirian/\">Tara Taubman-Bassirian</a>&nbsp;LLM,&nbsp;GDPR, Data Protection and IP consultant – Voted Privacy Hero of the Year, talks to&nbsp;<a href=\"https://cybertalks.co.uk/profile/karla-reffold/\">Karla Reffold</a>&nbsp;about GDPR and the rights of Data Subjects.</p>\n<!-- /wp:paragraph -->','Interview by Cybertalks','','inherit','closed','closed','','498-revision-v1','','','2019-11-26 21:43:43','2019-11-26 21:43:43','',498,'https://datarainbow.eu/2019/11/26/498-revision-v1/',0,'revision','',0),(502,5,'2019-11-26 21:50:12','2019-11-26 21:50:12','<!-- wp:paragraph -->\n<p>Following an incident reported to the ICO in September 2018, the Information Commissioners Office (<strong>ICO</strong>), the UK\'s data protection supervisory authority, investigated and uncovered that the personal data of up to 500,000 BA customers had been unlawfully accessed. The BA\'s website had been diverted to a dummy site where customer details were harvested by hackers. Some credit cards long number and security codes had been discolosed causing serious security breaches. On 8th of July 2019, the ICO published a <a href=\"https://lnkd.in/eFdbCXT\">Notice of Intent</a> to fine British Airways 183 million £.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><em>\"ICO has been investigating this case as lead supervisory authority on behalf of other EU Member State data protection authorities. It has also liaised with other regulators. Under the GDPR ‘one stop shop’ provisions the data protection authorities in the EU whose residents have been affected will also have the chance to comment on the ICO’s findings.</em></p><p><em>The ICO will consider carefully the representations made by the company and the other concerned data protection authorities before it takes its final decision.\"</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>  The Following day, a Notice of Intention was issued against Marriott International.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>\"Following an extensive investigation the ICO has issued a notice of its intention to fine Marriott International £99,200,396 for infringements of the General Data Protection Regulation (GDPR).\"</p><p>The proposed fine relates to a cyber incident which was notified to the ICO by Marriott in November 2018. A variety of personal data contained in approximately 339 million guest records globally were exposed by the incident, of which around 30 million related to residents of 31 countries in the European Economic Area (EEA). Seven million related to UK residents.</p><p>It is believed the vulnerability began when the systems of the Starwood hotels group were compromised in 2014. Marriott subsequently acquired Starwood in 2016, but the exposure of customer information was not discovered until 2018. The ICO’s investigation found that Marriott failed to undertake sufficient due diligence when it bought Starwood and should also have done more to secure its systems.</p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>It will be interesting to watch the effects of a no deal Brexit on these cases where the ICO will no longer be a lead authority and UK possibly becoming a country of non adequate data protection.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Information Commissioner Elizabeth Denham said:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><em>“The GDPR makes it clear that organisations must be accountable for the personal data they hold. This can include carrying out proper due diligence when making a corporate acquisition, and putting in place proper accountability measures to assess not only what personal data has been acquired, but also how it is protected.</em></p><p><em>“<strong>Personal data has a real value so organisations have a legal duty to ensure its security,</strong> just like they would do with any other asset. If that doesn’t happen, we will not hesitate to take strong action when necessary to protect the rights of the public.”</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>In an <a href=\"https://www.wsj.com/articles/u-k-regulator-on-why-it-is-pursuing-record-fines-against-ba-marriott-11562751006\">interview with WSJ Pro Cybersecurity, the&nbsp;Information Commissioner Elizabeth Denham</a> said her office considered cybersecurity gaps, among other factors, in proposing that&nbsp;<a href=\"https://quotes.wsj.com/MAR\">Marriott International</a>&nbsp;Inc.&nbsp;and <a href=\"https://quotes.wsj.com/ICAGY\">British Airways</a>&nbsp;’ parent company pay the biggest fines to date under Europe’s data-privacy laws.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>\'<em>Companies had fundamental security flaws, says Information Commissioner Elizabeth Denham; their size and number of people affected also played a role</em>\'</p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>Both first major cases investigated by the ICO after the FB/Cambridge Analytics concern the security of personal data. It is unknown if they have been found to have infringed the \'Security Principle\' Article 5(1)(f) or the \'Security of Processing\' Article 32(1). </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>BA and Marriott International have 21 days to make representation. Other concerned EU national data protection supervisory authorities will be able to comment until the final Monetary Penalty Notice is issued.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Both organisations intend to appeal the decision.  Appeal will be presented to the First Tier Tribunal in the General Regulatory Chamber within 28 days of receiving the MPN (Section 162, UK Data Protection Act 2018).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The First Tier Tribunal must allow the appeal if it considers that either the ICO\'s decision was not made in accordance with the law, or a different outcome was expected.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Tribunal may also dismiss the appeal, modify the notice or cancel the ICO\'s Intention of fine.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>More investigations are coming to an end. Expected outcomes from Carphone Warehouse and TicketMasters are awaited. The Grace period seems to have ended.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Meanwhile, The French CNIL has kept its promised going after estate agencies, it has issued a fine of 400.000 €. In June, the <a href=\"https://www.huntonprivacyblog.com/2019/06/11/cnil-fines-french-real-estate-service-provider-for-data-security-and-retention-failures/\">CNIL Fines French Real Estate Service Provider for Data Security and Retention Failures.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We will conclude by saying GDPR compliance could seem costly, watch for the cost of non compliance. Privacy Impact Assessment/DPIA, data minimisation and other healthy GDPR requirement would have avoid the security breaches that cost in fines and trust. Next to Data Protection authorities sanctions are customers distrust and other legal actions including class actions.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a rel=\"noreferrer noopener\" href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->','UK Watchdog Investigation of British Airways and Marriott Hotels Security Breaches','Following an incident reported to the ICO in September 2018, the Information Commissioners Office (ICO), the UK\'s data protection supervisory authority, investigated and uncovered that the personal data of up to 500,000 BA customers had been unlawfully accessed. The BA\'s website had been diverted to a dummy site where customer details were harvested by hackers. Some credit cards long number and security codes had been discolosed causing serious security breaches. On 8th of July 2019, the ICO published a Notice of Intent to fine British Airways 183 million £.','inherit','closed','closed','','467-revision-v1','','','2019-11-26 21:50:12','2019-11-26 21:50:12','',467,'https://datarainbow.eu/2019/11/26/467-revision-v1/',0,'revision','',0),(503,5,'2019-11-26 22:12:37','2019-11-26 22:12:37','<!-- wp:paragraph -->\n<p>Hilcenko, Christine; Taubman-Bassirian, Tara</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Access to knowledge for everyone in the increasingly-interconnected society has been a tool for democracy. We discuss here the dangers of a world online and the growing concerns about state surveillance, security, privacy and exploitation. We discuss our right to protect our individual freedom. We conclude that privacy is a fundamental Human Rights in order to guarantee human dignity and freedom.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://repozytorium.ur.edu.pl/handle/item/4959\">https://repozytorium.ur.edu.pl/handle/item/4959</a></p>\n<!-- /wp:paragraph -->','Privacy, Education and Human Dignity','Access to knowledge for everyone in the increasingly-interconnected society has been a tool for democracy. We discuss here the dangers of a world online and the growing concerns about state surveillance, security, privacy and exploitation. We discuss our right to protect our individual freedom. We conclude that privacy is a fundamental Human Rights in order to guarantee human dignity and freedom.','publish','closed','closed','','privacy-education-and-human-dignity','','','2019-11-26 22:12:40','2019-11-26 22:12:40','',0,'http://datarainbow.eu/?p=503',0,'post','',0),(504,5,'2019-11-26 22:08:17','2019-11-26 22:08:17','{{unknown}}','','','publish','closed','closed','','0bbda80bf64496c792e8ba4c7a97b3cd','','','2019-11-26 22:08:17','2019-11-26 22:08:17','',0,'https://datarainbow.eu/2019/11/26/0bbda80bf64496c792e8ba4c7a97b3cd/',0,'oembed_cache','',0),(505,5,'2019-11-26 22:12:37','2019-11-26 22:12:37','<!-- wp:paragraph -->\n<p>Hilcenko, Christine; Taubman-Bassirian, Tara</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Access to knowledge for everyone in the increasingly-interconnected society has been a tool for democracy. We discuss here the dangers of a world online and the growing concerns about state surveillance, security, privacy and exploitation. We discuss our right to protect our individual freedom. We conclude that privacy is a fundamental Human Rights in order to guarantee human dignity and freedom.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://repozytorium.ur.edu.pl/handle/item/4959\">https://repozytorium.ur.edu.pl/handle/item/4959</a></p>\n<!-- /wp:paragraph -->','Privacy, Education and Human Dignity','Access to knowledge for everyone in the increasingly-interconnected society has been a tool for democracy. We discuss here the dangers of a world online and the growing concerns about state surveillance, security, privacy and exploitation. We discuss our right to protect our individual freedom. We conclude that privacy is a fundamental Human Rights in order to guarantee human dignity and freedom.','inherit','closed','closed','','503-revision-v1','','','2019-11-26 22:12:37','2019-11-26 22:12:37','',503,'https://datarainbow.eu/2019/11/26/503-revision-v1/',0,'revision','',0),(508,5,'2020-01-03 20:22:55','2020-01-03 20:22:55','<!-- wp:paragraph -->\n<p>A New Year, a new decade, a new Privacy law, the <a href=\"https://www.caprivacy.org\">California Consumer Privacy Act</a> entered into force this January 2020.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU General Data Protection Regulation made a big bang noise with its unprecedented treat of fines. The general public started to be more aware of the value of their personal data. As we had predicted we whitened a deluge of Data Subject Access Request. However, Data Protection Authorities enforcements in the EU have been rather disappointing. The <a href=\"https://datarainbow.eu/2019/07/10/uk-watchdog-investigation-of-british-airways-and-marriott-hotels-security-breaches/\">UK ICO</a> has just announced <a href=\"https://www.mishcon.com/news/ico-agrees-delay-over-gdpr-fines-with-both-ba-and-marriott\">the British Airways and Marriott Hotels \'intends of fine\' decision has been delayed</a>. The Irish Data Protection Commissionner is still awaited to prosecute the <a href=\"https://datarainbow.eu/2019/04/04/facebook-saga/\">US corporations</a> who have found refuge in Ireland for its tax and legislation clemency. <a href=\"https://datarainbow.eu/2019/01/27/french-cnils-six-first-month-of-gdpr/\">The French CNIL</a> change of Presidency seems to have affected its activities. France has so far created two breaches in the principle of consistency mechanisms in the enforcement of the regulation : first by following the Spanish authority in the creation of Data Protection Officers certification despite the position of the EDPB and more importantly by delaying enforcement of cookies and tracking regulations. France is in total contradiction with the recent European Court of Justice ruling in Planet 49. Web tracking cookies that are not purely functional require clear transparency in the language of the target audience, and should require pre consent. This is important and we deeply deplore official websites allowing the web tracking of their visitors. Sharing personal data with third parties - think Google Analytics or Facebook React JS free library codes as we have previously wrote about - result on becoming co-controller and liable as such. So far, kudos to the <a href=\"http://www.pearltrees.com/privacyday/romania/id25627143\">Romanian DPA</a> for its enforcement and the <a href=\"https://datarainbow.eu/2019/02/22/increasing-fines-expected-from-german-dpas/\">German DPAs</a> keeping their promise. The <a href=\"http://www.pearltrees.com/privacyday/belgium-dpa/id23770807#item282897698\">Belgian DPA</a> has shown some recent activities. A few member states have not yet catch up with the regulation. Overall, as the <a href=\"http://www.pearltrees.com/privacyday/european-data-protection-board/id23766290\">EDBP</a> has warned, DPAs have lacked resources.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU\'s top data protection official Andrea Jelinek told the EU parliament that 4/5th of member state authorities had insufficient funds and/or personnel to do their job. She said member states needed to make sure to provide sufficient resources. <a href=\"https://www.politico.eu/article/we-have-a-huge-problem-european-regulator-despairs-over-lack-of-enforcement/\">‘We have a huge problem’: European regulator despairs over lack of enforcement. The world’s toughest privacy law proves toothless in the eyes of many critics.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Paul Nemitz, Principal Adviser on Justice Policy, EU Commission; Member of German Data Ethics, wrote on a tweet \"<em>Governments have lost ability to control </em><a href=\"https://twitter.com/hashtag/Google?src=hashtag_click\"><em>#Google</em></a><em> and </em><a href=\"https://twitter.com/hashtag/Facebook?src=hashtag_click\"><em>#Facebook</em></a><em>. These companies are undermining the process of democracy itself, becoming facilitators of political disinformation, influencing the political system and disrupting labour and capital markets</em>\". <br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Opinion Global Economy A productive economic bubble is my wish for 2020 Speculation is a part of innovation and in the right conditions it can be a positive force RANA FOROOHAR</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> <a href=\"http://www.pearltrees.com/privacyday/facial-recognition/id23427152\">Facial recognition technologies</a> continue their controversial expansion inspiring a wave of privacy fears as the software creeps into every corner of life in the US an Europe, with Chinese technologies.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596\">IoT devices</a> are showing their insecurity, one example being the<a href=\"https://www-independent-co-uk.cdn.ampproject.org/c/s/www.independent.co.uk/life-style/gadgets-and-tech/news/google-nest-cameras-spying-home-xiaomi-hub-a9268696.html?amp&amp;fbclid=IwAR2DHiQ-Kb-cVGHOQdWMtt3lreiKBHdEtZJoOnU-grp9D2vLVffgk8RuK-4\"> Google connected camera</a> after the<a href=\"https://gizmodo-com.cdn.ampproject.org/c/s/gizmodo.com/rings-security-woes-cause-some-tech-review-sites-to-rec-1840634944/amp?fbclid=IwAR0oiPZy0PvKi01LRr95bGX5ff2emGY7SzGtv-PLjMP6onABva_SFJq30b4\"> Amazon Ring</a> hack due to weak passwords or <a href=\"https://amp-usatoday-com.cdn.ampproject.org/c/s/amp.usatoday.com/amp/2792152001?fbclid=IwAR2gSMctKCRkGhfyOCixulfNHGlx8kRqMKRQwpBdFLQRxJQTzK0r7I_3ZQ4\">Smart TVs spying</a>. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>\"Smart doorbells are primarily marketed as a deterrent to stop people from committing crimes, and it\'s an aspiring goal to shoot for. The problem with any type of surveillance apparatus is when it wanders away from its intended use.” <a href=\"https://iapp.org/news/a/with-smart-doorbells-this-holiday-its-about-balancing-the-naughty-and-nice/?fbclid=IwAR0aGN3XXMRzbjxCdZRUgo-M3tLSXAXh17XYDvk_4GO1CrTpoqnKEPy680g\">Here</a></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>The New York Times / Opinion - The Privacy Project, has been publishing a series of articles on privacy. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/19/opinion/location-tracking-cell-phone.html?fbclid=IwAR2BTp6snhJ6-7Wo0B2jnrcOKnomwi8oDyGEB1zveoEqcwpTKKxq8GuVLM0\">Twelve Million Phones, one Dataset, no Privacy</a> :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>“THE COMPANIES THAT COLLECT all this information on your movements justify their business on the basis of three claims: People consent to be tracked, the data is anonymous and the data is secure.</p><p>None of those claims hold up, based on the file we’ve obtained and our review of company practices.”</p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/12/20/opinion/privacy-surveillance-video.html?fbclid=IwAR0JJh_3GXGLE0Up9GRnK6c1PfKNcKszBMTfYAu7Z9IwomgT5yAs7pWMUqU\">You Should Be Freaking Out About Privacy - Nothing to hide, nothing to fear? Think again.</a> </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/12/22/us/politics/totok-app-uae.html\">It Seemed Like a Popular Chat App</a>. It’s Secretly a Spy Tool.&nbsp; - ToTok, an Emirati messaging app that has been downloaded to millions of phones, is the latest escalation of a digital arms race.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/location-data-democracy-protests.html?fbclid=IwAR2qtuwsGfd0J6JDfcRowToScxO4qMmFQdwsPDUT1RbNA5WzoVIHe0RVCqY\">How Your Phone Betrays Democracy&nbsp;-</a><br>Your phone is emitting a beacon, one that’s invisible to the human eye. This signal is captured and collected, sometimes many times per minute. For protesters, that means a spy that keeps broadcasting long after the protesters head to their homes and take off their masks.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/location-data-privacy-rights.html?fbclid=IwAR3m0uQdTOcoIlpRE-EwBMQwgQfhdDVqSdA9BMi7n6HuuWdd9Hj6Mck2VE8\">Total Surveillance Is Not What America Signed Up For</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/pasadena-smartphone-spying.html?fbclid=IwAR2f12Wkq5VfP1A4LkgmWoJvPH8u5ieFNOCZK2ySHTPjSsJsasnE8oQV3gE\">Where Even the Children Are Being Tracked</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www-nytimes-com.cdn.ampproject.org/c/s/www.nytimes.com/2019/12/25/opinion/location-tracking-gifts.amp.html?fbclid=IwAR2VYeqa6xeWINXsa66dtu8-r5FG6Fug0anv-RNAuzSuDL8fnSJTscSDopk\">Giving the Gift of Surveillance</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www-nytimes-com.cdn.ampproject.org/c/s/www.nytimes.com/2019/12/24/opinion/location-privacy.amp.html?fbclid=IwAR05bmcfdXkZmgNjMEwcpTTezPOoDw3p6cYw9WHtHWDTzPFET8W_NbJJTYw\">Be Paranoid About Privacy</a>&nbsp;- We need to take back our privacy from tech companies — even if that means sacrificing convenience.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These are few of the most recent publications by the NYT. The Guardian and the Washington Post have also been raising awareness on privacy issues to read if you wondered <a href=\"https://www-washingtonpost-com.cdn.ampproject.org/c/s/www.washingtonpost.com/technology/2019/12/31/how-we-survive-surveillance-apocalypse/?outputType=amp&amp;fbclid=IwAR1HCmigJVvyq6bfiTv4dArQtHQ8PIHtqkRaduCN-LaoPrmCY6Zcms03UQ4\">How we Will Survive Surveillance Apocalypse</a>.  </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK Brexit will pause serious issues in the free flow of personal data as UK will become a country of non-adequate data protection. The direct consequence will be the need for Standard Contractual Clauses or Binding Corporate Rules and appointment of EU preventatives for UK organisations and non UK organisations that had opted for nomination of a representative in the UK. It is rather misleading to say that \"<a href=\"https://www.thetimes.co.uk/article/brussels-threat-to-block-city-trade-unless-uk-agrees-to-europes-rules-fpj75qq6m\">Brussels threat to block City trade unless UK agrees to Europe’s rules</a>\". the reality is the UK decision to leave with no deal. The actual consequences of the Brexit are still unknown and certainly more diplomatic than legal. We can only speculate.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><br>2019 was the year of the EU Data Protection rules.<br>2020 “is expected to be a big year in federal privacy and data breach litigation.”! By Daniel R. Stoller, Esq.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1. <a href=\"https://lnkd.in/eKyffgs﻿\">Facebook’s High Court Privacy Fights Lead 2020</a> Lawsuits to Watch, </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2. <a href=\"https://lnkd.in/eCw3cpV﻿\">States Press Ahead With Privacy Laws Even as Congress Stalls</a>, </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>3. <a href=\"https://lnkd.in/ewyB-Kh﻿\">EU Privacy Watchdogs Urged to Probe Netflix, Amazon, Spotify.</a><a href=\"https://twitter.com/hashtag/FacialRecognition?src=hashtag_click\">#FacialRecognition</a> is inspiring a wave of <a href=\"https://twitter.com/hashtag/privacy?src=hashtag_click\">#privacy</a> fears as the software creeps into every corner of life in the US &amp; Europe.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These are few of the main privacy news of the year. The battle for privacy and Human dignity is ongoing.</p>\n<!-- /wp:paragraph -->','Privacy at a glance','','publish','closed','closed','','privacy-at-a-glance','','https://datarainbow.eu/2019/04/04/facebook-saga/\nhttps://datarainbow.eu/2019/01/27/french-cnils-six-first-month-of-gdpr/\nhttps://datarainbow.eu/2019/02/22/increasing-fines-expected-from-german-dpas/','2020-01-04 20:45:55','2020-01-04 20:45:55','',0,'http://datarainbow.eu/?p=508',0,'post','',0),(509,5,'2020-01-03 20:20:32','2020-01-03 20:20:32','Photo by Professor MarkLemley','MarkLemley','MarkLemley','inherit','closed','closed','','marklemley','','','2020-01-03 20:21:09','2020-01-03 20:21:09','',508,'/wp-content/uploads/sites/3/2020/01/MarkLemley.jpg',0,'attachment','image/jpeg',0),(510,5,'2020-01-03 20:22:55','2020-01-03 20:22:55','<!-- wp:paragraph -->\n<p>A New Year, a new decade, a new Privacy law, the <a href=\"https://www.caprivacy.org\">California Consumer Privacy Act</a> entered into force this January 2010.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU General Data Protection Regulation made a big bang noise with its unprecedented treat of fines. The general public started to be more aware of the value of their personal data. As we had predicted we whitened a deluge of Data Subject Access Request. However, Data Protection Authorities enforcements in the EU have been rather disappointing. The UK ICO has just announced <a href=\"https://www.mishcon.com/news/ico-agrees-delay-over-gdpr-fines-with-both-ba-and-marriott\">the British Airways and Marriott Hotels \'intends of fine\' decision has been delayed</a>. The Irish Data Protection Commissionner is still awaited to prosecute the US corporations who have found refuge in Ireland for its tax and legislation clemency. The French CNIL change of Presidency seems to have affected its activities. France has so far created two breaches in the principle of consistency mechanisms in the enforcement of the regulation : first by following the Spanish authority in the creation of Data Protection Officers certification despite the position of the EDPB and more importantly by delaying enforcement of cookies and tracking regulations. France is in total contradiction with the recent European Court of Justice ruling in Planet 49. Web tracking cookies that are not purely functional require clear transparency in the language of the target audience, and should require pre consent. This is important and we deeply deplore official websites allowing the web tracking of their visitors. Sharing personal data with third parties - think Google Analytics or Facebook React JS free library codes as we have previously wrote about - result on becoming co-controller and liable as such. So far, kudos to the Romanian DPO for its enforcement and the German DPAs keeping their promise. The Belgian DPA has shown some recent activities. A few members have not yet catch up with the regulation. Overall, as the EDBP has warned, DPAs have lacked resources.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU\'s top data protection official Andrea Jelinek told the EU parliament that 4/5th of member state authorities had insufficient funds and/or personnel to do their job. She said member states needed to make sure to provide sufficient resources. <a href=\"https://www.politico.eu/article/we-have-a-huge-problem-european-regulator-despairs-over-lack-of-enforcement/\">‘We have a huge problem’: European regulator despairs over lack of enforcement. The world’s toughest privacy law proves toothless in the eyes of many critics.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> <a href=\"http://www.pearltrees.com/privacyday/facial-recognition/id23427152\">Facial recognition technologies</a> continue their controversial expansion inspiring a wave of privacy fears as the software creeps into every corner of life in the US an Europe, with Chinese technologies.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596\">IoT devices</a> are showing their insecurity, one example being the<a href=\"https://www-independent-co-uk.cdn.ampproject.org/c/s/www.independent.co.uk/life-style/gadgets-and-tech/news/google-nest-cameras-spying-home-xiaomi-hub-a9268696.html?amp&amp;fbclid=IwAR2DHiQ-Kb-cVGHOQdWMtt3lreiKBHdEtZJoOnU-grp9D2vLVffgk8RuK-4\"> Google connected camera</a> after the<a href=\"https://gizmodo-com.cdn.ampproject.org/c/s/gizmodo.com/rings-security-woes-cause-some-tech-review-sites-to-rec-1840634944/amp?fbclid=IwAR0oiPZy0PvKi01LRr95bGX5ff2emGY7SzGtv-PLjMP6onABva_SFJq30b4\"> Amazon Ring</a> hack due to weak passwords or <a href=\"https://amp-usatoday-com.cdn.ampproject.org/c/s/amp.usatoday.com/amp/2792152001?fbclid=IwAR2gSMctKCRkGhfyOCixulfNHGlx8kRqMKRQwpBdFLQRxJQTzK0r7I_3ZQ4\">Smart TVs spying</a>. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>\"Smart doorbells are primarily marketed as a deterrent to stop people from committing crimes, and it\'s an aspiring goal to shoot for. The problem with any type of surveillance apparatus is when it wanders away from its intended use.” <a href=\"https://iapp.org/news/a/with-smart-doorbells-this-holiday-its-about-balancing-the-naughty-and-nice/?fbclid=IwAR0aGN3XXMRzbjxCdZRUgo-M3tLSXAXh17XYDvk_4GO1CrTpoqnKEPy680g\">Here</a></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>The New York Times / Opinion - The Privacy Project, has been publishing a series of articles on privacy. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/19/opinion/location-tracking-cell-phone.html?fbclid=IwAR2BTp6snhJ6-7Wo0B2jnrcOKnomwi8oDyGEB1zveoEqcwpTKKxq8GuVLM0\">Twelve Million Phones, one Dataset, no Privacy</a> :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>“THE COMPANIES THAT COLLECT all this information on your movements justify their business on the basis of three claims: People consent to be tracked, the data is anonymous and the data is secure.</p><p>None of those claims hold up, based on the file we’ve obtained and our review of company practices.”</p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/12/20/opinion/privacy-surveillance-video.html?fbclid=IwAR0JJh_3GXGLE0Up9GRnK6c1PfKNcKszBMTfYAu7Z9IwomgT5yAs7pWMUqU\">You Should Be Freaking Out About Privacy - Nothing to hide, nothing to fear? Think again.</a> </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/12/22/us/politics/totok-app-uae.html\">It Seemed Like a Popular Chat App</a>. It’s Secretly a Spy Tool.  - ToTok, an Emirati messaging app that has been downloaded to millions of phones, is the latest escalation of a digital arms race.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/location-data-democracy-protests.html?fbclid=IwAR2qtuwsGfd0J6JDfcRowToScxO4qMmFQdwsPDUT1RbNA5WzoVIHe0RVCqY\">How Your Phone Betrays Democracy -</a><br>Your phone is emitting a beacon, one that’s invisible to the human eye. This signal is captured and collected, sometimes many times per minute. For protesters, that means a spy that keeps broadcasting long after the protesters head to their homes and take off their masks.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/location-data-privacy-rights.html?fbclid=IwAR3m0uQdTOcoIlpRE-EwBMQwgQfhdDVqSdA9BMi7n6HuuWdd9Hj6Mck2VE8\">Total Surveillance Is Not What America Signed Up For</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/pasadena-smartphone-spying.html?fbclid=IwAR2f12Wkq5VfP1A4LkgmWoJvPH8u5ieFNOCZK2ySHTPjSsJsasnE8oQV3gE\">Where Even the Children Are Being Tracked</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www-nytimes-com.cdn.ampproject.org/c/s/www.nytimes.com/2019/12/25/opinion/location-tracking-gifts.amp.html?fbclid=IwAR2VYeqa6xeWINXsa66dtu8-r5FG6Fug0anv-RNAuzSuDL8fnSJTscSDopk\">Giving the Gift of Surveillance</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www-nytimes-com.cdn.ampproject.org/c/s/www.nytimes.com/2019/12/24/opinion/location-privacy.amp.html?fbclid=IwAR05bmcfdXkZmgNjMEwcpTTezPOoDw3p6cYw9WHtHWDTzPFET8W_NbJJTYw\">Be Paranoid About Privacy</a> - We need to take back our privacy from tech companies — even if that means sacrificing convenience.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These are few of the most recent publications by the NYT. The Guardian and the Washington Post have also been raising awareness on privacy issues to read if you wondered <a href=\"https://www-washingtonpost-com.cdn.ampproject.org/c/s/www.washingtonpost.com/technology/2019/12/31/how-we-survive-surveillance-apocalypse/?outputType=amp&amp;fbclid=IwAR1HCmigJVvyq6bfiTv4dArQtHQ8PIHtqkRaduCN-LaoPrmCY6Zcms03UQ4\">How we Will Survive Surveillance Apocalypse</a>.  </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK Brexit will pause serious issues in the free flow of personal data as UK will become a country of non-adequate data protection. The direct consequence will be the need for Standard Contractual Clauses or Binding Corporate Rules and appointment of EU preventatives for UK organisations and non UK organisations that had opted for nomination of a representative in the UK. It is rather misleading to say that \"<a href=\"https://www.thetimes.co.uk/article/brussels-threat-to-block-city-trade-unless-uk-agrees-to-europes-rules-fpj75qq6m\">Brussels threat to block City trade unless UK agrees to Europe’s rules</a>\". the reality is the UK decision to leave with no deal. The actual consequences of the Brexit are still unknown and certainly more diplomatic than legal. We can only speculate.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><br>2019 was the year of the EU Data Protection rules.<br>2020 “is expected to be a big year in federal privacy and data breach litigation.”! By Daniel R. Stoller, Esq.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1. <a href=\"https://lnkd.in/eKyffgs﻿\">Facebook’s High Court Privacy Fights Lead 2020</a> Lawsuits to Watch, </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2. <a href=\"https://lnkd.in/eCw3cpV﻿\">States Press Ahead With Privacy Laws Even as Congress Stalls</a>, </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>3. <a href=\"https://lnkd.in/ewyB-Kh﻿\">EU Privacy Watchdogs Urged to Probe Netflix, Amazon, Spotify.</a><a href=\"https://twitter.com/hashtag/FacialRecognition?src=hashtag_click\">#FacialRecognition</a> is inspiring a wave of <a href=\"https://twitter.com/hashtag/privacy?src=hashtag_click\">#privacy</a> fears as the software creeps into every corner of life in the US &amp; Europe.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These are few of the main privacy news of the year. The battle for privacy and Human dignity is ongoing.</p>\n<!-- /wp:paragraph -->','Privacy at a glance','','inherit','closed','closed','','508-revision-v1','','','2020-01-03 20:22:55','2020-01-03 20:22:55','',508,'https://datarainbow.eu/2020/01/03/508-revision-v1/',0,'revision','',0),(511,5,'2020-01-03 21:48:44','2020-01-03 21:48:44','<!-- wp:paragraph -->\n<p>Guest post by Kurt Brand, Executive IT Consultant and Interim CDO/CIO/CTO/CISO <br>If you want to do yourself a big favor, please invest a short moment of your precious time to watch this 12 minute New York Times video published on Dec 20, 2019, under the heading \"You should be freaking out about privacy\":&nbsp;<a rel=\"noreferrer noopener\" href=\"https://t1p.de/8pfe?fbclid=IwAR2mQDwX17ReKM0T8z6bu6Cg9V0jMRCNQoFviWCmp7TPaByMoiRqcLaTo2Y\" target=\"_blank\">https://t1p.de/8pfe</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The video explains i.a.:<br>▶︎ How your <a href=\"https://www.facebook.com/hashtag/privacy?source=feed_text&amp;epa=HASHTAG\">#privacy</a> is invaded at an industrial scale 24/7 and 365 days/year ;<br>▶︎ How your personal information is raided, traded and used against you in terrifying ways, while you are reading this posting ;<br>▶︎ How advertising companies, intelligence services and criminals are able to combine small information pieces for building up complete profiles of you (\"digital twins\") ;<br>▶︎ How advertising is used to predict and manipulate your individual mood and behavior by addressing your (sometimes even subconscious) weak spots ;<br>▶︎ How the combination of information from different sources can bring you into serious trouble - deliberately or accidentally ;<br>▶︎ How you can be identified even within masses of people by analyzing videos from public <a href=\"https://www.facebook.com/hashtag/surveillance?source=feed_text&amp;epa=HASHTAG\">#surveillance</a> cameras utilizing AI-based face recognition and match this information with publicly available photos of you.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Note: At the end of 2019, the USA FREEDOM Act (former USA PATRIOT Act), that provides the legal basis for government surveillance, was renewed again.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>How much of your private information are you really comfortable giving away? Where is your red line? Do you believe it\'s okay, if the entire population is being placed under general suspicion and under surveillance to identify and track a small minority of outlaws and criminals?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Imagine what today\'s surveillance technology in the hands of authoritarian regimes mean for civil rights activists, journalists or lawyers. Surveillance is a means of control and suppression.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The U.S. Constitution comprises no \"Right to Privacy\", even though some US-Americans believe they have such a right. As long as Tech companies spend tens of millions for lobbying the government, the likelihood for effective legislation for protecting citizen\'s privacy is close to zero.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We don\'t need to compromise privacy and liberty to achieve safety. We just need three iron rules :<br>▶︎ Privacy is essential to democracy and liberty ;<br>▶︎ Everyone should be given the ability to discover who is using his/her personal data and how ;<br>▶︎ Our privacy is not something that can be traded in exchange for access to a \"free\" social media app or a smartphone.<br>�<br>Our freedom to think, speak and act, as we want, is key. A society of surveillance is just one step away from a society of submission.<br>From 1933 onwards, Germany was not only ruled by the most radical anti-Semites in history, but they brought about two decisive changes :<br>1. They intensified the latent anti-Semitism in the population, which had developed since the founder\'s crisis in 1873 through the influence of Otto Glagau, Wilhelm Marr or Gustav Freytag, by inciting the Jews as scapegoats<br>2. With the help of the Gestapo, SA and SS, they succeeded in intimidating and keeping the (much larger) passive-critical part of the population in check through a system of surveillance, denunciation and threat.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Source and complementary readings :<br>▶︎ \"How was Adolf Hitler possible?\" published on November 12, 2019, <a href=\"https://t1p.de/vujt\">in German:</a>  (<a href=\"https://t1p.de/5dhc\">English translation</a> ) ;<br>▶︎ <a href=\"https://t1p.de/ypux\">\"How the U.S. government discredits the U.S. American IT industry\"</a> published on August 20, 2017 (in<a href=\"https://t1p.de/89y3\"> German</a> ) ;<br>▶︎ \"<a href=\"https://t1p.de/inz5\">The spy in your pocket\"</a> published on April 25, 2017: (<a href=\"https://t1p.de/nhlr\">in German</a>) ;<br>▶︎ <a href=\"https://t1p.de/2cc0﻿\">\"The digital disruption of warfare\"</a> published on June 11, 2017  (only in English so far) ;<br>▶︎ \"<a href=\"https://t1p.de/00q3﻿\">Digitalization strategy for countries</a>\" published on February 21, 2018:  (<a href=\"https://t1p.de/g08k\">in German</a>) ;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>With thanks to Kurt Brand.</p>\n<!-- /wp:paragraph -->','You Should be Freaking out About Privacy','','publish','closed','closed','','you-should-be-freaking-out-about-privacy','','','2020-01-05 00:33:36','2020-01-05 00:33:36','',0,'http://datarainbow.eu/?p=511',0,'post','',0),(512,5,'2020-01-03 20:35:16','2020-01-03 20:35:16','<!-- wp:paragraph -->\n<p>Via Kurt Grant, IT consultant :<br>“If you want to do yourself a big favor, please invest a short moment of your precious time to watch this 12 minute New York Times video published on Dec 20, 2019, under the heading \"You should be freaking out about privacy\":&nbsp;<a href=\"https://t1p.de/8pfe?fbclid=IwAR2mQDwX17ReKM0T8z6bu6Cg9V0jMRCNQoFviWCmp7TPaByMoiRqcLaTo2Y\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/8pfe</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The video explains i.a.:<br>▶︎&nbsp;How you&nbsp;<a href=\"https://www.facebook.com/hashtag/privacy?source=feed_text&amp;epa=HASHTAG\">#privacy</a>&nbsp;is invaded at an industrial scale 24/7 and 365 days/year<br>▶︎&nbsp;How your personal information is raided, traded &amp; used against you in terrifying ways, while you are reading this posting<br>▶︎&nbsp;How advertising companies, intelligence services and criminals are able to combine small information pieces for building up complete profiles of you (\"digital twins\")<br>▶︎&nbsp;How advertising is used to predict&amp;manipulate your individual mood&amp;behavior by addressing your (sometimes even subconscious) weak spots&nbsp;<br>▶︎&nbsp;How the combination of information from different sources can bring you into serious trouble - deliberately or accidentally<br>▶︎&nbsp;How you can be identified even within masses of people by analyzing videos from public&nbsp;<a href=\"https://www.facebook.com/hashtag/surveillance?source=feed_text&amp;epa=HASHTAG\">#surveillance</a>&nbsp;cameras utilizing AI-based face recognition and match this information with publicly available photos of you&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Note: At the end of 2019, the USA FREEDOM Act (former USA PATRIOT Act), that provides the legal basis for government surveillance, was renewed again.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>How much of your private information are you really comfortable giving away? Where is your red line? Do you believe it\'s okay, if the entire population is being placed under general suspicion and under surveillance to identify&amp;track a small minority of outlaws&amp;criminals?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Imagine what today\'s surveillance technology in the hands of authoritarian regimes mean for civil rights activists, journalists or lawyers. Surveillance is a means of control&amp;suppression.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The U.S. Constitution comprises no \"Right to Privacy\", even though some US-Americans believe they have such a right. As long as Tech companies spend tens of millions for lobbying the government, the likelihood for effective legislation for protecting citizen\'s privacy is close to zero.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We don\'t need to compromise privacy and liberty to achieve safety. We just need three iron rules:<br>▶︎&nbsp;Privacy is essential to democracy and liberty<br>▶︎&nbsp;Everyone should be given the ability to discover who is using his/her personal data and how<br>▶︎&nbsp;Our privacy is not something that can be traded in exchange for access to a \"free\" social media app or a smartphone<br>�<br>Our freedom to think, speak and act, as we want, is key. A society of surveillance is just one step away from a society of submission.<br>From 1933 onwards, Germany was not only ruled by the most radical anti-Semites in history, but they brought about two decisive changes:<br>1. They intensified the latent anti-Semitism in the population, which had developed since the founder\'s crisis in 1873 through the influence of Otto Glagau, Wilhelm Marr or Gustav Freytag, by inciting the Jews as scapegoats<br>2. With the help of the Gestapo, SA and SS, they succeeded in intimidating and keeping the (much larger) passive-critical part of the population in check through a system of surveillance, denunciation and threat.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Source and complementary readings:<br>▶︎&nbsp;\"How was Adolf Hitler possible?\" published on November 12, 2019, in German:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2Fvujt%3Ffbclid%3DIwAR1wuFFVnNYHsWQupv_5jJ3bKdEdMF47Eta2vHa_MSnl2s50_SGkmOHv3AY&amp;h=AT1ZPaDGu52_ubwLBEKzgbHOBX_0uQ9W0SO-qoSOi1GW1e2JymIUUIniNbX9JbDFPbcLuxYiEg7jfvj9Sj8EU5RYi3CkRm4CknlQLB1wC1iV3Vs4-_4IZ6A6Z8ggSUE-Y8k4xaFfKGQgOKZReehxpxmPHI7Bb5ywpzX_uDc\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/vujt</a>&nbsp;(English translation:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2F5dhc%3Ffbclid%3DIwAR1axJGohHLhgXj8cuGvasAoQvP-KG_fRlC5BkwA45YC51zyYBtMh0J6nK4&amp;h=AT3PmLFm__7jsgnoxKIc0OqRxCaXFXPCMonN3V9HMtAduLloVxxtWKwGrcQLXRNaZjhiXzw9LVybI0jzzJKGST-OcxyOxHz3tNttEvzY0Tk_Q4wHfVdNU1oVMlHwztsbOY-fq8gaJ70c32DYyFRTgyvpbl_3y-_3Gcs-Fmg\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/5dhc</a>&nbsp;)<br>▶︎&nbsp;\"How the U.S. government discredits the U.S. American IT industry\" published on August 20, 2017:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2Fypux%3Ffbclid%3DIwAR3BfbsszgISDF80gSQw593H8bSnRTYZV1Xq0Tc8KB_GyhojMQJoGrXGC7M&amp;h=AT26VDRIvlGdyOBGo_ZXZMZkq_tB9WREBdYwLyMJvBHOyfZmbwNeNgIHXrkNz8x9R2N8Bqj6kA8z9Q1QeGgL1xIa0qTnSoHwzskWp2a4vohFbCoQHMlMkWc_THb9ho2yvoqkE5532iXlOZmg4PgT3nJdZXSZumgptM5GIPo\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/ypux</a>&nbsp;(German:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2F89y3%3Ffbclid%3DIwAR0EJ8EUCK_2Q8XMZpn6M0iTsSBZtoaVAtUQZ4qIutDsNtEOgf07mBXks3A&amp;h=AT159_LnbG3mozXKXrY0xvuoxzFsLd3YppTqedvfZMC_UMT0xJKjz-Nj7INO2BcYFj-Wu6B7J7pscZo8vawn1O9p9AAQ1qXDCQ7B378vT0XSmKSgAWQ7FW6lPeDp512XilwRjXYuDkPzfPZJ-7t-ZeCEyHHWLdS6fRHLQnQ\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/89y3</a>&nbsp;)<br>▶︎&nbsp;\"The spy in your pocket\" published on April 25, 2017:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2Finz5%3Ffbclid%3DIwAR1Yg29TdmdZWZXITK29UVffP0bdCTquUVHbOLlzLvLKfFz6ugqODcTrNj0&amp;h=AT2sq-uYbNB2NO9xVbCHl095OvHc73rzqbVtMIcnnvomSL0BIMUW6_DjZeI3sMsLUQQUEosnvyeTswJEAtua-QDmVgJBrhjwIi1o8Tu7bpMqD5SPwdyKgLsDY1xQJCGmlbGkmBJ3BNHpbeleGWWa2UlCCh1t2J8OWjHpCCw\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/inz5</a>&nbsp;(German:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2Fnhlr%3Ffbclid%3DIwAR1bXRBceFyOBtmXBRcP0WbFXNdhBq6F2C_Wsa6sDBIEdXfsyAdtwtXgT9A&amp;h=AT0HbsYLUQ3CoYaQ-rPFF7nP-JfgoIQl99RYNo6Z6zujWlhT7XOoD19r-lpSDykQNRsbWwZa6WHkuh55QjZ7ghCRZav_MUWiQoddGC6VbNfXNJY_jmtMP67xCq5v_id03xYYIVmBoFT5WjIfyLco7ccS1P17sBoYl4IQGHo\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/nhlr</a>&nbsp;)<br>▶︎&nbsp;\"The digital disruption of warfare\" published on June 11, 2017:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2F2cc0%3Ffbclid%3DIwAR1AXE6hYjlno6awnoFOmyHiELm1GvoP12y_F93Mg2qYilqrU-UI8QHVLI0&amp;h=AT0po-7WqrLQol5DO0hNI-nUkEoDDE5xDjETJBLcNaHo8tS1qWbAd-SMR64TjSQ3QYSKfhY9MbR8HOKx4xZSZJ4zvqvQgcqBR6aPFGOzeODIvdfLUHXUaM_kMJfPUeQuV90NugG0skZkhDRhr7LoazkYQXJtBgTw3kqnQy4\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/2cc0</a>&nbsp;(only in English so far)<br>▶︎&nbsp;\"Digitalization strategy for countries\" published on February 21, 2018:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2F00q3%3Ffbclid%3DIwAR2xNB2YBKYwu4WuQ9QoKLpq0RNapU1PVfgmbiXx_WtlAwU8fS6p0qW4yzM&amp;h=AT17hE2G3JIAyaxPQweaL9ciAsMFu2Eq7JY66fBywYqzzHdO7U4kgGguofM8j_KVmFQ0FWix5m31uELkavKsjCfwcvCWSeba5ZY35Cl4ZlC6NyhWKRTKmPBJUuGoe8Fvm0DUKbhfSV3Ozvo1PDCA2OF-y-gRAqTVe4c7P3o\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/00q3</a>&nbsp;(German:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2Fg08k%3Ffbclid%3DIwAR0YphrNydK6JwxsZORPB0Vm0bXuUrn-QubZ4e_5QBJXQRSeZkxLB2DlBI4&amp;h=AT1vATSqJk_ABEu_Arlhyy0gdzxVpmV3DNGNrWa8JinWGHL3WRQbJTpWiSO-bDnITlSyX_o25WE9VNZy34kK_-P_bCskTTfdmdrESCP25X6X0cb9rC5ELtpqY5XOCYH9Dps26BeTOq8FmqBo5zl1biGw-A1nPEpE6iv5JFs\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/g08k</a>&nbsp;)</p>\n<!-- /wp:paragraph -->','','','inherit','closed','closed','','511-revision-v1','','','2020-01-03 20:35:16','2020-01-03 20:35:16','',511,'https://datarainbow.eu/2020/01/03/511-revision-v1/',0,'revision','',0),(514,5,'2020-01-03 21:03:09','2020-01-03 21:03:09','<!-- wp:paragraph -->\n<p>As a privacy and data protection legal advisor, we do occasionally monitor major websites compliance with data protection regulations. <a href=\"https://datarainbow.eu/2019/01/27/website-transparency-cookies-and-privacy-notice/\">We have previously wrote</a> about website compliance and cookies requirements of information, transparency and consent request where applicable. The French Data Protection Authority, CNIL, has played a lead role in <a href=\"https://datarainbow.eu/2019/01/27/french-cnils-six-first-month-of-gdpr/\">clarifying the regulation</a>. The expectation would be that French websites would have benefited from the guidances produced, using the two years of preparation and the first year of GDPR application to comply. Sadly, this has not always been the case. Even pointing the issues to some web owners has not had much effect. Compliance with cookie laws should not be that hard : a cookie banner based on opt in giving visitors the option of accepting tracking, a privacy notice with required information to offer full transparency. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>To ensure our observations on the website were correct, we requested several IT and security experts to double check the reports found. One particular recognised expert, Allen Woods, retired today, kindly accepted to have a look to further analyse one of these websites. The result is eye opening. We knew about website tracking but this website analysis threw the light to a whole different dimension on the depth of tracking, profiling and fingerprinting, data sharing with third parties not only via cookies but Java Script codes used by the web developers. We invite anyone involved with data protection, IT security and cybersecurity to carefully <a href=\"http://www.jitsoftware.co.uk/downloads/pagereview.pdf\">read this document </a>with full attention. Please share your views and observations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Initially Allen Woods confirmed that \'the use, by second, third and fourth parties of cookies constitutes an extension of the organisation boundary of site owners tracking the movements of devices and therefore their owners, with a considerable degree of accuracy\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Allen Woods then proceed to further scrutiny to add into his report : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'with the sample URL taken from an apparently autogenerated module with the file name : “7D1mEqsUJEn.js. Both beacon and file name appear to be automatically generated at run time on a basis similar to GUID identifiers. The direct impact of the module is an embedded call back to the react.js CDN web site (part of the Facebook estate) with the effect of forcing a regular Facebook monitoring presence on any page using or calling the react.js sub components or code functions concerned.\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>You wonder how many lawyers, even IT lawyers advising Data Protection compliance, or website owners understand what this means. Let\'s be honest, We are just starting to pierce the mystery of coding thanks to Allen and few other security experts around.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It\'s important to note that for Allen the hidden JavaScript codes on the website \'represents a multiple risk in that source and components can be inserted for tracking or any other purpose malicious or otherwise but without making the client side users aware.\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'In the authors opinion, the owners of the site under review have lost control of data flow into and out of the site concerned and should consider a complete rebuild using components that have been vetted in terms of their functionality and capabilities with a view to reversing that loss of control. \'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Secondly, a review of the reasoning behind the need to collect and analyse visitor traffic should be carried out and an alternative to the use of Google Analytics should be seriously considered.\' This is important as many many websites use Google Analytics to measure their web traffic trough the IP address. IP address, identification number entering the definition of \'personal data\' as in the Article 4 GDPR.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'As a matter of due diligence, when commissioning a site, site owners should take an active role in approving which components are going to be used by whoever it is that is commissioned to build their web site. If the author was asked to approve any of the components provided by major platforms generally, but particularly social media platforms like Twitter, Google and Facebook and external template platforms like WORDPRESS, that those suggesting the use of such components should guarantee site owners as to the reliability and robustness of the code in respect of compliance and furthermore prove that the code concerned had been forensically reviewed to confirm reliability and robust compliance.\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Disclaimer here : this DataRainbow website itself is build on a Wordpress template, and uses Google\'s Gutenberg\'s font but no analytics, we are looking to change this.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Knowing how much users\' behaviour is tracked gives a tough burden and liability to website owners as data controller unless there is a certification assuring web developers real competences and not simply a \'lego block\' assembler expert. Increasingly web developer use templates such as Wordpress that comes out of users control tracking behaviour and location. Based on the GDPR, they are two level of liability. One for the data controller, basically whoever decides the means and purposes of the data processing, and the data processor, acting under the guidance and on behalf of the data controller. The European Court of Justice Advocate General opinion in the FashionID case where embedded Facebook \'like\' button capable of gathering data such as IP addresses and browser identification where Facebook is considered data controller, held that the hosting websites should be considered as joint data controller sharing proportional liability. The Facebook Fanpage decision had already created co-controllership between Facebook and the admin of the Facebook page. The website owner which receives anonymous statistics is deemed to be data controller by permitting third party scripts as the data they allow to be collected is not anonymous from the perspective of the analytics providers. A detailed picture of users is build to target advertising to users. ECJ in the&nbsp;Jehovan todistajat held that in order to have joint control and joint responsibility, it is not required that each of the controllers must have access to (all of) the personal data concerned. Many web owners are in total ignorance of such a shared liability.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook is in close competition with Google, Amazon, Microsoft or Twitter. A privacy regulation might find challenging to combat this kind of behaviour as it’ has become an anti-trust issue of over grown corporations. GAFAM\'s seems to have become too big to any regulator to combat.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://facebook%20users%20cannot%20avoid%20location-based%20ads%2C%20investigation%20finds/\">Facebook users cannot avoid location-based ads, investigation finds. Facebook&nbsp;</a> \'There is no combination of settings that users can enable to prevent their location data from being used by advertisers to target them, according to the privacy researcher Aleksandra Korolova. “Taken together,” Korolova says, “Facebook creates an illusion of control rather than giving actual control over location-related ad targeting, which can lead to real harm.”. In reality, users tracking goes above simple users geolocation. Many websites using free Facebook codes librairies track users geolocation and browsing on all kind of websites.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Helen Dixon, The Irish Data Protection Commissionner, in <a href=\"https://www.thestar.com.my/tech/tech-news/2019/06/13/us-tech-giants-risk-hefty-fines-irish-privacy-chief-warns/\">a recent interview</a> announced potential first fines in the next few weeks : “It would be a most surprising outcome if, of the 20 big tech investigations we have underway, fines were not a feature of the process,” Dixon said in an interview in London, after speaking at Bloomberg’s Sooner Than You Think technology conference. Simply fining GAFAMs wont stop them, there need to be combined by injunction to stop the fingerprinting and delete all data illegitimately collected. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.gdprtoday.org/ad-tech-gdpr-complaint-is-extended-to-four-more-european-regulators/?fbclid=IwAR3mtPtL9AYGjdJtmCICdIBBCEH1pbXazM-ID-RLBHzxVoQkzXJWAG31chY\">Ad Tech GDPR complaint is extended to four more European regulators</a>. Complainants consider Real-Time Bidding a “vast scale personal data leakage by Google and other major companies” in the behavioural advertising industry. \'GDPR complaints about Real-Time Bidding (RTB) in the online advertising industry were filed today with Data Protection Authorities in Spain, the Netherlands, Belgium, and Luxembourg.&nbsp; The complaints detail the vast scale of personal data leakage by Google and other major companies in the “Ad Tech” industry. This week marks one year since the introduction of the GDPR.&nbsp;    The new complaints have been filed by&nbsp;<a href=\"https://www.eticasconsulting.com/en/people-2018/\">Gemma Galdon Clavell</a>&nbsp;(Eticas Foundation) and&nbsp;<a href=\"https://www.finchabogados.com/es/equipo-abogados/diego-fanjul-martinez/\">Diego Fanjul</a>&nbsp;(Finch),&nbsp;<a href=\"https://www.bitsoffreedom.nl/mensen/david-korteweg/\">David Korteweg</a>&nbsp;(Bits of Freedom),&nbsp;<a href=\"https://www.law.kuleuven.be/citip/en/staff-members/staff/00083103\">Jef Ausloos</a>&nbsp;(University of Amsterdam),&nbsp;<a href=\"https://www.kuleuven.be/wieiswie/nl/person/00117807\">Pierre Dewitte</a>&nbsp;(University of Leuven),&nbsp;and&nbsp;<a rel=\"noreferrer noopener\" href=\"https://iapp.org/about/person/0011a00000gqgtUAAQ/\" target=\"_blank\">Jose Belo</a>&nbsp;(Exigo Luxembourg). Today’s filings extend the complaints initially filed in Ireland, the UK and Poland, to a total of seven EU countries. This week marks one year since the GDPR.   <a href=\"https://www.gdprtoday.org/ad-tech-gdpr-complaint-is-extended-to-four-more-european-regulators/?fbclid=IwAR3DDXFuMfMhSU62kLtoEgsG7TyjgRmN7kseUOuOMER86VxGOmrqiEcK70s\">&nbsp;</a>Read more <a href=\"https://www.gdprtoday.org/ad-tech-gdpr-complaint-is-extended-to-four-more-european-regulators/?fbclid=IwAR3DDXFuMfMhSU62kLtoEgsG7TyjgRmN7kseUOuOMER86VxGOmrqiEcK70s\">here</a>&nbsp;and&nbsp;<a href=\"http://GDPR complaints about Real-Time Bidding (RTB) in the online advertising industry were filed today with Data Protection Authorities in Spain, the Netherlands, Belgium, and Luxembourg.  The complaints detail the vast scale of personal data leakage by Google and other major companies in the “Ad Tech” industry. This week marks one year since the introduction of the GDPR.   The new complaints have been filed by Gemma Galdon Clavell (Eticas Foundation) and Diego Fanjul (Finch), David Korteweg (Bits of Freedom), Jef Ausloos (University of Amsterdam), Pierre Dewitte (University of Leuven), and Jose Belo (Exigo Luxembourg). Today’s filings extend the complaints initially filed in Ireland, the UK and Poland, to a total of seven EU countries. This week marks one year since the GDPR.\">here</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Somehow, we can imagine the gathering of information on each individual internet user to profile their personality in order to predict needs and wishes to be sold to Ad bidders. <a href=\"https://medium.com/analytics-for-humans/google-wants-you-to-rethink-your-customer-journey-98e9d231d096\">Google\'s wish</a> is to predict your needs before you realise. Young people get offered Apple \'smart\' watch with their Vitality insurance and health club that monitor their heart beats and exercises. This is all OK until an illness is detected. Women won\'t anymore need to knock at the HR door to announce their pregnancy. Probably their employer will be informed before they even notice it. Consequently, new businesses have been created : <a href=\"https://www.ibtimes.com/unfitbits-how-trick-your-fitbit-thinking-youre-working-out-youre-not-1920366\">dog Fitbit walker to simulate exercise to trick the insurance company</a>. Would that be sufficient? Probably not enough to hide actual sickness that your insurance company love to be the first to know about.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And if you wondered <a href=\"https://datarainbow.eu/2019/01/22/why-privacy-matters/\">why all that matters</a>, think of the past, not that long ago, what the Stasi could have done had they had access to Google or Facebook. Think of totalitarian regimes. Think of the US democracy asking social media passwords from visitors. you think you have nothing to hide, think twice. Think of over-reliance on technology and the margin of error. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fine, a demonstration of what happened <a href=\"https://youtu.be/xYZtHIPktQg\">if your shop assistant was an App.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Further read</em> : <a href=\"https://www.businessinsider.com/facebook-google-amazon-dominate-digital-economy-chart-2019-6?r=US&amp;IR=T\">“More than two of out every three dollars spent on digital ads in the US goes to one of the three companies.”</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://geomarketing.com/beacon-marketing-platform-inmarket-introduces-predictive-targeting-program\">Beacon Marketing Platform inMarket Introduces Predictive Targeting Program</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>in 2009 <a href=\"https://www.telegraph.co.uk/technology/facebook/6214370/Facebook-shuts-down-Beacon.html\">Facebook shuts down Beacon</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://policyreview.info/articles/news/data-subjects-data-controllers-fashionable-concept/1400\">On the expanding notion of data controller </a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->','Websites surreptitiously tracking and reporting on visitors','Website tracking and monetizing website visitors. What liability for web owners?\n','inherit','closed','closed','','428-revision-v1','','','2020-01-03 21:03:09','2020-01-03 21:03:09','',428,'https://datarainbow.eu/2020/01/03/428-revision-v1/',0,'revision','',0),(515,5,'2020-01-03 21:19:03','2020-01-03 21:19:03','','0-3','By Kurt Brand','inherit','closed','closed','','0-3','','','2020-01-03 21:19:39','2020-01-03 21:19:39','',511,'/wp-content/uploads/sites/3/2020/01/0-3.jpeg',0,'attachment','image/jpeg',0),(516,5,'2020-01-03 21:29:50','2020-01-03 21:29:50','<!-- wp:paragraph -->\n<p>Via Kurt Brand, IT consultant :<br>“If you want to do yourself a big favor, please invest a short moment of your precious time to watch this 12 minute New York Times video published on Dec 20, 2019, under the heading \"You should be freaking out about privacy\": <a rel=\"noreferrer noopener\" href=\"https://t1p.de/8pfe?fbclid=IwAR2mQDwX17ReKM0T8z6bu6Cg9V0jMRCNQoFviWCmp7TPaByMoiRqcLaTo2Y\" target=\"_blank\">https://t1p.de/8pfe</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The video explains i.a.:<br>▶︎&nbsp;How you&nbsp;<a href=\"https://www.facebook.com/hashtag/privacy?source=feed_text&amp;epa=HASHTAG\">#privacy</a>&nbsp;is invaded at an industrial scale 24/7 and 365 days/year<br>▶︎&nbsp;How your personal information is raided, traded &amp; used against you in terrifying ways, while you are reading this posting<br>▶︎&nbsp;How advertising companies, intelligence services and criminals are able to combine small information pieces for building up complete profiles of you (\"digital twins\")<br>▶︎&nbsp;How advertising is used to predict&amp;manipulate your individual mood&amp;behavior by addressing your (sometimes even subconscious) weak spots&nbsp;<br>▶︎&nbsp;How the combination of information from different sources can bring you into serious trouble - deliberately or accidentally<br>▶︎&nbsp;How you can be identified even within masses of people by analyzing videos from public&nbsp;<a href=\"https://www.facebook.com/hashtag/surveillance?source=feed_text&amp;epa=HASHTAG\">#surveillance</a>&nbsp;cameras utilizing AI-based face recognition and match this information with publicly available photos of you&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Note: At the end of 2019, the USA FREEDOM Act (former USA PATRIOT Act), that provides the legal basis for government surveillance, was renewed again.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>How much of your private information are you really comfortable giving away? Where is your red line? Do you believe it\'s okay, if the entire population is being placed under general suspicion and under surveillance to identify&amp;track a small minority of outlaws&amp;criminals?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Imagine what today\'s surveillance technology in the hands of authoritarian regimes mean for civil rights activists, journalists or lawyers. Surveillance is a means of control&amp;suppression.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The U.S. Constitution comprises no \"Right to Privacy\", even though some US-Americans believe they have such a right. As long as Tech companies spend tens of millions for lobbying the government, the likelihood for effective legislation for protecting citizen\'s privacy is close to zero.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We don\'t need to compromise privacy and liberty to achieve safety. We just need three iron rules:<br>▶︎&nbsp;Privacy is essential to democracy and liberty<br>▶︎&nbsp;Everyone should be given the ability to discover who is using his/her personal data and how<br>▶︎&nbsp;Our privacy is not something that can be traded in exchange for access to a \"free\" social media app or a smartphone<br>�<br>Our freedom to think, speak and act, as we want, is key. A society of surveillance is just one step away from a society of submission.<br>From 1933 onwards, Germany was not only ruled by the most radical anti-Semites in history, but they brought about two decisive changes:<br>1. They intensified the latent anti-Semitism in the population, which had developed since the founder\'s crisis in 1873 through the influence of Otto Glagau, Wilhelm Marr or Gustav Freytag, by inciting the Jews as scapegoats<br>2. With the help of the Gestapo, SA and SS, they succeeded in intimidating and keeping the (much larger) passive-critical part of the population in check through a system of surveillance, denunciation and threat.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Source and complementary readings:<br>▶︎&nbsp;\"How was Adolf Hitler possible?\" published on November 12, 2019, in German:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2Fvujt%3Ffbclid%3DIwAR1wuFFVnNYHsWQupv_5jJ3bKdEdMF47Eta2vHa_MSnl2s50_SGkmOHv3AY&amp;h=AT1ZPaDGu52_ubwLBEKzgbHOBX_0uQ9W0SO-qoSOi1GW1e2JymIUUIniNbX9JbDFPbcLuxYiEg7jfvj9Sj8EU5RYi3CkRm4CknlQLB1wC1iV3Vs4-_4IZ6A6Z8ggSUE-Y8k4xaFfKGQgOKZReehxpxmPHI7Bb5ywpzX_uDc\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/vujt</a>&nbsp;(English translation:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2F5dhc%3Ffbclid%3DIwAR1axJGohHLhgXj8cuGvasAoQvP-KG_fRlC5BkwA45YC51zyYBtMh0J6nK4&amp;h=AT3PmLFm__7jsgnoxKIc0OqRxCaXFXPCMonN3V9HMtAduLloVxxtWKwGrcQLXRNaZjhiXzw9LVybI0jzzJKGST-OcxyOxHz3tNttEvzY0Tk_Q4wHfVdNU1oVMlHwztsbOY-fq8gaJ70c32DYyFRTgyvpbl_3y-_3Gcs-Fmg\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/5dhc</a>&nbsp;)<br>▶︎&nbsp;\"How the U.S. government discredits the U.S. American IT industry\" published on August 20, 2017:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2Fypux%3Ffbclid%3DIwAR3BfbsszgISDF80gSQw593H8bSnRTYZV1Xq0Tc8KB_GyhojMQJoGrXGC7M&amp;h=AT26VDRIvlGdyOBGo_ZXZMZkq_tB9WREBdYwLyMJvBHOyfZmbwNeNgIHXrkNz8x9R2N8Bqj6kA8z9Q1QeGgL1xIa0qTnSoHwzskWp2a4vohFbCoQHMlMkWc_THb9ho2yvoqkE5532iXlOZmg4PgT3nJdZXSZumgptM5GIPo\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/ypux</a>&nbsp;(German:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2F89y3%3Ffbclid%3DIwAR0EJ8EUCK_2Q8XMZpn6M0iTsSBZtoaVAtUQZ4qIutDsNtEOgf07mBXks3A&amp;h=AT159_LnbG3mozXKXrY0xvuoxzFsLd3YppTqedvfZMC_UMT0xJKjz-Nj7INO2BcYFj-Wu6B7J7pscZo8vawn1O9p9AAQ1qXDCQ7B378vT0XSmKSgAWQ7FW6lPeDp512XilwRjXYuDkPzfPZJ-7t-ZeCEyHHWLdS6fRHLQnQ\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/89y3</a>&nbsp;)<br>▶︎&nbsp;\"The spy in your pocket\" published on April 25, 2017:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2Finz5%3Ffbclid%3DIwAR1Yg29TdmdZWZXITK29UVffP0bdCTquUVHbOLlzLvLKfFz6ugqODcTrNj0&amp;h=AT2sq-uYbNB2NO9xVbCHl095OvHc73rzqbVtMIcnnvomSL0BIMUW6_DjZeI3sMsLUQQUEosnvyeTswJEAtua-QDmVgJBrhjwIi1o8Tu7bpMqD5SPwdyKgLsDY1xQJCGmlbGkmBJ3BNHpbeleGWWa2UlCCh1t2J8OWjHpCCw\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/inz5</a>&nbsp;(German:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2Fnhlr%3Ffbclid%3DIwAR1bXRBceFyOBtmXBRcP0WbFXNdhBq6F2C_Wsa6sDBIEdXfsyAdtwtXgT9A&amp;h=AT0HbsYLUQ3CoYaQ-rPFF7nP-JfgoIQl99RYNo6Z6zujWlhT7XOoD19r-lpSDykQNRsbWwZa6WHkuh55QjZ7ghCRZav_MUWiQoddGC6VbNfXNJY_jmtMP67xCq5v_id03xYYIVmBoFT5WjIfyLco7ccS1P17sBoYl4IQGHo\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/nhlr</a>&nbsp;)<br>▶︎&nbsp;\"The digital disruption of warfare\" published on June 11, 2017:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2F2cc0%3Ffbclid%3DIwAR1AXE6hYjlno6awnoFOmyHiELm1GvoP12y_F93Mg2qYilqrU-UI8QHVLI0&amp;h=AT0po-7WqrLQol5DO0hNI-nUkEoDDE5xDjETJBLcNaHo8tS1qWbAd-SMR64TjSQ3QYSKfhY9MbR8HOKx4xZSZJ4zvqvQgcqBR6aPFGOzeODIvdfLUHXUaM_kMJfPUeQuV90NugG0skZkhDRhr7LoazkYQXJtBgTw3kqnQy4\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/2cc0</a>&nbsp;(only in English so far)<br>▶︎&nbsp;\"Digitalization strategy for countries\" published on February 21, 2018:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2F00q3%3Ffbclid%3DIwAR2xNB2YBKYwu4WuQ9QoKLpq0RNapU1PVfgmbiXx_WtlAwU8fS6p0qW4yzM&amp;h=AT17hE2G3JIAyaxPQweaL9ciAsMFu2Eq7JY66fBywYqzzHdO7U4kgGguofM8j_KVmFQ0FWix5m31uELkavKsjCfwcvCWSeba5ZY35Cl4ZlC6NyhWKRTKmPBJUuGoe8Fvm0DUKbhfSV3Ozvo1PDCA2OF-y-gRAqTVe4c7P3o\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/00q3</a>&nbsp;(German:&nbsp;<a href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Ft1p.de%2Fg08k%3Ffbclid%3DIwAR0YphrNydK6JwxsZORPB0Vm0bXuUrn-QubZ4e_5QBJXQRSeZkxLB2DlBI4&amp;h=AT1vATSqJk_ABEu_Arlhyy0gdzxVpmV3DNGNrWa8JinWGHL3WRQbJTpWiSO-bDnITlSyX_o25WE9VNZy34kK_-P_bCskTTfdmdrESCP25X6X0cb9rC5ELtpqY5XOCYH9Dps26BeTOq8FmqBo5zl1biGw-A1nPEpE6iv5JFs\" target=\"_blank\" rel=\"noreferrer noopener\">https://t1p.de/g08k</a>&nbsp;)</p>\n<!-- /wp:paragraph -->','','','inherit','closed','closed','','511-revision-v1','','','2020-01-03 21:29:50','2020-01-03 21:29:50','',511,'https://datarainbow.eu/2020/01/03/511-revision-v1/',0,'revision','',0),(517,5,'2020-01-03 21:48:44','2020-01-03 21:48:44','<!-- wp:paragraph -->\n<p>Guest post by Kurt Brand, Executive IT Consultant and Interim CDO/CIO/CTO/CISO <br>If you want to do yourself a big favor, please invest a short moment of your precious time to watch this 12 minute New York Times video published on Dec 20, 2019, under the heading \"You should be freaking out about privacy\": <a rel=\"noreferrer noopener\" href=\"https://t1p.de/8pfe?fbclid=IwAR2mQDwX17ReKM0T8z6bu6Cg9V0jMRCNQoFviWCmp7TPaByMoiRqcLaTo2Y\" target=\"_blank\">https://t1p.de/8pfe</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The video explains i.a.:<br>▶︎&nbsp;How you&nbsp;<a href=\"https://www.facebook.com/hashtag/privacy?source=feed_text&amp;epa=HASHTAG\">#privacy</a>&nbsp;is invaded at an industrial scale 24/7 and 365 days/year<br>▶︎&nbsp;How your personal information is raided, traded &amp; used against you in terrifying ways, while you are reading this posting<br>▶︎&nbsp;How advertising companies, intelligence services and criminals are able to combine small information pieces for building up complete profiles of you (\"digital twins\")<br>▶︎&nbsp;How advertising is used to predict&amp;manipulate your individual mood&amp;behavior by addressing your (sometimes even subconscious) weak spots&nbsp;<br>▶︎&nbsp;How the combination of information from different sources can bring you into serious trouble - deliberately or accidentally<br>▶︎&nbsp;How you can be identified even within masses of people by analyzing videos from public&nbsp;<a href=\"https://www.facebook.com/hashtag/surveillance?source=feed_text&amp;epa=HASHTAG\">#surveillance</a>&nbsp;cameras utilizing AI-based face recognition and match this information with publicly available photos of you&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Note: At the end of 2019, the USA FREEDOM Act (former USA PATRIOT Act), that provides the legal basis for government surveillance, was renewed again.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>How much of your private information are you really comfortable giving away? Where is your red line? Do you believe it\'s okay, if the entire population is being placed under general suspicion and under surveillance to identify&amp;track a small minority of outlaws&amp;criminals?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Imagine what today\'s surveillance technology in the hands of authoritarian regimes mean for civil rights activists, journalists or lawyers. Surveillance is a means of control&amp;suppression.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The U.S. Constitution comprises no \"Right to Privacy\", even though some US-Americans believe they have such a right. As long as Tech companies spend tens of millions for lobbying the government, the likelihood for effective legislation for protecting citizen\'s privacy is close to zero.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We don\'t need to compromise privacy and liberty to achieve safety. We just need three iron rules:<br>▶︎&nbsp;Privacy is essential to democracy and liberty<br>▶︎&nbsp;Everyone should be given the ability to discover who is using his/her personal data and how<br>▶︎&nbsp;Our privacy is not something that can be traded in exchange for access to a \"free\" social media app or a smartphone<br>�<br>Our freedom to think, speak and act, as we want, is key. A society of surveillance is just one step away from a society of submission.<br>From 1933 onwards, Germany was not only ruled by the most radical anti-Semites in history, but they brought about two decisive changes:<br>1. They intensified the latent anti-Semitism in the population, which had developed since the founder\'s crisis in 1873 through the influence of Otto Glagau, Wilhelm Marr or Gustav Freytag, by inciting the Jews as scapegoats<br>2. With the help of the Gestapo, SA and SS, they succeeded in intimidating and keeping the (much larger) passive-critical part of the population in check through a system of surveillance, denunciation and threat.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Source and complementary readings:<br>▶︎ \"How was Adolf Hitler possible?\" published on November 12, 2019, <a href=\"https://t1p.de/vujt\">in German:</a>  (<a href=\"https://t1p.de/5dhc\">English translation</a> )<br>▶︎ <a href=\"https://t1p.de/ypux\">\"How the U.S. government discredits the U.S. American IT industry\"</a> published on August 20, 2017 (in<a href=\"https://t1p.de/89y3\"> German</a> )<br>▶︎ \"<a href=\"https://t1p.de/inz5\">The spy in your pocket\"</a> published on April 25, 2017: (<a href=\"https://t1p.de/nhlr\">in German</a>)<br>▶︎ <a href=\"https://t1p.de/2cc0﻿\">\"The digital disruption of warfare\"</a> published on June 11, 2017  (only in English so far)<br>▶︎ \"<a href=\"https://t1p.de/00q3﻿\">Digitalization strategy for countries</a>\" published on February 21, 2018:  (<a href=\"https://t1p.de/g08k\">in German</a>)</p>\n<!-- /wp:paragraph -->','\"You Should be Freaking out About Privacy\"','','inherit','closed','closed','','511-revision-v1','','','2020-01-03 21:48:44','2020-01-03 21:48:44','',511,'https://datarainbow.eu/2020/01/03/511-revision-v1/',0,'revision','',0),(518,5,'2020-01-03 21:50:37','2020-01-03 21:50:37','<!-- wp:paragraph -->\n<p>Guest post by Kurt Brand, Executive IT Consultant and Interim CDO/CIO/CTO/CISO <br>If you want to do yourself a big favor, please invest a short moment of your precious time to watch this 12 minute New York Times video published on Dec 20, 2019, under the heading \"You should be freaking out about privacy\":&nbsp;<a rel=\"noreferrer noopener\" href=\"https://t1p.de/8pfe?fbclid=IwAR2mQDwX17ReKM0T8z6bu6Cg9V0jMRCNQoFviWCmp7TPaByMoiRqcLaTo2Y\" target=\"_blank\">https://t1p.de/8pfe</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The video explains i.a.:<br>▶︎ How your <a href=\"https://www.facebook.com/hashtag/privacy?source=feed_text&amp;epa=HASHTAG\">#privacy</a> is invaded at an industrial scale 24/7 and 365 days/year<br>▶︎ How your personal information is raided, traded &amp; used against you in terrifying ways, while you are reading this posting<br>▶︎ How advertising companies, intelligence services and criminals are able to combine small information pieces for building up complete profiles of you (\"digital twins\")<br>▶︎ How advertising is used to predict&amp;manipulate your individual mood&amp;behavior by addressing your (sometimes even subconscious) weak spots <br>▶︎ How the combination of information from different sources can bring you into serious trouble - deliberately or accidentally<br>▶︎ How you can be identified even within masses of people by analyzing videos from public <a href=\"https://www.facebook.com/hashtag/surveillance?source=feed_text&amp;epa=HASHTAG\">#surveillance</a> cameras utilizing AI-based face recognition and match this information with publicly available photos of you </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Note: At the end of 2019, the USA FREEDOM Act (former USA PATRIOT Act), that provides the legal basis for government surveillance, was renewed again.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>How much of your private information are you really comfortable giving away? Where is your red line? Do you believe it\'s okay, if the entire population is being placed under general suspicion and under surveillance to identify&amp;track a small minority of outlaws&amp;criminals?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Imagine what today\'s surveillance technology in the hands of authoritarian regimes mean for civil rights activists, journalists or lawyers. Surveillance is a means of control&amp;suppression.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The U.S. Constitution comprises no \"Right to Privacy\", even though some US-Americans believe they have such a right. As long as Tech companies spend tens of millions for lobbying the government, the likelihood for effective legislation for protecting citizen\'s privacy is close to zero.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We don\'t need to compromise privacy and liberty to achieve safety. We just need three iron rules:<br>▶︎&nbsp;Privacy is essential to democracy and liberty<br>▶︎&nbsp;Everyone should be given the ability to discover who is using his/her personal data and how<br>▶︎&nbsp;Our privacy is not something that can be traded in exchange for access to a \"free\" social media app or a smartphone<br>�<br>Our freedom to think, speak and act, as we want, is key. A society of surveillance is just one step away from a society of submission.<br>From 1933 onwards, Germany was not only ruled by the most radical anti-Semites in history, but they brought about two decisive changes:<br>1. They intensified the latent anti-Semitism in the population, which had developed since the founder\'s crisis in 1873 through the influence of Otto Glagau, Wilhelm Marr or Gustav Freytag, by inciting the Jews as scapegoats<br>2. With the help of the Gestapo, SA and SS, they succeeded in intimidating and keeping the (much larger) passive-critical part of the population in check through a system of surveillance, denunciation and threat.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Source and complementary readings:<br>▶︎&nbsp;\"How was Adolf Hitler possible?\" published on November 12, 2019, <a href=\"https://t1p.de/vujt\">in German:</a>&nbsp;&nbsp;(<a href=\"https://t1p.de/5dhc\">English translation</a>&nbsp;)<br>▶︎&nbsp;<a href=\"https://t1p.de/ypux\">\"How the U.S. government discredits the U.S. American IT industry\"</a> published on August 20, 2017&nbsp;(in<a href=\"https://t1p.de/89y3\"> German</a>&nbsp;)<br>▶︎&nbsp;\"<a href=\"https://t1p.de/inz5\">The spy in your pocket\"</a> published on April 25, 2017:&nbsp;(<a href=\"https://t1p.de/nhlr\">in German</a>)<br>▶︎&nbsp;<a href=\"https://t1p.de/2cc0﻿\">\"The digital disruption of warfare\"</a> published on June 11, 2017&nbsp;&nbsp;(only in English so far)<br>▶︎&nbsp;\"<a href=\"https://t1p.de/00q3﻿\">Digitalization strategy for countries</a>\" published on February 21, 2018:&nbsp;&nbsp;(<a href=\"https://t1p.de/g08k\">in German</a>)</p>\n<!-- /wp:paragraph -->','\"You Should be Freaking out About Privacy\"','','inherit','closed','closed','','511-revision-v1','','','2020-01-03 21:50:37','2020-01-03 21:50:37','',511,'https://datarainbow.eu/2020/01/03/511-revision-v1/',0,'revision','',0),(520,5,'2020-01-03 21:54:11','2020-01-03 21:54:11','<!-- wp:paragraph -->\n<p>Guest post by Kurt Brand, Executive IT Consultant and Interim CDO/CIO/CTO/CISO <br>If you want to do yourself a big favor, please invest a short moment of your precious time to watch this 12 minute New York Times video published on Dec 20, 2019, under the heading \"You should be freaking out about privacy\":&nbsp;<a rel=\"noreferrer noopener\" href=\"https://t1p.de/8pfe?fbclid=IwAR2mQDwX17ReKM0T8z6bu6Cg9V0jMRCNQoFviWCmp7TPaByMoiRqcLaTo2Y\" target=\"_blank\">https://t1p.de/8pfe</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The video explains i.a.:<br>▶︎ How your <a href=\"https://www.facebook.com/hashtag/privacy?source=feed_text&amp;epa=HASHTAG\">#privacy</a> is invaded at an industrial scale 24/7 and 365 days/year ;<br>▶︎ How your personal information is raided, traded &amp; used against you in terrifying ways, while you are reading this posting ;<br>▶︎ How advertising companies, intelligence services and criminals are able to combine small information pieces for building up complete profiles of you (\"digital twins\") ;<br>▶︎ How advertising is used to predict&amp;manipulate your individual mood&amp;behavior by addressing your (sometimes even subconscious) weak spots ;<br>▶︎ How the combination of information from different sources can bring you into serious trouble - deliberately or accidentally ;<br>▶︎ How you can be identified even within masses of people by analyzing videos from public <a href=\"https://www.facebook.com/hashtag/surveillance?source=feed_text&amp;epa=HASHTAG\">#surveillance</a> cameras utilizing AI-based face recognition and match this information with publicly available photos of you.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Note: At the end of 2019, the USA FREEDOM Act (former USA PATRIOT Act), that provides the legal basis for government surveillance, was renewed again.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>How much of your private information are you really comfortable giving away? Where is your red line? Do you believe it\'s okay, if the entire population is being placed under general suspicion and under surveillance to identify&amp;track a small minority of outlaws&amp;criminals?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Imagine what today\'s surveillance technology in the hands of authoritarian regimes mean for civil rights activists, journalists or lawyers. Surveillance is a means of control&amp;suppression.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The U.S. Constitution comprises no \"Right to Privacy\", even though some US-Americans believe they have such a right. As long as Tech companies spend tens of millions for lobbying the government, the likelihood for effective legislation for protecting citizen\'s privacy is close to zero.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We don\'t need to compromise privacy and liberty to achieve safety. We just need three iron rules:<br>▶︎ Privacy is essential to democracy and liberty ;<br>▶︎ Everyone should be given the ability to discover who is using his/her personal data and how ;<br>▶︎ Our privacy is not something that can be traded in exchange for access to a \"free\" social media app or a smartphone.<br>�<br>Our freedom to think, speak and act, as we want, is key. A society of surveillance is just one step away from a society of submission.<br>From 1933 onwards, Germany was not only ruled by the most radical anti-Semites in history, but they brought about two decisive changes:<br>1. They intensified the latent anti-Semitism in the population, which had developed since the founder\'s crisis in 1873 through the influence of Otto Glagau, Wilhelm Marr or Gustav Freytag, by inciting the Jews as scapegoats<br>2. With the help of the Gestapo, SA and SS, they succeeded in intimidating and keeping the (much larger) passive-critical part of the population in check through a system of surveillance, denunciation and threat.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Source and complementary readings:<br>▶︎ \"How was Adolf Hitler possible?\" published on November 12, 2019, <a href=\"https://t1p.de/vujt\">in German:</a>  (<a href=\"https://t1p.de/5dhc\">English translation</a> ) ;<br>▶︎ <a href=\"https://t1p.de/ypux\">\"How the U.S. government discredits the U.S. American IT industry\"</a> published on August 20, 2017 (in<a href=\"https://t1p.de/89y3\"> German</a> ) ;<br>▶︎ \"<a href=\"https://t1p.de/inz5\">The spy in your pocket\"</a> published on April 25, 2017: (<a href=\"https://t1p.de/nhlr\">in German</a>) ;<br>▶︎ <a href=\"https://t1p.de/2cc0﻿\">\"The digital disruption of warfare\"</a> published on June 11, 2017  (only in English so far) ;<br>▶︎ \"<a href=\"https://t1p.de/00q3﻿\">Digitalization strategy for countries</a>\" published on February 21, 2018:  (<a href=\"https://t1p.de/g08k\">in German</a>) ;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>With thanks to Kurt Brand.</p>\n<!-- /wp:paragraph -->','\"You Should be Freaking out About Privacy\"','','inherit','closed','closed','','511-revision-v1','','','2020-01-03 21:54:11','2020-01-03 21:54:11','',511,'https://datarainbow.eu/2020/01/03/511-revision-v1/',0,'revision','',0),(521,5,'2020-01-04 14:05:56','2020-01-04 14:05:56','<!-- wp:paragraph -->\n<p>Guest post by Kurt Brand, Executive IT Consultant and Interim CDO/CIO/CTO/CISO <br>If you want to do yourself a big favor, please invest a short moment of your precious time to watch this 12 minute New York Times video published on Dec 20, 2019, under the heading \"You should be freaking out about privacy\":&nbsp;<a rel=\"noreferrer noopener\" href=\"https://t1p.de/8pfe?fbclid=IwAR2mQDwX17ReKM0T8z6bu6Cg9V0jMRCNQoFviWCmp7TPaByMoiRqcLaTo2Y\" target=\"_blank\">https://t1p.de/8pfe</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The video explains i.a.:<br>▶︎&nbsp;How your&nbsp;<a href=\"https://www.facebook.com/hashtag/privacy?source=feed_text&amp;epa=HASHTAG\">#privacy</a>&nbsp;is invaded at an industrial scale 24/7 and 365 days/year ;<br>▶︎&nbsp;How your personal information is raided, traded &amp; used against you in terrifying ways, while you are reading this posting ;<br>▶︎&nbsp;How advertising companies, intelligence services and criminals are able to combine small information pieces for building up complete profiles of you (\"digital twins\") ;<br>▶︎&nbsp;How advertising is used to predict&amp;manipulate your individual mood&amp;behavior by addressing your (sometimes even subconscious) weak spots&nbsp;;<br>▶︎&nbsp;How the combination of information from different sources can bring you into serious trouble - deliberately or accidentally ;<br>▶︎&nbsp;How you can be identified even within masses of people by analyzing videos from public&nbsp;<a href=\"https://www.facebook.com/hashtag/surveillance?source=feed_text&amp;epa=HASHTAG\">#surveillance</a>&nbsp;cameras utilizing AI-based face recognition and match this information with publicly available photos of you.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Note: At the end of 2019, the USA FREEDOM Act (former USA PATRIOT Act), that provides the legal basis for government surveillance, was renewed again.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>How much of your private information are you really comfortable giving away? Where is your red line? Do you believe it\'s okay, if the entire population is being placed under general suspicion and under surveillance to identify&amp;track a small minority of outlaws&amp;criminals?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Imagine what today\'s surveillance technology in the hands of authoritarian regimes mean for civil rights activists, journalists or lawyers. Surveillance is a means of control&amp;suppression.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The U.S. Constitution comprises no \"Right to Privacy\", even though some US-Americans believe they have such a right. As long as Tech companies spend tens of millions for lobbying the government, the likelihood for effective legislation for protecting citizen\'s privacy is close to zero.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We don\'t need to compromise privacy and liberty to achieve safety. We just need three iron rules:<br>▶︎&nbsp;Privacy is essential to democracy and liberty ;<br>▶︎&nbsp;Everyone should be given the ability to discover who is using his/her personal data and how ;<br>▶︎&nbsp;Our privacy is not something that can be traded in exchange for access to a \"free\" social media app or a smartphone.<br>�<br>Our freedom to think, speak and act, as we want, is key. A society of surveillance is just one step away from a society of submission.<br>From 1933 onwards, Germany was not only ruled by the most radical anti-Semites in history, but they brought about two decisive changes:<br>1. They intensified the latent anti-Semitism in the population, which had developed since the founder\'s crisis in 1873 through the influence of Otto Glagau, Wilhelm Marr or Gustav Freytag, by inciting the Jews as scapegoats<br>2. With the help of the Gestapo, SA and SS, they succeeded in intimidating and keeping the (much larger) passive-critical part of the population in check through a system of surveillance, denunciation and threat.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Source and complementary readings:<br>▶︎&nbsp;\"How was Adolf Hitler possible?\" published on November 12, 2019, <a href=\"https://t1p.de/vujt\">in German:</a>&nbsp;&nbsp;(<a href=\"https://t1p.de/5dhc\">English translation</a>&nbsp;) ;<br>▶︎&nbsp;<a href=\"https://t1p.de/ypux\">\"How the U.S. government discredits the U.S. American IT industry\"</a> published on August 20, 2017&nbsp;(in<a href=\"https://t1p.de/89y3\"> German</a>&nbsp;) ;<br>▶︎&nbsp;\"<a href=\"https://t1p.de/inz5\">The spy in your pocket\"</a> published on April 25, 2017:&nbsp;(<a href=\"https://t1p.de/nhlr\">in German</a>) ;<br>▶︎&nbsp;<a href=\"https://t1p.de/2cc0﻿\">\"The digital disruption of warfare\"</a> published on June 11, 2017&nbsp;&nbsp;(only in English so far) ;<br>▶︎&nbsp;\"<a href=\"https://t1p.de/00q3﻿\">Digitalization strategy for countries</a>\" published on February 21, 2018:&nbsp;&nbsp;(<a href=\"https://t1p.de/g08k\">in German</a>) ;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>With thanks to Kurt Brand.</p>\n<!-- /wp:paragraph -->','You Should be Freaking out About Privacy','','inherit','closed','closed','','511-revision-v1','','','2020-01-04 14:05:56','2020-01-04 14:05:56','',511,'https://datarainbow.eu/2020/01/04/511-revision-v1/',0,'revision','',0),(523,5,'2020-01-04 14:12:56','2020-01-04 14:12:56','<!-- wp:paragraph -->\n<p>A New Year, a new decade, a new Privacy law, the <a href=\"https://www.caprivacy.org\">California Consumer Privacy Act</a> entered into force this January 2010.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU General Data Protection Regulation made a big bang noise with its unprecedented treat of fines. The general public started to be more aware of the value of their personal data. As we had predicted we whitened a deluge of Data Subject Access Request. However, Data Protection Authorities enforcements in the EU have been rather disappointing. The UK ICO has just announced <a href=\"https://www.mishcon.com/news/ico-agrees-delay-over-gdpr-fines-with-both-ba-and-marriott\">the British Airways and Marriott Hotels \'intends of fine\' decision has been delayed</a>. The Irish Data Protection Commissionner is still awaited to prosecute the US corporations who have found refuge in Ireland for its tax and legislation clemency. The French CNIL change of Presidency seems to have affected its activities. France has so far created two breaches in the principle of consistency mechanisms in the enforcement of the regulation : first by following the Spanish authority in the creation of Data Protection Officers certification despite the position of the EDPB and more importantly by delaying enforcement of cookies and tracking regulations. France is in total contradiction with the recent European Court of Justice ruling in Planet 49. Web tracking cookies that are not purely functional require clear transparency in the language of the target audience, and should require pre consent. This is important and we deeply deplore official websites allowing the web tracking of their visitors. Sharing personal data with third parties - think Google Analytics or Facebook React JS free library codes as we have previously wrote about - result on becoming co-controller and liable as such. So far, kudos to the Romanian DPO for its enforcement and the German DPAs keeping their promise. The Belgian DPA has shown some recent activities. A few members have not yet catch up with the regulation. Overall, as the EDBP has warned, DPAs have lacked resources.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU\'s top data protection official Andrea Jelinek told the EU parliament that 4/5th of member state authorities had insufficient funds and/or personnel to do their job. She said member states needed to make sure to provide sufficient resources. <a href=\"https://www.politico.eu/article/we-have-a-huge-problem-european-regulator-despairs-over-lack-of-enforcement/\">‘We have a huge problem’: European regulator despairs over lack of enforcement. The world’s toughest privacy law proves toothless in the eyes of many critics.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Paul Nemitz, Principal Adviser on Justice Policy, EU Commission; Member of German Data Ethics, wrote on a tweet \"<em>Governments have lost ability to control </em><a href=\"https://twitter.com/hashtag/Google?src=hashtag_click\"><em>#Google</em></a><em> and </em><a href=\"https://twitter.com/hashtag/Facebook?src=hashtag_click\"><em>#Facebook</em></a><em>. These companies are undermining the process of democracy itself, becoming facilitators of political disinformation, influencing the political system and disrupting labour and capital markets</em>\". <br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Opinion Global Economy A productive economic bubble is my wish for 2020 Speculation is a part of innovation and in the right conditions it can be a positive force RANA FOROOHAR</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> <a href=\"http://www.pearltrees.com/privacyday/facial-recognition/id23427152\">Facial recognition technologies</a> continue their controversial expansion inspiring a wave of privacy fears as the software creeps into every corner of life in the US an Europe, with Chinese technologies.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596\">IoT devices</a> are showing their insecurity, one example being the<a href=\"https://www-independent-co-uk.cdn.ampproject.org/c/s/www.independent.co.uk/life-style/gadgets-and-tech/news/google-nest-cameras-spying-home-xiaomi-hub-a9268696.html?amp&amp;fbclid=IwAR2DHiQ-Kb-cVGHOQdWMtt3lreiKBHdEtZJoOnU-grp9D2vLVffgk8RuK-4\"> Google connected camera</a> after the<a href=\"https://gizmodo-com.cdn.ampproject.org/c/s/gizmodo.com/rings-security-woes-cause-some-tech-review-sites-to-rec-1840634944/amp?fbclid=IwAR0oiPZy0PvKi01LRr95bGX5ff2emGY7SzGtv-PLjMP6onABva_SFJq30b4\"> Amazon Ring</a> hack due to weak passwords or <a href=\"https://amp-usatoday-com.cdn.ampproject.org/c/s/amp.usatoday.com/amp/2792152001?fbclid=IwAR2gSMctKCRkGhfyOCixulfNHGlx8kRqMKRQwpBdFLQRxJQTzK0r7I_3ZQ4\">Smart TVs spying</a>. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>\"Smart doorbells are primarily marketed as a deterrent to stop people from committing crimes, and it\'s an aspiring goal to shoot for. The problem with any type of surveillance apparatus is when it wanders away from its intended use.” <a href=\"https://iapp.org/news/a/with-smart-doorbells-this-holiday-its-about-balancing-the-naughty-and-nice/?fbclid=IwAR0aGN3XXMRzbjxCdZRUgo-M3tLSXAXh17XYDvk_4GO1CrTpoqnKEPy680g\">Here</a></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>The New York Times / Opinion - The Privacy Project, has been publishing a series of articles on privacy. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/19/opinion/location-tracking-cell-phone.html?fbclid=IwAR2BTp6snhJ6-7Wo0B2jnrcOKnomwi8oDyGEB1zveoEqcwpTKKxq8GuVLM0\">Twelve Million Phones, one Dataset, no Privacy</a> :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>“THE COMPANIES THAT COLLECT all this information on your movements justify their business on the basis of three claims: People consent to be tracked, the data is anonymous and the data is secure.</p><p>None of those claims hold up, based on the file we’ve obtained and our review of company practices.”</p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/12/20/opinion/privacy-surveillance-video.html?fbclid=IwAR0JJh_3GXGLE0Up9GRnK6c1PfKNcKszBMTfYAu7Z9IwomgT5yAs7pWMUqU\">You Should Be Freaking Out About Privacy - Nothing to hide, nothing to fear? Think again.</a> </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/12/22/us/politics/totok-app-uae.html\">It Seemed Like a Popular Chat App</a>. It’s Secretly a Spy Tool.&nbsp; - ToTok, an Emirati messaging app that has been downloaded to millions of phones, is the latest escalation of a digital arms race.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/location-data-democracy-protests.html?fbclid=IwAR2qtuwsGfd0J6JDfcRowToScxO4qMmFQdwsPDUT1RbNA5WzoVIHe0RVCqY\">How Your Phone Betrays Democracy&nbsp;-</a><br>Your phone is emitting a beacon, one that’s invisible to the human eye. This signal is captured and collected, sometimes many times per minute. For protesters, that means a spy that keeps broadcasting long after the protesters head to their homes and take off their masks.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/location-data-privacy-rights.html?fbclid=IwAR3m0uQdTOcoIlpRE-EwBMQwgQfhdDVqSdA9BMi7n6HuuWdd9Hj6Mck2VE8\">Total Surveillance Is Not What America Signed Up For</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/pasadena-smartphone-spying.html?fbclid=IwAR2f12Wkq5VfP1A4LkgmWoJvPH8u5ieFNOCZK2ySHTPjSsJsasnE8oQV3gE\">Where Even the Children Are Being Tracked</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www-nytimes-com.cdn.ampproject.org/c/s/www.nytimes.com/2019/12/25/opinion/location-tracking-gifts.amp.html?fbclid=IwAR2VYeqa6xeWINXsa66dtu8-r5FG6Fug0anv-RNAuzSuDL8fnSJTscSDopk\">Giving the Gift of Surveillance</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www-nytimes-com.cdn.ampproject.org/c/s/www.nytimes.com/2019/12/24/opinion/location-privacy.amp.html?fbclid=IwAR05bmcfdXkZmgNjMEwcpTTezPOoDw3p6cYw9WHtHWDTzPFET8W_NbJJTYw\">Be Paranoid About Privacy</a>&nbsp;- We need to take back our privacy from tech companies — even if that means sacrificing convenience.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These are few of the most recent publications by the NYT. The Guardian and the Washington Post have also been raising awareness on privacy issues to read if you wondered <a href=\"https://www-washingtonpost-com.cdn.ampproject.org/c/s/www.washingtonpost.com/technology/2019/12/31/how-we-survive-surveillance-apocalypse/?outputType=amp&amp;fbclid=IwAR1HCmigJVvyq6bfiTv4dArQtHQ8PIHtqkRaduCN-LaoPrmCY6Zcms03UQ4\">How we Will Survive Surveillance Apocalypse</a>.  </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK Brexit will pause serious issues in the free flow of personal data as UK will become a country of non-adequate data protection. The direct consequence will be the need for Standard Contractual Clauses or Binding Corporate Rules and appointment of EU preventatives for UK organisations and non UK organisations that had opted for nomination of a representative in the UK. It is rather misleading to say that \"<a href=\"https://www.thetimes.co.uk/article/brussels-threat-to-block-city-trade-unless-uk-agrees-to-europes-rules-fpj75qq6m\">Brussels threat to block City trade unless UK agrees to Europe’s rules</a>\". the reality is the UK decision to leave with no deal. The actual consequences of the Brexit are still unknown and certainly more diplomatic than legal. We can only speculate.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><br>2019 was the year of the EU Data Protection rules.<br>2020 “is expected to be a big year in federal privacy and data breach litigation.”! By Daniel R. Stoller, Esq.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1. <a href=\"https://lnkd.in/eKyffgs﻿\">Facebook’s High Court Privacy Fights Lead 2020</a> Lawsuits to Watch, </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2. <a href=\"https://lnkd.in/eCw3cpV﻿\">States Press Ahead With Privacy Laws Even as Congress Stalls</a>, </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>3. <a href=\"https://lnkd.in/ewyB-Kh﻿\">EU Privacy Watchdogs Urged to Probe Netflix, Amazon, Spotify.</a><a href=\"https://twitter.com/hashtag/FacialRecognition?src=hashtag_click\">#FacialRecognition</a> is inspiring a wave of <a href=\"https://twitter.com/hashtag/privacy?src=hashtag_click\">#privacy</a> fears as the software creeps into every corner of life in the US &amp; Europe.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These are few of the main privacy news of the year. The battle for privacy and Human dignity is ongoing.</p>\n<!-- /wp:paragraph -->','Privacy at a glance','','inherit','closed','closed','','508-revision-v1','','','2020-01-04 14:12:56','2020-01-04 14:12:56','',508,'https://datarainbow.eu/2020/01/04/508-revision-v1/',0,'revision','',0),(525,5,'2020-01-04 14:34:09','2020-01-04 14:34:09','<!-- wp:paragraph -->\n<p>A New Year, a new decade, a new Privacy law, the <a href=\"https://www.caprivacy.org\">California Consumer Privacy Act</a> entered into force this January 2010.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU General Data Protection Regulation made a big bang noise with its unprecedented treat of fines. The general public started to be more aware of the value of their personal data. As we had predicted we whitened a deluge of Data Subject Access Request. However, Data Protection Authorities enforcements in the EU have been rather disappointing. The <a href=\"https://datarainbow.eu/2019/07/10/uk-watchdog-investigation-of-british-airways-and-marriott-hotels-security-breaches/\">UK ICO</a> has just announced <a href=\"https://www.mishcon.com/news/ico-agrees-delay-over-gdpr-fines-with-both-ba-and-marriott\">the British Airways and Marriott Hotels \'intends of fine\' decision has been delayed</a>. The Irish Data Protection Commissionner is still awaited to prosecute the <a href=\"https://datarainbow.eu/2019/04/04/facebook-saga/\">US corporations</a> who have found refuge in Ireland for its tax and legislation clemency. <a href=\"https://datarainbow.eu/2019/01/27/french-cnils-six-first-month-of-gdpr/\">The French CNIL</a> change of Presidency seems to have affected its activities. France has so far created two breaches in the principle of consistency mechanisms in the enforcement of the regulation : first by following the Spanish authority in the creation of Data Protection Officers certification despite the position of the EDPB and more importantly by delaying enforcement of cookies and tracking regulations. France is in total contradiction with the recent European Court of Justice ruling in Planet 49. Web tracking cookies that are not purely functional require clear transparency in the language of the target audience, and should require pre consent. This is important and we deeply deplore official websites allowing the web tracking of their visitors. Sharing personal data with third parties - think Google Analytics or Facebook React JS free library codes as we have previously wrote about - result on becoming co-controller and liable as such. So far, kudos to the <a href=\"http://www.pearltrees.com/privacyday/romania/id25627143\">Romanian DPA</a> for its enforcement and the <a href=\"https://datarainbow.eu/2019/02/22/increasing-fines-expected-from-german-dpas/\">German DPAs</a> keeping their promise. The <a href=\"http://www.pearltrees.com/privacyday/belgium-dpa/id23770807#item282897698\">Belgian DPA</a> has shown some recent activities. A few member states have not yet catch up with the regulation. Overall, as the <a href=\"http://www.pearltrees.com/privacyday/european-data-protection-board/id23766290\">EDBP</a> has warned, DPAs have lacked resources.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU\'s top data protection official Andrea Jelinek told the EU parliament that 4/5th of member state authorities had insufficient funds and/or personnel to do their job. She said member states needed to make sure to provide sufficient resources. <a href=\"https://www.politico.eu/article/we-have-a-huge-problem-european-regulator-despairs-over-lack-of-enforcement/\">‘We have a huge problem’: European regulator despairs over lack of enforcement. The world’s toughest privacy law proves toothless in the eyes of many critics.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Paul Nemitz, Principal Adviser on Justice Policy, EU Commission; Member of German Data Ethics, wrote on a tweet \"<em>Governments have lost ability to control </em><a href=\"https://twitter.com/hashtag/Google?src=hashtag_click\"><em>#Google</em></a><em> and </em><a href=\"https://twitter.com/hashtag/Facebook?src=hashtag_click\"><em>#Facebook</em></a><em>. These companies are undermining the process of democracy itself, becoming facilitators of political disinformation, influencing the political system and disrupting labour and capital markets</em>\". <br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Opinion Global Economy A productive economic bubble is my wish for 2020 Speculation is a part of innovation and in the right conditions it can be a positive force RANA FOROOHAR</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> <a href=\"http://www.pearltrees.com/privacyday/facial-recognition/id23427152\">Facial recognition technologies</a> continue their controversial expansion inspiring a wave of privacy fears as the software creeps into every corner of life in the US an Europe, with Chinese technologies.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596\">IoT devices</a> are showing their insecurity, one example being the<a href=\"https://www-independent-co-uk.cdn.ampproject.org/c/s/www.independent.co.uk/life-style/gadgets-and-tech/news/google-nest-cameras-spying-home-xiaomi-hub-a9268696.html?amp&amp;fbclid=IwAR2DHiQ-Kb-cVGHOQdWMtt3lreiKBHdEtZJoOnU-grp9D2vLVffgk8RuK-4\"> Google connected camera</a> after the<a href=\"https://gizmodo-com.cdn.ampproject.org/c/s/gizmodo.com/rings-security-woes-cause-some-tech-review-sites-to-rec-1840634944/amp?fbclid=IwAR0oiPZy0PvKi01LRr95bGX5ff2emGY7SzGtv-PLjMP6onABva_SFJq30b4\"> Amazon Ring</a> hack due to weak passwords or <a href=\"https://amp-usatoday-com.cdn.ampproject.org/c/s/amp.usatoday.com/amp/2792152001?fbclid=IwAR2gSMctKCRkGhfyOCixulfNHGlx8kRqMKRQwpBdFLQRxJQTzK0r7I_3ZQ4\">Smart TVs spying</a>. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>\"Smart doorbells are primarily marketed as a deterrent to stop people from committing crimes, and it\'s an aspiring goal to shoot for. The problem with any type of surveillance apparatus is when it wanders away from its intended use.” <a href=\"https://iapp.org/news/a/with-smart-doorbells-this-holiday-its-about-balancing-the-naughty-and-nice/?fbclid=IwAR0aGN3XXMRzbjxCdZRUgo-M3tLSXAXh17XYDvk_4GO1CrTpoqnKEPy680g\">Here</a></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>The New York Times / Opinion - The Privacy Project, has been publishing a series of articles on privacy. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/19/opinion/location-tracking-cell-phone.html?fbclid=IwAR2BTp6snhJ6-7Wo0B2jnrcOKnomwi8oDyGEB1zveoEqcwpTKKxq8GuVLM0\">Twelve Million Phones, one Dataset, no Privacy</a> :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>“THE COMPANIES THAT COLLECT all this information on your movements justify their business on the basis of three claims: People consent to be tracked, the data is anonymous and the data is secure.</p><p>None of those claims hold up, based on the file we’ve obtained and our review of company practices.”</p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/12/20/opinion/privacy-surveillance-video.html?fbclid=IwAR0JJh_3GXGLE0Up9GRnK6c1PfKNcKszBMTfYAu7Z9IwomgT5yAs7pWMUqU\">You Should Be Freaking Out About Privacy - Nothing to hide, nothing to fear? Think again.</a> </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/12/22/us/politics/totok-app-uae.html\">It Seemed Like a Popular Chat App</a>. It’s Secretly a Spy Tool.&nbsp; - ToTok, an Emirati messaging app that has been downloaded to millions of phones, is the latest escalation of a digital arms race.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/location-data-democracy-protests.html?fbclid=IwAR2qtuwsGfd0J6JDfcRowToScxO4qMmFQdwsPDUT1RbNA5WzoVIHe0RVCqY\">How Your Phone Betrays Democracy&nbsp;-</a><br>Your phone is emitting a beacon, one that’s invisible to the human eye. This signal is captured and collected, sometimes many times per minute. For protesters, that means a spy that keeps broadcasting long after the protesters head to their homes and take off their masks.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/location-data-privacy-rights.html?fbclid=IwAR3m0uQdTOcoIlpRE-EwBMQwgQfhdDVqSdA9BMi7n6HuuWdd9Hj6Mck2VE8\">Total Surveillance Is Not What America Signed Up For</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/pasadena-smartphone-spying.html?fbclid=IwAR2f12Wkq5VfP1A4LkgmWoJvPH8u5ieFNOCZK2ySHTPjSsJsasnE8oQV3gE\">Where Even the Children Are Being Tracked</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www-nytimes-com.cdn.ampproject.org/c/s/www.nytimes.com/2019/12/25/opinion/location-tracking-gifts.amp.html?fbclid=IwAR2VYeqa6xeWINXsa66dtu8-r5FG6Fug0anv-RNAuzSuDL8fnSJTscSDopk\">Giving the Gift of Surveillance</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www-nytimes-com.cdn.ampproject.org/c/s/www.nytimes.com/2019/12/24/opinion/location-privacy.amp.html?fbclid=IwAR05bmcfdXkZmgNjMEwcpTTezPOoDw3p6cYw9WHtHWDTzPFET8W_NbJJTYw\">Be Paranoid About Privacy</a>&nbsp;- We need to take back our privacy from tech companies — even if that means sacrificing convenience.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These are few of the most recent publications by the NYT. The Guardian and the Washington Post have also been raising awareness on privacy issues to read if you wondered <a href=\"https://www-washingtonpost-com.cdn.ampproject.org/c/s/www.washingtonpost.com/technology/2019/12/31/how-we-survive-surveillance-apocalypse/?outputType=amp&amp;fbclid=IwAR1HCmigJVvyq6bfiTv4dArQtHQ8PIHtqkRaduCN-LaoPrmCY6Zcms03UQ4\">How we Will Survive Surveillance Apocalypse</a>.  </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK Brexit will pause serious issues in the free flow of personal data as UK will become a country of non-adequate data protection. The direct consequence will be the need for Standard Contractual Clauses or Binding Corporate Rules and appointment of EU preventatives for UK organisations and non UK organisations that had opted for nomination of a representative in the UK. It is rather misleading to say that \"<a href=\"https://www.thetimes.co.uk/article/brussels-threat-to-block-city-trade-unless-uk-agrees-to-europes-rules-fpj75qq6m\">Brussels threat to block City trade unless UK agrees to Europe’s rules</a>\". the reality is the UK decision to leave with no deal. The actual consequences of the Brexit are still unknown and certainly more diplomatic than legal. We can only speculate.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><br>2019 was the year of the EU Data Protection rules.<br>2020 “is expected to be a big year in federal privacy and data breach litigation.”! By Daniel R. Stoller, Esq.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1. <a href=\"https://lnkd.in/eKyffgs﻿\">Facebook’s High Court Privacy Fights Lead 2020</a> Lawsuits to Watch, </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2. <a href=\"https://lnkd.in/eCw3cpV﻿\">States Press Ahead With Privacy Laws Even as Congress Stalls</a>, </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>3. <a href=\"https://lnkd.in/ewyB-Kh﻿\">EU Privacy Watchdogs Urged to Probe Netflix, Amazon, Spotify.</a><a href=\"https://twitter.com/hashtag/FacialRecognition?src=hashtag_click\">#FacialRecognition</a> is inspiring a wave of <a href=\"https://twitter.com/hashtag/privacy?src=hashtag_click\">#privacy</a> fears as the software creeps into every corner of life in the US &amp; Europe.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These are few of the main privacy news of the year. The battle for privacy and Human dignity is ongoing.</p>\n<!-- /wp:paragraph -->','Privacy at a glance','','inherit','closed','closed','','508-revision-v1','','','2020-01-04 14:34:09','2020-01-04 14:34:09','',508,'https://datarainbow.eu/2020/01/04/508-revision-v1/',0,'revision','',0),(528,5,'2020-01-04 20:45:53','2020-01-04 20:45:53','<!-- wp:paragraph -->\n<p>A New Year, a new decade, a new Privacy law, the <a href=\"https://www.caprivacy.org\">California Consumer Privacy Act</a> entered into force this January 2020.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU General Data Protection Regulation made a big bang noise with its unprecedented treat of fines. The general public started to be more aware of the value of their personal data. As we had predicted we whitened a deluge of Data Subject Access Request. However, Data Protection Authorities enforcements in the EU have been rather disappointing. The <a href=\"https://datarainbow.eu/2019/07/10/uk-watchdog-investigation-of-british-airways-and-marriott-hotels-security-breaches/\">UK ICO</a> has just announced <a href=\"https://www.mishcon.com/news/ico-agrees-delay-over-gdpr-fines-with-both-ba-and-marriott\">the British Airways and Marriott Hotels \'intends of fine\' decision has been delayed</a>. The Irish Data Protection Commissionner is still awaited to prosecute the <a href=\"https://datarainbow.eu/2019/04/04/facebook-saga/\">US corporations</a> who have found refuge in Ireland for its tax and legislation clemency. <a href=\"https://datarainbow.eu/2019/01/27/french-cnils-six-first-month-of-gdpr/\">The French CNIL</a> change of Presidency seems to have affected its activities. France has so far created two breaches in the principle of consistency mechanisms in the enforcement of the regulation : first by following the Spanish authority in the creation of Data Protection Officers certification despite the position of the EDPB and more importantly by delaying enforcement of cookies and tracking regulations. France is in total contradiction with the recent European Court of Justice ruling in Planet 49. Web tracking cookies that are not purely functional require clear transparency in the language of the target audience, and should require pre consent. This is important and we deeply deplore official websites allowing the web tracking of their visitors. Sharing personal data with third parties - think Google Analytics or Facebook React JS free library codes as we have previously wrote about - result on becoming co-controller and liable as such. So far, kudos to the <a href=\"http://www.pearltrees.com/privacyday/romania/id25627143\">Romanian DPA</a> for its enforcement and the <a href=\"https://datarainbow.eu/2019/02/22/increasing-fines-expected-from-german-dpas/\">German DPAs</a> keeping their promise. The <a href=\"http://www.pearltrees.com/privacyday/belgium-dpa/id23770807#item282897698\">Belgian DPA</a> has shown some recent activities. A few member states have not yet catch up with the regulation. Overall, as the <a href=\"http://www.pearltrees.com/privacyday/european-data-protection-board/id23766290\">EDBP</a> has warned, DPAs have lacked resources.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU\'s top data protection official Andrea Jelinek told the EU parliament that 4/5th of member state authorities had insufficient funds and/or personnel to do their job. She said member states needed to make sure to provide sufficient resources. <a href=\"https://www.politico.eu/article/we-have-a-huge-problem-european-regulator-despairs-over-lack-of-enforcement/\">‘We have a huge problem’: European regulator despairs over lack of enforcement. The world’s toughest privacy law proves toothless in the eyes of many critics.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Paul Nemitz, Principal Adviser on Justice Policy, EU Commission; Member of German Data Ethics, wrote on a tweet \"<em>Governments have lost ability to control </em><a href=\"https://twitter.com/hashtag/Google?src=hashtag_click\"><em>#Google</em></a><em> and </em><a href=\"https://twitter.com/hashtag/Facebook?src=hashtag_click\"><em>#Facebook</em></a><em>. These companies are undermining the process of democracy itself, becoming facilitators of political disinformation, influencing the political system and disrupting labour and capital markets</em>\". <br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Opinion Global Economy A productive economic bubble is my wish for 2020 Speculation is a part of innovation and in the right conditions it can be a positive force RANA FOROOHAR</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> <a href=\"http://www.pearltrees.com/privacyday/facial-recognition/id23427152\">Facial recognition technologies</a> continue their controversial expansion inspiring a wave of privacy fears as the software creeps into every corner of life in the US an Europe, with Chinese technologies.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596\">IoT devices</a> are showing their insecurity, one example being the<a href=\"https://www-independent-co-uk.cdn.ampproject.org/c/s/www.independent.co.uk/life-style/gadgets-and-tech/news/google-nest-cameras-spying-home-xiaomi-hub-a9268696.html?amp&amp;fbclid=IwAR2DHiQ-Kb-cVGHOQdWMtt3lreiKBHdEtZJoOnU-grp9D2vLVffgk8RuK-4\"> Google connected camera</a> after the<a href=\"https://gizmodo-com.cdn.ampproject.org/c/s/gizmodo.com/rings-security-woes-cause-some-tech-review-sites-to-rec-1840634944/amp?fbclid=IwAR0oiPZy0PvKi01LRr95bGX5ff2emGY7SzGtv-PLjMP6onABva_SFJq30b4\"> Amazon Ring</a> hack due to weak passwords or <a href=\"https://amp-usatoday-com.cdn.ampproject.org/c/s/amp.usatoday.com/amp/2792152001?fbclid=IwAR2gSMctKCRkGhfyOCixulfNHGlx8kRqMKRQwpBdFLQRxJQTzK0r7I_3ZQ4\">Smart TVs spying</a>. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>\"Smart doorbells are primarily marketed as a deterrent to stop people from committing crimes, and it\'s an aspiring goal to shoot for. The problem with any type of surveillance apparatus is when it wanders away from its intended use.” <a href=\"https://iapp.org/news/a/with-smart-doorbells-this-holiday-its-about-balancing-the-naughty-and-nice/?fbclid=IwAR0aGN3XXMRzbjxCdZRUgo-M3tLSXAXh17XYDvk_4GO1CrTpoqnKEPy680g\">Here</a></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>The New York Times / Opinion - The Privacy Project, has been publishing a series of articles on privacy. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/19/opinion/location-tracking-cell-phone.html?fbclid=IwAR2BTp6snhJ6-7Wo0B2jnrcOKnomwi8oDyGEB1zveoEqcwpTKKxq8GuVLM0\">Twelve Million Phones, one Dataset, no Privacy</a> :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>“THE COMPANIES THAT COLLECT all this information on your movements justify their business on the basis of three claims: People consent to be tracked, the data is anonymous and the data is secure.</p><p>None of those claims hold up, based on the file we’ve obtained and our review of company practices.”</p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/12/20/opinion/privacy-surveillance-video.html?fbclid=IwAR0JJh_3GXGLE0Up9GRnK6c1PfKNcKszBMTfYAu7Z9IwomgT5yAs7pWMUqU\">You Should Be Freaking Out About Privacy - Nothing to hide, nothing to fear? Think again.</a> </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/12/22/us/politics/totok-app-uae.html\">It Seemed Like a Popular Chat App</a>. It’s Secretly a Spy Tool.&nbsp; - ToTok, an Emirati messaging app that has been downloaded to millions of phones, is the latest escalation of a digital arms race.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/location-data-democracy-protests.html?fbclid=IwAR2qtuwsGfd0J6JDfcRowToScxO4qMmFQdwsPDUT1RbNA5WzoVIHe0RVCqY\">How Your Phone Betrays Democracy&nbsp;-</a><br>Your phone is emitting a beacon, one that’s invisible to the human eye. This signal is captured and collected, sometimes many times per minute. For protesters, that means a spy that keeps broadcasting long after the protesters head to their homes and take off their masks.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/location-data-privacy-rights.html?fbclid=IwAR3m0uQdTOcoIlpRE-EwBMQwgQfhdDVqSdA9BMi7n6HuuWdd9Hj6Mck2VE8\">Total Surveillance Is Not What America Signed Up For</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/12/21/opinion/pasadena-smartphone-spying.html?fbclid=IwAR2f12Wkq5VfP1A4LkgmWoJvPH8u5ieFNOCZK2ySHTPjSsJsasnE8oQV3gE\">Where Even the Children Are Being Tracked</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www-nytimes-com.cdn.ampproject.org/c/s/www.nytimes.com/2019/12/25/opinion/location-tracking-gifts.amp.html?fbclid=IwAR2VYeqa6xeWINXsa66dtu8-r5FG6Fug0anv-RNAuzSuDL8fnSJTscSDopk\">Giving the Gift of Surveillance</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www-nytimes-com.cdn.ampproject.org/c/s/www.nytimes.com/2019/12/24/opinion/location-privacy.amp.html?fbclid=IwAR05bmcfdXkZmgNjMEwcpTTezPOoDw3p6cYw9WHtHWDTzPFET8W_NbJJTYw\">Be Paranoid About Privacy</a>&nbsp;- We need to take back our privacy from tech companies — even if that means sacrificing convenience.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These are few of the most recent publications by the NYT. The Guardian and the Washington Post have also been raising awareness on privacy issues to read if you wondered <a href=\"https://www-washingtonpost-com.cdn.ampproject.org/c/s/www.washingtonpost.com/technology/2019/12/31/how-we-survive-surveillance-apocalypse/?outputType=amp&amp;fbclid=IwAR1HCmigJVvyq6bfiTv4dArQtHQ8PIHtqkRaduCN-LaoPrmCY6Zcms03UQ4\">How we Will Survive Surveillance Apocalypse</a>.  </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK Brexit will pause serious issues in the free flow of personal data as UK will become a country of non-adequate data protection. The direct consequence will be the need for Standard Contractual Clauses or Binding Corporate Rules and appointment of EU preventatives for UK organisations and non UK organisations that had opted for nomination of a representative in the UK. It is rather misleading to say that \"<a href=\"https://www.thetimes.co.uk/article/brussels-threat-to-block-city-trade-unless-uk-agrees-to-europes-rules-fpj75qq6m\">Brussels threat to block City trade unless UK agrees to Europe’s rules</a>\". the reality is the UK decision to leave with no deal. The actual consequences of the Brexit are still unknown and certainly more diplomatic than legal. We can only speculate.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><br>2019 was the year of the EU Data Protection rules.<br>2020 “is expected to be a big year in federal privacy and data breach litigation.”! By Daniel R. Stoller, Esq.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1. <a href=\"https://lnkd.in/eKyffgs﻿\">Facebook’s High Court Privacy Fights Lead 2020</a> Lawsuits to Watch, </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2. <a href=\"https://lnkd.in/eCw3cpV﻿\">States Press Ahead With Privacy Laws Even as Congress Stalls</a>, </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>3. <a href=\"https://lnkd.in/ewyB-Kh﻿\">EU Privacy Watchdogs Urged to Probe Netflix, Amazon, Spotify.</a><a href=\"https://twitter.com/hashtag/FacialRecognition?src=hashtag_click\">#FacialRecognition</a> is inspiring a wave of <a href=\"https://twitter.com/hashtag/privacy?src=hashtag_click\">#privacy</a> fears as the software creeps into every corner of life in the US &amp; Europe.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These are few of the main privacy news of the year. The battle for privacy and Human dignity is ongoing.</p>\n<!-- /wp:paragraph -->','Privacy at a glance','','inherit','closed','closed','','508-revision-v1','','','2020-01-04 20:45:53','2020-01-04 20:45:53','',508,'https://datarainbow.eu/2020/01/04/508-revision-v1/',0,'revision','',0),(530,5,'2020-01-05 00:33:34','2020-01-05 00:33:34','<!-- wp:paragraph -->\n<p>Guest post by Kurt Brand, Executive IT Consultant and Interim CDO/CIO/CTO/CISO <br>If you want to do yourself a big favor, please invest a short moment of your precious time to watch this 12 minute New York Times video published on Dec 20, 2019, under the heading \"You should be freaking out about privacy\":&nbsp;<a rel=\"noreferrer noopener\" href=\"https://t1p.de/8pfe?fbclid=IwAR2mQDwX17ReKM0T8z6bu6Cg9V0jMRCNQoFviWCmp7TPaByMoiRqcLaTo2Y\" target=\"_blank\">https://t1p.de/8pfe</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The video explains i.a.:<br>▶︎ How your <a href=\"https://www.facebook.com/hashtag/privacy?source=feed_text&amp;epa=HASHTAG\">#privacy</a> is invaded at an industrial scale 24/7 and 365 days/year ;<br>▶︎ How your personal information is raided, traded and used against you in terrifying ways, while you are reading this posting ;<br>▶︎ How advertising companies, intelligence services and criminals are able to combine small information pieces for building up complete profiles of you (\"digital twins\") ;<br>▶︎ How advertising is used to predict and manipulate your individual mood and behavior by addressing your (sometimes even subconscious) weak spots ;<br>▶︎ How the combination of information from different sources can bring you into serious trouble - deliberately or accidentally ;<br>▶︎ How you can be identified even within masses of people by analyzing videos from public <a href=\"https://www.facebook.com/hashtag/surveillance?source=feed_text&amp;epa=HASHTAG\">#surveillance</a> cameras utilizing AI-based face recognition and match this information with publicly available photos of you.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Note: At the end of 2019, the USA FREEDOM Act (former USA PATRIOT Act), that provides the legal basis for government surveillance, was renewed again.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>How much of your private information are you really comfortable giving away? Where is your red line? Do you believe it\'s okay, if the entire population is being placed under general suspicion and under surveillance to identify and track a small minority of outlaws and criminals?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Imagine what today\'s surveillance technology in the hands of authoritarian regimes mean for civil rights activists, journalists or lawyers. Surveillance is a means of control and suppression.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The U.S. Constitution comprises no \"Right to Privacy\", even though some US-Americans believe they have such a right. As long as Tech companies spend tens of millions for lobbying the government, the likelihood for effective legislation for protecting citizen\'s privacy is close to zero.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We don\'t need to compromise privacy and liberty to achieve safety. We just need three iron rules :<br>▶︎ Privacy is essential to democracy and liberty ;<br>▶︎ Everyone should be given the ability to discover who is using his/her personal data and how ;<br>▶︎ Our privacy is not something that can be traded in exchange for access to a \"free\" social media app or a smartphone.<br>�<br>Our freedom to think, speak and act, as we want, is key. A society of surveillance is just one step away from a society of submission.<br>From 1933 onwards, Germany was not only ruled by the most radical anti-Semites in history, but they brought about two decisive changes :<br>1. They intensified the latent anti-Semitism in the population, which had developed since the founder\'s crisis in 1873 through the influence of Otto Glagau, Wilhelm Marr or Gustav Freytag, by inciting the Jews as scapegoats<br>2. With the help of the Gestapo, SA and SS, they succeeded in intimidating and keeping the (much larger) passive-critical part of the population in check through a system of surveillance, denunciation and threat.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Source and complementary readings :<br>▶︎ \"How was Adolf Hitler possible?\" published on November 12, 2019, <a href=\"https://t1p.de/vujt\">in German:</a>  (<a href=\"https://t1p.de/5dhc\">English translation</a> ) ;<br>▶︎ <a href=\"https://t1p.de/ypux\">\"How the U.S. government discredits the U.S. American IT industry\"</a> published on August 20, 2017 (in<a href=\"https://t1p.de/89y3\"> German</a> ) ;<br>▶︎ \"<a href=\"https://t1p.de/inz5\">The spy in your pocket\"</a> published on April 25, 2017: (<a href=\"https://t1p.de/nhlr\">in German</a>) ;<br>▶︎ <a href=\"https://t1p.de/2cc0﻿\">\"The digital disruption of warfare\"</a> published on June 11, 2017  (only in English so far) ;<br>▶︎ \"<a href=\"https://t1p.de/00q3﻿\">Digitalization strategy for countries</a>\" published on February 21, 2018:  (<a href=\"https://t1p.de/g08k\">in German</a>) ;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>With thanks to Kurt Brand.</p>\n<!-- /wp:paragraph -->','You Should be Freaking out About Privacy','','inherit','closed','closed','','511-revision-v1','','','2020-01-05 00:33:34','2020-01-05 00:33:34','',511,'https://datarainbow.eu/2020/01/05/511-revision-v1/',0,'revision','',0),(532,5,'2020-01-17 19:39:05','2020-01-17 19:39:05','<!-- wp:paragraph -->\n<p>and their threats to fundamental human rights and security</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Leaked EU documents were intercepted by Euractiv journalist Samuel Stolton who published and article <a href=\"https://www.euractiv.com/section/digital/news/leak-commission-considers-facial-recognition-ban-in-ai-white-paper/\">\"LEAK: Commission considers facial recognition ban in AI ‘white paper’.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU Commission white paper suggests a temporary ban of 3 to 5 years on facial recognition in public spaces. Reminding this could provoke a serious conflict between The <a href=\"https://twitter.com/EU_Commission\">EU_Commission</a> and certain member states  - such as <a href=\"http://www.rfi.fr/en/france/20200108-government-wants-test-facial-recognition-video-surveillance-security-civil-liberties\">France</a> and <a href=\"https://www.euractiv.com/section/data-protection/news/german-ministers-plan-to-expand-automatic-facial-recognition-meets-fierce-criticism/\">Germany </a>having already taken different positions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fact, the French CNIL published a document in November 2019 with an English version in December \"<a href=\"https://www.cnil.fr/en/facial-recognition-debate-living-challenges\">Facial recognition: for a debate living up to the challenges\"</a>&nbsp;calling&nbsp;for&nbsp;an&nbsp;in-depth&nbsp;political&nbsp;debate. The purpose of which should be \'to determine in which cases facial recognition is necessary in a democratic society, and in which cases it is not.\' Suggesting a <strong>balanced overview</strong>&nbsp;of&nbsp;the&nbsp;different&nbsp;biometrics existing&nbsp;technologies to assess the risks and determine which technologies are not acceptable in a democratic society and which ones can be assumed with appropriate safeguards.&nbsp;Within&nbsp;the framework of the GDPR, the CNIL has already had the opportunity to allow certain uses in principle, while regulating them in practical terms (border control at airports), and to refuse others (controlling student access in schools).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The <a href=\"https://edpb.europa.eu/news/national-news/2019/facial-recognition-school-renders-swedens-first-gdpr-fine_en\">Swedish data protection authority recently imposed a fine </a>on a school for testing <a href=\"http://www.pearltrees.com/privacyday/fr-schools/id28244027http://www.pearltrees.com/privacyday/fr-schools/id28244027\">facial recognition technology to track its students’ attendance</a>. On the other hand, the <a href=\"https://iapp.org/news/a/swedish-dpa-authorizes-police-to-use-facial-recognition/\">Swedish DPA authorise the use of FR by police forces.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.forbes.com/sites/marisagarcia/2019/11/27/iberia-launches-facial-recognition-app-as-airline-industry-biometric-adoption-advances/amp/\">Iberia Launches Facial Recognition App As Airline Industry Biometric Adoption Advances</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>San Francisco recently became the first US city to&nbsp;<a href=\"https://www.theguardian.com/us-news/2019/may/14/san-francisco-facial-recognition-police-ban\">ban police and other agencies from using automated facial recognition</a>, following widespread condemnation of China’s use of the technology to impose&nbsp;<a href=\"https://www.theguardian.com/news/2019/apr/11/china-hi-tech-war-on-muslim-minority-xinjiang-uighurs-surveillance-face-recognition\">control over millions of Uighur Muslims</a>&nbsp;in the western region of Xinjiang. Somerville, Massachusetts, then <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">Oakland</a> have&nbsp;<a class=\"\" href=\"https://www.technologyreview.com/s/613536/facial-recognition-ban-san-francisco-surveillance-privacy-private-corporate-interests/\">banned government use of facial recognition</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the <a href=\"https://www.telegraph.co.uk/news/2019/10/07/london-council-used-facial-recognition-technology-streets-without/\">London council used facial recognition technology on streets without consulting residents,</a>&nbsp;the UK Information Commissioner\'s Office published its Opinion 2019/01 on the use of live facial recognition technology (LFR) by law enforcement in public places dated 31-10-2019. in summary :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(1) The use of LFR involves the processing of personal data and therefore #data protection law applies, whether it is for a trial or routine operational deployment.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(2) The processing of personal data by ‘competent authorities’ for ‘the law enforcement purposes’ is covered by UK law.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(3) The use of LFR for the law enforcement purposes constitutes ‘sensitive processing’ as it involves the processing of biometric data for the purpose of uniquely identifying a data subject.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(4) Such sensitive processing relates to all facial images captured and analysed by the software. A data protection impact assessment and an ‘appropriate policy document’ must be in place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(5) Sensitive processing occurs irrespective of whether that image yields a match to a person on a watchlist or the biometric data of unmatched persons is subsequently deleted within a short space of time.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(6) Data protection law applies to the whole process of LFR, from consideration about the necessity and proportionality for deployment, the compilation of watchlists, the processing of the biometric data through to the retention and deletion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial images are biometric data as: ‘relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person’ (GDPR Art. 2(14)). The GDPR generally forbids the processing of biometric data for uniquely identifying purposes unless relying on one of the ten exemptions listed in Art. 9(2).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For such technology to be deployed, given that it relies on the large-scale processing of sensitive data, consent would need to be explicit as well as freely-given, informed and specific.&nbsp;Additionally, when deployed in public spaces, how anyone could opt out?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK ICO questioned how far should we, as a society, consent to police forces reducing our privacy in order to keep us safe? They found that \'the current combination of laws, codes and practices relating to LFR will not drive the ethical and legal approach that’s needed to truly manage the risk that this technology presents.\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Statement from Elizabeth Denham, Information Commissioner, on the use of live facial recognition technology in King\'s Cross, London : <em>“Scanning people’s faces as they lawfully go about their daily lives, in order to identify them, is a potential threat to privacy that should concern us all. That is especially the case if it is done without people’s knowledge or understanding. “I remain deeply concerned about the growing use of facial recognition technology in public spaces, not only by law enforcement agencies but also increasingly by the private sector. My office and the judiciary are both independently considering the legal issues and whether the current framework has kept pace with emerging technologies and people’s expectations about how their most sensitive personal data is used. “Facial recognition technology is a priority area for the ICO and when necessary, we will not hesitate to use our investigative and enforcement powers to protect people’s legal rights. “We have launched an investigation following concerns reported in the media regarding the use of live facial recognition in the King\'s Cross area of central London, which thousands of people pass through every day. “As well as requiring detailed information from the relevant organisations about how the technology is used, we will also inspect the system and its operation on-site to assess whether or not it complies with data protection law. “Put simply, any organisations wanting to use facial recognition technology must comply with the law - and they must do so in a fair, transparent and accountable way. They must have documented how and why they believe their use of the technology is legal, proportionate and justified. “We support keeping people safe but new technologies and new uses of sensitive personal data must always be balanced against people’s legal rights.”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>After the High Court ruled in September that the <a href=\"https://www.bbc.co.uk/news/uk-wales-50251643\">South Wales Police had&nbsp;acted lawfully when a shopper complained&nbsp;his human rights</a> were breached when he was photographed, civil rights group Liberty said it was akin to the unregulated taking of DNA or fingerprints without consent, and  is campaigning for an outright ban of the practice. <a href=\"https://www.theguardian.com/technology/2019/jun/07/facial-recognition-technology-liberty-says-england-wales-police-use-should-be-banned\">Facial Recognition is Arsenic in Water of Democracy </a>said Liberty. Martha Spurrier, a human rights lawyer, said the technology had such fundamental problems that, despite police enthusiasm for the equipment, its use on the streets should not be permitted.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham said the use of facial recognition tools represents a \"step change\" in policing techniques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An investigation by commissioner Elizabeth Denham has raised \"serious concerns\" over use of the technology.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham called on the government to introduce a statutory code of practice.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"https://www.bitsoffreedom.nl\">civil liberties </a>organisations<a href=\"https://www.bitsoffreedom.nl\">,</a>&nbsp;such&nbsp;as&nbsp;the&nbsp;<a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">Electronic&nbsp;Frontier&nbsp;Foundation,</a><a href=\"https://epic.org/banfacesurveillance/\">&nbsp;EPIC</a> or <a href=\"https://edri.org/facial-recognition-and-fundamental-rights-101/\">EDRI </a> have expressed concerns. As the CNIL pointed out, facial recognition has the potential to become a particularly ubiquitous and intrusive tool. <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The use of FR in Hong Kong and London Kings Cross has been seen as <a href=\"https://www.dezeen.com/2019/10/09/facial-recognition-hong-kong-threat/\">\"a fundamental threat to society\"</a> says Owen&nbsp;Hopkins.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The European Data Protection Supervisor, Wojciech Wiewiórowski, questioned: <a href=\"https://edps.europa.eu/press-publications/press-news/blog/facial-recognition-solution-search-problem_en\">Facial recognition A solution in search of a problem?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Based on a probability rather than on the absolute certainty of a match between the faces being compared and the baseline \"template\". Variations in performance can therefore have far-reaching consequences for individuals who are mis-identified. Over-reliance on technology can result on serious mis-judgements. The lack of accuracy has serious consequences for individuals being falsely identified whether as criminals or otherwise. Its <a href=\"http://www.pearltrees.com/privacyday/fr-low-accuracy/id28244035\">accuracy has been challenged</a> by several researchers. &nbsp;They are serious potential <a href=\"https://www.kairos.com/blog/face-off-confronting-bias-in-face-recognition-ai\">dangers associated with current&nbsp;racial biases</a> in face recognition, and misidentification could lead to wrongful conviction, or far worse.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>To resist against the rise of the intrusive technology, designers have created <a href=\"http://www.pearltrees.com/privacyday/design-products-combat-fr/id28968440\">clothing and accessories that helps to conceal people\'s identities from A.I.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Whatever the EU decide or regulate, <a href=\"http://www.pearltrees.com/privacyday/fr-china/id28248155\">the technology comes from China</a>&nbsp;or&nbsp;the&nbsp;US where <a href=\"https://threatpost.com/amazon-ring-facial-recognition-watch-list/150681/\">Amazon Plans Ring Facial Recognition-Based ‘Watch List’, Report</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/10/11/technology/flickr-facial-recognition.html\">This article </a>by the privacy expert journalist Kashmir Hill is thought provoking on the use of children\'s pictures posted by parents online on website such as Flickr. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Thiis a technology with many caveats and a major societal impacts. You are invited to read more <a href=\"http://www.pearltrees.com/privacyday/facial-recognition/id23427152\">HERE</a> from various sources to make your own opinion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->','Facial Recognition technologies','Facial Recognition technology collect sensitive biometrics data, they are inacurate and put data at risk.','publish','closed','closed','','facial-recognition-technologies','','\nhttps://edri.org/facial-recognition-and-fundamental-rights-101/','2020-03-06 16:07:42','2020-03-06 16:07:42','',0,'http://datarainbow.eu/?p=532',0,'post','',0),(533,5,'2020-01-17 19:39:05','2020-01-17 19:39:05','<!-- wp:paragraph -->\n<p>and their threats to fundamental human rights and security</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Leaked EU documents were intercepted by Euractiv journalist Samuel Stolton who published and article <a href=\"https://www.euractiv.com/section/digital/news/leak-commission-considers-facial-recognition-ban-in-ai-white-paper/\">\"LEAK: Commission considers facial recognition ban in AI ‘white paper’.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU Commission white paper suggests a temporary ban of 3 to 5 years on facial recognition in public spaces. Reminding this could provoke a serious conflict between The <a href=\"https://twitter.com/EU_Commission\">EU_Commission</a> and certain member states  - such as <a href=\"http://www.rfi.fr/en/france/20200108-government-wants-test-facial-recognition-video-surveillance-security-civil-liberties\">France</a> and <a href=\"https://www.euractiv.com/section/data-protection/news/german-ministers-plan-to-expand-automatic-facial-recognition-meets-fierce-criticism/\">Germany </a>having already taken different positions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fact, the French CNIL published a document in November 2019 with an English version in December \"<a href=\"https://www.cnil.fr/en/facial-recognition-debate-living-challenges\">Facial recognition: for a debate living up to the challenges\"</a>&nbsp;calling&nbsp;for&nbsp;an&nbsp;in-depth&nbsp;political&nbsp;debate. The purpose of which should be \'to determine in which cases facial recognition is necessary in a democratic society, and in which cases it is not.\' Suggesting a <strong>balanced overview</strong>&nbsp;of&nbsp;the&nbsp;different&nbsp;biometrics existing&nbsp;technologies to assess the risks and determine which technologies are not acceptable in a democratic society and which ones can be assumed with appropriate safeguards.&nbsp;Within&nbsp;the framework of the GDPR, the CNIL has already had the opportunity to allow certain uses in principle, while regulating them in practical terms (border control at airports), and to refuse others (controlling student access in schools).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The <a href=\"https://edpb.europa.eu/news/national-news/2019/facial-recognition-school-renders-swedens-first-gdpr-fine_en\">Swedish data protection authority recently imposed a fine </a>on a school for testing <a href=\"http://www.pearltrees.com/privacyday/fr-schools/id28244027http://www.pearltrees.com/privacyday/fr-schools/id28244027\">facial recognition technology to track its students’ attendance</a>. On the other hand, the <a href=\"https://iapp.org/news/a/swedish-dpa-authorizes-police-to-use-facial-recognition/\">Swedish DPA authorise the use of FR by police forces.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.forbes.com/sites/marisagarcia/2019/11/27/iberia-launches-facial-recognition-app-as-airline-industry-biometric-adoption-advances/amp/\">Iberia Launches Facial Recognition App As Airline Industry Biometric Adoption Advances</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>San Francisco recently became the first US city to&nbsp;<a href=\"https://www.theguardian.com/us-news/2019/may/14/san-francisco-facial-recognition-police-ban\">ban police and other agencies from using automated facial recognition</a>, following widespread condemnation of China’s use of the technology to impose&nbsp;<a href=\"https://www.theguardian.com/news/2019/apr/11/china-hi-tech-war-on-muslim-minority-xinjiang-uighurs-surveillance-face-recognition\">control over millions of Uighur Muslims</a>&nbsp;in the western region of Xinjiang.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the <a href=\"https://www.telegraph.co.uk/news/2019/10/07/london-council-used-facial-recognition-technology-streets-without/\">London council used facial recognition technology on streets without consulting residents,</a>&nbsp;the UK Information Commissioner\'s Office published its Opinion 2019/01 on the use of live facial recognition technology (LFR) by law enforcement in public places dated 31-10-2019. in summary :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(1) The use of LFR involves the processing of personal data and therefore #data protection law applies, whether it is for a trial or routine operational deployment.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(2) The processing of personal data by ‘competent authorities’ for ‘the law enforcement purposes’ is covered by UK law.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(3) The use of LFR for the law enforcement purposes constitutes ‘sensitive processing’ as it involves the processing of biometric data for the purpose of uniquely identifying a data subject.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(4) Such sensitive processing relates to all facial images captured and analysed by the software. A data protection impact assessment and an ‘appropriate policy document’ must be in place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(5) Sensitive processing occurs irrespective of whether that image yields a match to a person on a watchlist or the biometric data of unmatched persons is subsequently deleted within a short space of time.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(6) Data protection law applies to the whole process of LFR, from consideration about the necessity and proportionality for deployment, the compilation of watchlists, the processing of the biometric data through to the retention and deletion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial images are biometric data as: ‘relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person’ (GDPR Art. 2(14)). The GDPR generally forbids the processing of biometric data for uniquely identifying purposes unless relying on one of the ten exemptions listed in Art. 9(2).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For such technology to be deployed, given that it relies on the large-scale processing of sensitive data, consent would need to be explicit as well as freely-given, informed and specific.&nbsp;Additionally, when deployed in public spaces, how anyone could opt out?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK ICO questioned how far should we, as a society, consent to police forces reducing our privacy in order to keep us safe? They found that \'the current combination of laws, codes and practices relating to LFR will not drive the ethical and legal approach that’s needed to truly manage the risk that this technology presents.\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Statement from Elizabeth Denham, Information Commissioner, on the use of live facial recognition technology in King\'s Cross, London : <em>“Scanning people’s faces as they lawfully go about their daily lives, in order to identify them, is a potential threat to privacy that should concern us all. That is especially the case if it is done without people’s knowledge or understanding. “I remain deeply concerned about the growing use of facial recognition technology in public spaces, not only by law enforcement agencies but also increasingly by the private sector. My office and the judiciary are both independently considering the legal issues and whether the current framework has kept pace with emerging technologies and people’s expectations about how their most sensitive personal data is used. “Facial recognition technology is a priority area for the ICO and when necessary, we will not hesitate to use our investigative and enforcement powers to protect people’s legal rights. “We have launched an investigation following concerns reported in the media regarding the use of live facial recognition in the King\'s Cross area of central London, which thousands of people pass through every day. “As well as requiring detailed information from the relevant organisations about how the technology is used, we will also inspect the system and its operation on-site to assess whether or not it complies with data protection law. “Put simply, any organisations wanting to use facial recognition technology must comply with the law - and they must do so in a fair, transparent and accountable way. They must have documented how and why they believe their use of the technology is legal, proportionate and justified. “We support keeping people safe but new technologies and new uses of sensitive personal data must always be balanced against people’s legal rights.”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>After the High Court ruled in September that the <a href=\"https://www.bbc.co.uk/news/uk-wales-50251643\">South Wales Police had&nbsp;acted lawfully when a shopper complained&nbsp;his human rights</a> were breached when he was photographed, civil rights group Liberty said it was akin to the unregulated taking of DNA or fingerprints without consent, and  is campaigning for an outright ban of the practice. <a href=\"https://www.theguardian.com/technology/2019/jun/07/facial-recognition-technology-liberty-says-england-wales-police-use-should-be-banned\">Facial Recognition is Arsenic in Water of Democracy </a>said Liberty. Martha Spurrier, a human rights lawyer, said the technology had such fundamental problems that, despite police enthusiasm for the equipment, its use on the streets should not be permitted.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham said the use of facial recognition tools represents a \"step change\" in policing techniques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An investigation by commissioner Elizabeth Denham has raised \"serious concerns\" over use of the technology.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham called on the government to introduce a statutory code of practice.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"https://www.bitsoffreedom.nl\">civil liberties</a> organisations have expressed concerns. As the CNIL pointed out, facial recognition has the potential to become a particularly ubiquitous and intrusive tool. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The use of FR in Hong Kong and London Kings Cross has been seen as <a href=\"https://www.dezeen.com/2019/10/09/facial-recognition-hong-kong-threat/\">\"a fundamental threat to society\"</a> says Owen&nbsp;Hopkins.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The European Data Protection Supervisor, Wojciech Wiewiórowski, questioned: <a href=\"https://edps.europa.eu/press-publications/press-news/blog/facial-recognition-solution-search-problem_en\">Facial recognition A solution in search of a problem?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Based on a probability rather than on the absolute certainty of a match between the faces being compared and the baseline \"template\". Variations in performance can therefore have far-reaching consequences for individuals who are mis-identified. Over-reliance on technology can result on serious mis-judgements. The lack of accuracy has serious consequences for individuals being falsely identified whether as criminals or otherwise. Its <a href=\"http://www.pearltrees.com/privacyday/fr-low-accuracy/id28244035\">accuracy has been challenged</a> by several researchers. &nbsp;They are serious potential <a href=\"https://www.kairos.com/blog/face-off-confronting-bias-in-face-recognition-ai\">dangers associated with current&nbsp;racial biases</a> in face recognition, and misidentification could lead to wrongful conviction, or far worse.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>To resist against the rise of the intrusive technology, designers have created <a href=\"http://www.pearltrees.com/privacyday/design-products-combat-fr/id28968440\">clothing and accessories that helps to conceal people\'s identities from A.I.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Whatever the EU decide or regulate, <a href=\"http://www.pearltrees.com/privacyday/fr-china/id28248155\">the technology comes from China</a>&nbsp;or&nbsp;the&nbsp;US where <a href=\"https://threatpost.com/amazon-ring-facial-recognition-watch-list/150681/\">Amazon Plans Ring Facial Recognition-Based ‘Watch List’, Report</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/10/11/technology/flickr-facial-recognition.html\">This article </a>by the privacy expert journalist Kashmir Hill is thought provoking on the use of children\'s pictures posted by parents online on website such as Flickr. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Thiis a technology with many caveats and a major societal impacts. You are invited to read more <a href=\"http://www.pearltrees.com/privacyday/facial-recognition/id23427152\">HERE</a> from various sources to make your own opinion.</p>\n<!-- /wp:paragraph -->','Facial Recognition technologies','','inherit','closed','closed','','532-revision-v1','','','2020-01-17 19:39:05','2020-01-17 19:39:05','',532,'https://datarainbow.eu/2020/01/17/532-revision-v1/',0,'revision','',0),(534,5,'2020-01-17 19:47:13','2020-01-17 19:47:13','','IMG_1882','','inherit','closed','closed','','img_1882','','','2020-01-17 19:47:13','2020-01-17 19:47:13','',532,'/wp-content/uploads/sites/3/2020/01/IMG_1882.jpg',0,'attachment','image/jpeg',0);
INSERT INTO `wp_3_posts` (`ID`, `post_author`, `post_date`, `post_date_gmt`, `post_content`, `post_title`, `post_excerpt`, `post_status`, `comment_status`, `ping_status`, `post_password`, `post_name`, `to_ping`, `pinged`, `post_modified`, `post_modified_gmt`, `post_content_filtered`, `post_parent`, `guid`, `menu_order`, `post_type`, `post_mime_type`, `comment_count`) VALUES (536,5,'2020-01-17 19:48:47','2020-01-17 19:48:47','<!-- wp:paragraph -->\n<p>and their threats to fundamental human rights and security</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Leaked EU documents were intercepted by Euractiv journalist Samuel Stolton who published and article <a href=\"https://www.euractiv.com/section/digital/news/leak-commission-considers-facial-recognition-ban-in-ai-white-paper/\">\"LEAK: Commission considers facial recognition ban in AI ‘white paper’.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU Commission white paper suggests a temporary ban of 3 to 5 years on facial recognition in public spaces. Reminding this could provoke a serious conflict between The <a href=\"https://twitter.com/EU_Commission\">EU_Commission</a> and certain member states  - such as <a href=\"http://www.rfi.fr/en/france/20200108-government-wants-test-facial-recognition-video-surveillance-security-civil-liberties\">France</a> and <a href=\"https://www.euractiv.com/section/data-protection/news/german-ministers-plan-to-expand-automatic-facial-recognition-meets-fierce-criticism/\">Germany </a>having already taken different positions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fact, the French CNIL published a document in November 2019 with an English version in December \"<a href=\"https://www.cnil.fr/en/facial-recognition-debate-living-challenges\">Facial recognition: for a debate living up to the challenges\"</a>&nbsp;calling&nbsp;for&nbsp;an&nbsp;in-depth&nbsp;political&nbsp;debate. The purpose of which should be \'to determine in which cases facial recognition is necessary in a democratic society, and in which cases it is not.\' Suggesting a <strong>balanced overview</strong>&nbsp;of&nbsp;the&nbsp;different&nbsp;biometrics existing&nbsp;technologies to assess the risks and determine which technologies are not acceptable in a democratic society and which ones can be assumed with appropriate safeguards.&nbsp;Within&nbsp;the framework of the GDPR, the CNIL has already had the opportunity to allow certain uses in principle, while regulating them in practical terms (border control at airports), and to refuse others (controlling student access in schools).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The <a href=\"https://edpb.europa.eu/news/national-news/2019/facial-recognition-school-renders-swedens-first-gdpr-fine_en\">Swedish data protection authority recently imposed a fine </a>on a school for testing <a href=\"http://www.pearltrees.com/privacyday/fr-schools/id28244027http://www.pearltrees.com/privacyday/fr-schools/id28244027\">facial recognition technology to track its students’ attendance</a>. On the other hand, the <a href=\"https://iapp.org/news/a/swedish-dpa-authorizes-police-to-use-facial-recognition/\">Swedish DPA authorise the use of FR by police forces.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.forbes.com/sites/marisagarcia/2019/11/27/iberia-launches-facial-recognition-app-as-airline-industry-biometric-adoption-advances/amp/\">Iberia Launches Facial Recognition App As Airline Industry Biometric Adoption Advances</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>San Francisco recently became the first US city to&nbsp;<a href=\"https://www.theguardian.com/us-news/2019/may/14/san-francisco-facial-recognition-police-ban\">ban police and other agencies from using automated facial recognition</a>, following widespread condemnation of China’s use of the technology to impose&nbsp;<a href=\"https://www.theguardian.com/news/2019/apr/11/china-hi-tech-war-on-muslim-minority-xinjiang-uighurs-surveillance-face-recognition\">control over millions of Uighur Muslims</a>&nbsp;in the western region of Xinjiang.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the <a href=\"https://www.telegraph.co.uk/news/2019/10/07/london-council-used-facial-recognition-technology-streets-without/\">London council used facial recognition technology on streets without consulting residents,</a>&nbsp;the UK Information Commissioner\'s Office published its Opinion 2019/01 on the use of live facial recognition technology (LFR) by law enforcement in public places dated 31-10-2019. in summary :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(1) The use of LFR involves the processing of personal data and therefore #data protection law applies, whether it is for a trial or routine operational deployment.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(2) The processing of personal data by ‘competent authorities’ for ‘the law enforcement purposes’ is covered by UK law.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(3) The use of LFR for the law enforcement purposes constitutes ‘sensitive processing’ as it involves the processing of biometric data for the purpose of uniquely identifying a data subject.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(4) Such sensitive processing relates to all facial images captured and analysed by the software. A data protection impact assessment and an ‘appropriate policy document’ must be in place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(5) Sensitive processing occurs irrespective of whether that image yields a match to a person on a watchlist or the biometric data of unmatched persons is subsequently deleted within a short space of time.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(6) Data protection law applies to the whole process of LFR, from consideration about the necessity and proportionality for deployment, the compilation of watchlists, the processing of the biometric data through to the retention and deletion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial images are biometric data as: ‘relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person’ (GDPR Art. 2(14)). The GDPR generally forbids the processing of biometric data for uniquely identifying purposes unless relying on one of the ten exemptions listed in Art. 9(2).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For such technology to be deployed, given that it relies on the large-scale processing of sensitive data, consent would need to be explicit as well as freely-given, informed and specific.&nbsp;Additionally, when deployed in public spaces, how anyone could opt out?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK ICO questioned how far should we, as a society, consent to police forces reducing our privacy in order to keep us safe? They found that \'the current combination of laws, codes and practices relating to LFR will not drive the ethical and legal approach that’s needed to truly manage the risk that this technology presents.\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Statement from Elizabeth Denham, Information Commissioner, on the use of live facial recognition technology in King\'s Cross, London : <em>“Scanning people’s faces as they lawfully go about their daily lives, in order to identify them, is a potential threat to privacy that should concern us all. That is especially the case if it is done without people’s knowledge or understanding. “I remain deeply concerned about the growing use of facial recognition technology in public spaces, not only by law enforcement agencies but also increasingly by the private sector. My office and the judiciary are both independently considering the legal issues and whether the current framework has kept pace with emerging technologies and people’s expectations about how their most sensitive personal data is used. “Facial recognition technology is a priority area for the ICO and when necessary, we will not hesitate to use our investigative and enforcement powers to protect people’s legal rights. “We have launched an investigation following concerns reported in the media regarding the use of live facial recognition in the King\'s Cross area of central London, which thousands of people pass through every day. “As well as requiring detailed information from the relevant organisations about how the technology is used, we will also inspect the system and its operation on-site to assess whether or not it complies with data protection law. “Put simply, any organisations wanting to use facial recognition technology must comply with the law - and they must do so in a fair, transparent and accountable way. They must have documented how and why they believe their use of the technology is legal, proportionate and justified. “We support keeping people safe but new technologies and new uses of sensitive personal data must always be balanced against people’s legal rights.”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>After the High Court ruled in September that the <a href=\"https://www.bbc.co.uk/news/uk-wales-50251643\">South Wales Police had&nbsp;acted lawfully when a shopper complained&nbsp;his human rights</a> were breached when he was photographed, civil rights group Liberty said it was akin to the unregulated taking of DNA or fingerprints without consent, and  is campaigning for an outright ban of the practice. <a href=\"https://www.theguardian.com/technology/2019/jun/07/facial-recognition-technology-liberty-says-england-wales-police-use-should-be-banned\">Facial Recognition is Arsenic in Water of Democracy </a>said Liberty. Martha Spurrier, a human rights lawyer, said the technology had such fundamental problems that, despite police enthusiasm for the equipment, its use on the streets should not be permitted.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham said the use of facial recognition tools represents a \"step change\" in policing techniques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An investigation by commissioner Elizabeth Denham has raised \"serious concerns\" over use of the technology.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham called on the government to introduce a statutory code of practice.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"https://www.bitsoffreedom.nl\">civil liberties</a> organisations have expressed concerns. As the CNIL pointed out, facial recognition has the potential to become a particularly ubiquitous and intrusive tool. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The use of FR in Hong Kong and London Kings Cross has been seen as <a href=\"https://www.dezeen.com/2019/10/09/facial-recognition-hong-kong-threat/\">\"a fundamental threat to society\"</a> says Owen&nbsp;Hopkins.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The European Data Protection Supervisor, Wojciech Wiewiórowski, questioned: <a href=\"https://edps.europa.eu/press-publications/press-news/blog/facial-recognition-solution-search-problem_en\">Facial recognition A solution in search of a problem?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Based on a probability rather than on the absolute certainty of a match between the faces being compared and the baseline \"template\". Variations in performance can therefore have far-reaching consequences for individuals who are mis-identified. Over-reliance on technology can result on serious mis-judgements. The lack of accuracy has serious consequences for individuals being falsely identified whether as criminals or otherwise. Its <a href=\"http://www.pearltrees.com/privacyday/fr-low-accuracy/id28244035\">accuracy has been challenged</a> by several researchers. &nbsp;They are serious potential <a href=\"https://www.kairos.com/blog/face-off-confronting-bias-in-face-recognition-ai\">dangers associated with current&nbsp;racial biases</a> in face recognition, and misidentification could lead to wrongful conviction, or far worse.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>To resist against the rise of the intrusive technology, designers have created <a href=\"http://www.pearltrees.com/privacyday/design-products-combat-fr/id28968440\">clothing and accessories that helps to conceal people\'s identities from A.I.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Whatever the EU decide or regulate, <a href=\"http://www.pearltrees.com/privacyday/fr-china/id28248155\">the technology comes from China</a>&nbsp;or&nbsp;the&nbsp;US where <a href=\"https://threatpost.com/amazon-ring-facial-recognition-watch-list/150681/\">Amazon Plans Ring Facial Recognition-Based ‘Watch List’, Report</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/10/11/technology/flickr-facial-recognition.html\">This article </a>by the privacy expert journalist Kashmir Hill is thought provoking on the use of children\'s pictures posted by parents online on website such as Flickr. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Thiis a technology with many caveats and a major societal impacts. You are invited to read more <a href=\"http://www.pearltrees.com/privacyday/facial-recognition/id23427152\">HERE</a> from various sources to make your own opinion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->','Facial Recognition technologies','','inherit','closed','closed','','532-revision-v1','','','2020-01-17 19:48:47','2020-01-17 19:48:47','',532,'https://datarainbow.eu/2020/01/17/532-revision-v1/',0,'revision','',0),(540,5,'2020-01-18 01:04:20','2020-01-18 01:04:20','','Screenshot 2020-01-18 at 01.01.34','','inherit','closed','closed','','screenshot-2020-01-18-at-01-01-34','','','2020-01-18 01:04:20','2020-01-18 01:04:20','',498,'/wp-content/uploads/sites/3/2019/11/Screenshot-2020-01-18-at-01.01.34.png',0,'attachment','image/png',0),(541,5,'2020-01-18 01:04:34','2020-01-18 01:04:34','<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/cybertalks.co.uk\\/interviews\\/ico-slow-to-fine-organisations\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"cybertalks\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-cybertalks\"><div class=\"wp-block-embed__wrapper\">\nhttps://cybertalks.co.uk/interviews/ico-slow-to-fine-organisations/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Pre GDPR data privacy principles were ignored…and companies are still complacent as the ICO has been slow to fine organisations for failure to comply.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://cybertalks.co.uk/profile/tara-taubman-bassirian/\">Tara Taubman-Bassirian</a> LLM, GDPR, Data Protection and IP consultant – Voted Privacy Hero of the Year, talks to <a href=\"https://cybertalks.co.uk/profile/karla-reffold/\">Karla Reffold</a> in a <a href=\"https://cybertalks.co.uk/interviews/ico-slow-to-fine-organisations/\">Cybertals interview</a> about GDPR and the rights of Data Subjects.</p>\n<!-- /wp:paragraph -->','Interview by Cybertalks','','inherit','closed','closed','','498-revision-v1','','','2020-01-18 01:04:34','2020-01-18 01:04:34','',498,'https://datarainbow.eu/2020/01/18/498-revision-v1/',0,'revision','',0),(543,5,'2020-01-18 13:06:17','2020-01-18 13:06:17','','Screenshot 2020-01-18 at 13.05.43','','inherit','closed','closed','','screenshot-2020-01-18-at-13-05-43','','','2020-01-18 13:06:17','2020-01-18 13:06:17','',493,'/wp-content/uploads/sites/3/2019/11/Screenshot-2020-01-18-at-13.05.43.png',0,'attachment','image/png',0),(544,5,'2020-01-18 13:06:39','2020-01-18 13:06:39','<!-- wp:embed {\"url\":\"https:\\/\\/www.voiceamerica.com\\/episode\\/112620\\/null\"} -->\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttps://www.voiceamerica.com/episode/112620/null\n</div></figure>\n<!-- /wp:embed -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4><strong>GDPR, Data Privacy Day and The Need for Privacy</strong></h4>\n<!-- /wp:heading -->\n\n<!-- wp:heading {\"level\":5} -->\n<h5>Hosted by Rebecca Herold</h5>\n<!-- /wp:heading -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td><a target=\"_blank\" href=\"https://www.voiceamerica.com/guest/42903/tara-taubman-bassirian\" rel=\"noreferrer noopener\">Tara Taubman-Bassirian</a></td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4><a href=\"https://www.voiceamerica.com/episode/112620/gdpr-data-privacy-day-and-the-need-for-privacy\">Episode Description</a></h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>2018 privacy hero of the year, Tara Taubman-Bassirian, discusses the EU GDPR, the increasing need for protecting privacy in the increasingly technology-rich environment, and some activities for Data Privacy Day on January 28, 2019. What are the benefits of GDPR? Where can it be improved upon? What do companies struggle with most for GDPR compliance? What is a “hot potato” GDPR issue? How are binding corporate rules (BCRs) used for non-adequate countries? How has Brexit impacted GDPR compliance? Why does privacy matter? What are the current largest threats to privacy? What are some activities for Data Privacy Day? Hear Tara discuss these topics, and more, <a href=\"https://www.voiceamerica.com/episode/112620/gdpr-data-privacy-day-and-the-need-for-privacy\">with Rebecca</a>.</p>\n<!-- /wp:paragraph -->','Interview With the Privacy Professor Rebecca Herold','2018 privacy hero of the year, Tara Taubman-Bassirian, discusses the EU GDPR, the increasing need for protecting privacy in the increasingly technology-rich environment, and some activities for Data Privacy Day on January 28, 2019. What are the benefits of GDPR? Where can it be improved upon? What do companies struggle with most for GDPR compliance? What is a “hot potato” GDPR issue? How are binding corporate rules (BCRs) used for non-adequate countries? How has Brexit impacted GDPR compliance? Why does privacy matter? What are the current largest threats to privacy? What are some activities for Data Privacy Day? Hear Tara discuss these topics, and more, with Rebecca.','inherit','closed','closed','','493-revision-v1','','','2020-01-18 13:06:39','2020-01-18 13:06:39','',493,'https://datarainbow.eu/2020/01/18/493-revision-v1/',0,'revision','',0),(545,5,'2020-01-18 13:07:52','2020-01-18 13:07:52','<!-- wp:heading {\"level\":3} -->\n<h3>Interview Series: Tara Taubman Bassirian, Data Protection and IP Consultant at Data Rainbow</h3>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://datagrail.io/author/kyle-schryver\">Kyle Schryver</a>&nbsp;July 10, 2019&nbsp;<br><a href=\"https://datagrail.io/categories/interview-series\">Interview Series</a><a href=\"https://datagrail.io/categories/legal\">Legal</a><a href=\"https://datagrail.io/categories/privacy\">Privacy</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"width\":214,\"height\":299} -->\n<figure class=\"wp-block-image is-resized\"><img src=\"https://cdn.buttercms.com/4utxwgcTSpP31ZLDPzsI\" alt=\"undefined\" width=\"214\" height=\"299\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>DataGrail recently interviewed Tara Taubman Bassirian, Data Protection and IP Consultant at&nbsp;<a href=\"https://datarainbow.eu/\" target=\"_blank\" rel=\"noreferrer noopener\">Data Rainbow</a>&nbsp;to bring you insights from a leading legal professional in the field of data privacy.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;What is your role at Data Rainbow and what inspired you to pursue a career in legal and privacy, specifically focusing on the GDPR?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;In a previous life, I was a corporate lawyer in France, and now my main focus is Data Rainbow: my consultancy. Prior to Data Rainbow, I was involved in online safety, heavily researching and advising on how to stay safe online — whether you’re an adult or a child. This lead to completing a Masters of Communication and Internet Law at Queen Mary University. In short, I’m passionate about technology and want to help others make the most out of existing technologies while mitigating any potential risks associated with the internet.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Over the last few decades, technological innovations have profoundly impacted the daily lives of nearly everyone in the developed world. Technologies on the market are constantly evolving, and even older generations are adapting to the many improvements in their everyday lives. Data has become the new oil, as it’s as valuable as any commodity.&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Unprecedented quantities of personal data are mined and analyzed. Collecting, storing, and aggregating is the new business model for many technology companies in our digital world, as data storage is inexpensive, and its value is ever increasing. Data Protection regulations — such as the GDPR — aim to reestablish the balance between the rights of data subjects and the data industry.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I strongly believe that privacy matters and want to ensure that privacy is maintained alongside the surge in data capture and analysis. Privacy equals transparency plus control. Without privacy, there’s no freedom nor human dignity. In turn, legislation needs to adapt in line with technological advancements; the right to privacy is a human right that needs to be fought for. The totality of privacy risks associated with the digital age are still largely unknown by most people, and we need to be educated on the potential negative outcomes before they arise.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;What is your favorite part of working in the legal space, specifically covering data privacy practices?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;I would recommend any newly qualified or even established lawyer who loves innovation to enter the field of data protection, as it’s intellectually stimulating. There are continuous advancements in the technology space, which can lead to breaches of privacy or personal data. Within the technology industry, data protection lawyers are truly at the forefront of regulation. The privacy issues we’re experiencing today didn’t occur 30 years ago. With information becoming more and more accessible to us, data protection lawyers can uncover what’s going on in the technology space, how to anticipate potential negative outcomes, and how to create the best solutions for it.&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>No day is routine, and each one brings about new regulations, new guidance, and new challenges. As a result, there’s a need to constantly update knowledge. Not only that, but potentially everyone is affected. Most of us in the developed world use smartphones and have social media profiles, so it’s in our best interest to be fully informed on the potential effects that technology can have on our lives. Technology greatly enriches our lives but giving up our privacy for its benefits is too big of a price to pay.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;With rising consumer privacy awareness, how can businesses best inform users that their data is secure and private?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;An organization’s website can provide an initial view of how seriously they take maintaining the privacy of its customers. A compliant website, with the required cookie banner, privacy by design with opt-in options, clear privacy notice, and sensible web developing is the first step towards compliance. We recently looked at websites using JavaScript codes that track and fingerprint users, and this is not acceptable. When commissioning a website, it’s very important to use certified developers to ensure that they respect regulations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;As someone voted Privacy Hero in 2018, what advice do you have for other privacy professionals in terms of gaining experience, knowledge, and being able to find and implement solutions for companies?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;The downside of this professional field is its high barrier of entry. It’s difficult to get your foot in the door without no practical experience. There’s a reticence towards hiring a Data Privacy lawyer who has not had prior experience in that role. This is further impacted by that fact that GDPR legislation requires that Data Protection Officers have legal qualifications. This poses an issue as lawyers can lack technical knowledge, while IT specialists lack legal knowledge.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Working as a Data Privacy lawyer requires extensive knowledge of both the legal and the technical worlds. There’s a serious need for lawyers with IT knowledge, as Law universities often do not teach IT. In effect, there’s a disconnect between the skills and experience required and what already exists within the market. Therefore, as a lawyer, I recommend using every resource available for self-education.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;Based on your knowledge and experience with the GDPR, what advice can you give to companies in N. America who will have to face similar upcoming challenges with the CCPA and&nbsp;<a href=\"https://datagrail.io/blog/nevadas-new-privacy-law-how-it-matches-up-against-the-ccpa\">Nevada Privacy Law</a>?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;North America is quite different from the EU in the sense that there’s no blanket protection but a patchwork of sectorial regulations. Furthermore, many Americans confuse PII with Personal Data. Also, some US companies have preferred to ignore the GDPR by banning EU customers from accessing their websites. However, they will now have to comply with the CCPA and other regulations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Compliance with data protection rules creates trust amongst users. Keeping data accurate and cleaning up stored data to keep only what is necessary is a component of a good business. Data mapping is also a good start to see where data is collected and stored.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Enjoy this interview? Check out our previous&nbsp;<a href=\"https://datagrail.io/blog/interview-series-alexandra-ross\">Interview Series with Alexandra Ross</a>, Director, Global Privacy and Data Security Counsel at Autodesk!</strong></p>\n<!-- /wp:paragraph -->','Interview with DataGrail','','inherit','closed','closed','','476-revision-v1','','','2020-01-18 13:07:52','2020-01-18 13:07:52','',476,'https://datarainbow.eu/2020/01/18/476-revision-v1/',0,'revision','',0),(546,5,'2020-01-18 13:09:41','2020-01-18 13:09:41','','Screenshot 2020-01-18 at 13.09.20','','inherit','closed','closed','','screenshot-2020-01-18-at-13-09-20','','','2020-01-18 13:09:41','2020-01-18 13:09:41','',476,'/wp-content/uploads/sites/3/2019/07/Screenshot-2020-01-18-at-13.09.20.png',0,'attachment','image/png',0),(548,5,'2020-01-18 13:16:32','2020-01-18 13:16:32','<!-- wp:heading {\"level\":3} -->\n<h3>Interview Series: Tara Taubman Bassirian, Data Protection and IP Consultant at Data Rainbow</h3>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://datagrail.io/author/kyle-schryver\">Kyle Schryver</a>&nbsp;July 10, 2019&nbsp;<br><a href=\"https://datagrail.io/categories/interview-series\">Interview Series</a><a href=\"https://datagrail.io/categories/legal\">Legal</a><a href=\"https://datagrail.io/categories/privacy\">Privacy</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"width\":214,\"height\":299} -->\n<figure class=\"wp-block-image is-resized\"><img src=\"https://cdn.buttercms.com/4utxwgcTSpP31ZLDPzsI\" alt=\"undefined\" width=\"214\" height=\"299\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://medium.com/@DataGrail/interview-series-tara-taubman-bassirian-data-protection-and-ip-consultant-at-data-rainbow-c4866c9bc2e3\">DataGrail recently interviewed Tara Taubman Bassirian</a>, Data Protection and IP Consultant at <a rel=\"noreferrer noopener\" href=\"https://datarainbow.eu/\" target=\"_blank\">Data Rainbow</a> to bring you insights from a leading legal professional in the field of data privacy.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;What is your role at Data Rainbow and what inspired you to pursue a career in legal and privacy, specifically focusing on the GDPR?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;In a previous life, I was a corporate lawyer in France, and now my main focus is Data Rainbow: my consultancy. Prior to Data Rainbow, I was involved in online safety, heavily researching and advising on how to stay safe online — whether you’re an adult or a child. This lead to completing a Masters of Communication and Internet Law at Queen Mary University. In short, I’m passionate about technology and want to help others make the most out of existing technologies while mitigating any potential risks associated with the internet.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Over the last few decades, technological innovations have profoundly impacted the daily lives of nearly everyone in the developed world. Technologies on the market are constantly evolving, and even older generations are adapting to the many improvements in their everyday lives. Data has become the new oil, as it’s as valuable as any commodity.&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Unprecedented quantities of personal data are mined and analyzed. Collecting, storing, and aggregating is the new business model for many technology companies in our digital world, as data storage is inexpensive, and its value is ever increasing. Data Protection regulations — such as the GDPR — aim to reestablish the balance between the rights of data subjects and the data industry.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I strongly believe that privacy matters and want to ensure that privacy is maintained alongside the surge in data capture and analysis. Privacy equals transparency plus control. Without privacy, there’s no freedom nor human dignity. In turn, legislation needs to adapt in line with technological advancements; the right to privacy is a human right that needs to be fought for. The totality of privacy risks associated with the digital age are still largely unknown by most people, and we need to be educated on the potential negative outcomes before they arise.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;What is your favorite part of working in the legal space, specifically covering data privacy practices?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;I would recommend any newly qualified or even established lawyer who loves innovation to enter the field of data protection, as it’s intellectually stimulating. There are continuous advancements in the technology space, which can lead to breaches of privacy or personal data. Within the technology industry, data protection lawyers are truly at the forefront of regulation. The privacy issues we’re experiencing today didn’t occur 30 years ago. With information becoming more and more accessible to us, data protection lawyers can uncover what’s going on in the technology space, how to anticipate potential negative outcomes, and how to create the best solutions for it.&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>No day is routine, and each one brings about new regulations, new guidance, and new challenges. As a result, there’s a need to constantly update knowledge. Not only that, but potentially everyone is affected. Most of us in the developed world use smartphones and have social media profiles, so it’s in our best interest to be fully informed on the potential effects that technology can have on our lives. Technology greatly enriches our lives but giving up our privacy for its benefits is too big of a price to pay.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;With rising consumer privacy awareness, how can businesses best inform users that their data is secure and private?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;An organization’s website can provide an initial view of how seriously they take maintaining the privacy of its customers. A compliant website, with the required cookie banner, privacy by design with opt-in options, clear privacy notice, and sensible web developing is the first step towards compliance. We recently looked at websites using JavaScript codes that track and fingerprint users, and this is not acceptable. When commissioning a website, it’s very important to use certified developers to ensure that they respect regulations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;As someone voted Privacy Hero in 2018, what advice do you have for other privacy professionals in terms of gaining experience, knowledge, and being able to find and implement solutions for companies?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;The downside of this professional field is its high barrier of entry. It’s difficult to get your foot in the door without no practical experience. There’s a reticence towards hiring a Data Privacy lawyer who has not had prior experience in that role. This is further impacted by that fact that GDPR legislation requires that Data Protection Officers have legal qualifications. This poses an issue as lawyers can lack technical knowledge, while IT specialists lack legal knowledge.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Working as a Data Privacy lawyer requires extensive knowledge of both the legal and the technical worlds. There’s a serious need for lawyers with IT knowledge, as Law universities often do not teach IT. In effect, there’s a disconnect between the skills and experience required and what already exists within the market. Therefore, as a lawyer, I recommend using every resource available for self-education.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>DG:</strong>&nbsp;Based on your knowledge and experience with the GDPR, what advice can you give to companies in N. America who will have to face similar upcoming challenges with the CCPA and&nbsp;<a href=\"https://datagrail.io/blog/nevadas-new-privacy-law-how-it-matches-up-against-the-ccpa\">Nevada Privacy Law</a>?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>TTB:</strong>&nbsp;North America is quite different from the EU in the sense that there’s no blanket protection but a patchwork of sectorial regulations. Furthermore, many Americans confuse PII with Personal Data. Also, some US companies have preferred to ignore the GDPR by banning EU customers from accessing their websites. However, they will now have to comply with the CCPA and other regulations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Compliance with data protection rules creates trust amongst users. Keeping data accurate and cleaning up stored data to keep only what is necessary is a component of a good business. Data mapping is also a good start to see where data is collected and stored.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Enjoy this interview? Check out our previous&nbsp;<a href=\"https://datagrail.io/blog/interview-series-alexandra-ross\">Interview Series with Alexandra Ross</a>, Director, Global Privacy and Data Security Counsel at Autodesk!</strong></p>\n<!-- /wp:paragraph -->','Interview with DataGrail','','inherit','closed','closed','','476-revision-v1','','','2020-01-18 13:16:32','2020-01-18 13:16:32','',476,'https://datarainbow.eu/2020/01/18/476-revision-v1/',0,'revision','',0),(549,5,'2020-01-18 13:26:24','2020-01-18 13:26:24','<!-- wp:paragraph -->\n<p>and their threats to fundamental human rights and security</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Leaked EU documents were intercepted by Euractiv journalist Samuel Stolton who published and article <a href=\"https://www.euractiv.com/section/digital/news/leak-commission-considers-facial-recognition-ban-in-ai-white-paper/\">\"LEAK: Commission considers facial recognition ban in AI ‘white paper’.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU Commission white paper suggests a temporary ban of 3 to 5 years on facial recognition in public spaces. Reminding this could provoke a serious conflict between The <a href=\"https://twitter.com/EU_Commission\">EU_Commission</a> and certain member states  - such as <a href=\"http://www.rfi.fr/en/france/20200108-government-wants-test-facial-recognition-video-surveillance-security-civil-liberties\">France</a> and <a href=\"https://www.euractiv.com/section/data-protection/news/german-ministers-plan-to-expand-automatic-facial-recognition-meets-fierce-criticism/\">Germany </a>having already taken different positions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fact, the French CNIL published a document in November 2019 with an English version in December \"<a href=\"https://www.cnil.fr/en/facial-recognition-debate-living-challenges\">Facial recognition: for a debate living up to the challenges\"</a>&nbsp;calling&nbsp;for&nbsp;an&nbsp;in-depth&nbsp;political&nbsp;debate. The purpose of which should be \'to determine in which cases facial recognition is necessary in a democratic society, and in which cases it is not.\' Suggesting a <strong>balanced overview</strong>&nbsp;of&nbsp;the&nbsp;different&nbsp;biometrics existing&nbsp;technologies to assess the risks and determine which technologies are not acceptable in a democratic society and which ones can be assumed with appropriate safeguards.&nbsp;Within&nbsp;the framework of the GDPR, the CNIL has already had the opportunity to allow certain uses in principle, while regulating them in practical terms (border control at airports), and to refuse others (controlling student access in schools).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The <a href=\"https://edpb.europa.eu/news/national-news/2019/facial-recognition-school-renders-swedens-first-gdpr-fine_en\">Swedish data protection authority recently imposed a fine </a>on a school for testing <a href=\"http://www.pearltrees.com/privacyday/fr-schools/id28244027http://www.pearltrees.com/privacyday/fr-schools/id28244027\">facial recognition technology to track its students’ attendance</a>. On the other hand, the <a href=\"https://iapp.org/news/a/swedish-dpa-authorizes-police-to-use-facial-recognition/\">Swedish DPA authorise the use of FR by police forces.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.forbes.com/sites/marisagarcia/2019/11/27/iberia-launches-facial-recognition-app-as-airline-industry-biometric-adoption-advances/amp/\">Iberia Launches Facial Recognition App As Airline Industry Biometric Adoption Advances</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>San Francisco recently became the first US city to <a href=\"https://www.theguardian.com/us-news/2019/may/14/san-francisco-facial-recognition-police-ban\">ban police and other agencies from using automated facial recognition</a>, following widespread condemnation of China’s use of the technology to impose <a href=\"https://www.theguardian.com/news/2019/apr/11/china-hi-tech-war-on-muslim-minority-xinjiang-uighurs-surveillance-face-recognition\">control over millions of Uighur Muslims</a> in the western region of Xinjiang. Somerville, Massachusetts, then Oaklands have <a class=\"\" href=\"https://www.technologyreview.com/s/613536/facial-recognition-ban-san-francisco-surveillance-privacy-private-corporate-interests/\">banned government use of facial recognition</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the <a href=\"https://www.telegraph.co.uk/news/2019/10/07/london-council-used-facial-recognition-technology-streets-without/\">London council used facial recognition technology on streets without consulting residents,</a>&nbsp;the UK Information Commissioner\'s Office published its Opinion 2019/01 on the use of live facial recognition technology (LFR) by law enforcement in public places dated 31-10-2019. in summary :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(1) The use of LFR involves the processing of personal data and therefore #data protection law applies, whether it is for a trial or routine operational deployment.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(2) The processing of personal data by ‘competent authorities’ for ‘the law enforcement purposes’ is covered by UK law.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(3) The use of LFR for the law enforcement purposes constitutes ‘sensitive processing’ as it involves the processing of biometric data for the purpose of uniquely identifying a data subject.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(4) Such sensitive processing relates to all facial images captured and analysed by the software. A data protection impact assessment and an ‘appropriate policy document’ must be in place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(5) Sensitive processing occurs irrespective of whether that image yields a match to a person on a watchlist or the biometric data of unmatched persons is subsequently deleted within a short space of time.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(6) Data protection law applies to the whole process of LFR, from consideration about the necessity and proportionality for deployment, the compilation of watchlists, the processing of the biometric data through to the retention and deletion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial images are biometric data as: ‘relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person’ (GDPR Art. 2(14)). The GDPR generally forbids the processing of biometric data for uniquely identifying purposes unless relying on one of the ten exemptions listed in Art. 9(2).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For such technology to be deployed, given that it relies on the large-scale processing of sensitive data, consent would need to be explicit as well as freely-given, informed and specific.&nbsp;Additionally, when deployed in public spaces, how anyone could opt out?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK ICO questioned how far should we, as a society, consent to police forces reducing our privacy in order to keep us safe? They found that \'the current combination of laws, codes and practices relating to LFR will not drive the ethical and legal approach that’s needed to truly manage the risk that this technology presents.\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Statement from Elizabeth Denham, Information Commissioner, on the use of live facial recognition technology in King\'s Cross, London : <em>“Scanning people’s faces as they lawfully go about their daily lives, in order to identify them, is a potential threat to privacy that should concern us all. That is especially the case if it is done without people’s knowledge or understanding. “I remain deeply concerned about the growing use of facial recognition technology in public spaces, not only by law enforcement agencies but also increasingly by the private sector. My office and the judiciary are both independently considering the legal issues and whether the current framework has kept pace with emerging technologies and people’s expectations about how their most sensitive personal data is used. “Facial recognition technology is a priority area for the ICO and when necessary, we will not hesitate to use our investigative and enforcement powers to protect people’s legal rights. “We have launched an investigation following concerns reported in the media regarding the use of live facial recognition in the King\'s Cross area of central London, which thousands of people pass through every day. “As well as requiring detailed information from the relevant organisations about how the technology is used, we will also inspect the system and its operation on-site to assess whether or not it complies with data protection law. “Put simply, any organisations wanting to use facial recognition technology must comply with the law - and they must do so in a fair, transparent and accountable way. They must have documented how and why they believe their use of the technology is legal, proportionate and justified. “We support keeping people safe but new technologies and new uses of sensitive personal data must always be balanced against people’s legal rights.”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>After the High Court ruled in September that the <a href=\"https://www.bbc.co.uk/news/uk-wales-50251643\">South Wales Police had&nbsp;acted lawfully when a shopper complained&nbsp;his human rights</a> were breached when he was photographed, civil rights group Liberty said it was akin to the unregulated taking of DNA or fingerprints without consent, and  is campaigning for an outright ban of the practice. <a href=\"https://www.theguardian.com/technology/2019/jun/07/facial-recognition-technology-liberty-says-england-wales-police-use-should-be-banned\">Facial Recognition is Arsenic in Water of Democracy </a>said Liberty. Martha Spurrier, a human rights lawyer, said the technology had such fundamental problems that, despite police enthusiasm for the equipment, its use on the streets should not be permitted.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham said the use of facial recognition tools represents a \"step change\" in policing techniques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An investigation by commissioner Elizabeth Denham has raised \"serious concerns\" over use of the technology.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham called on the government to introduce a statutory code of practice.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"https://www.bitsoffreedom.nl\">civil liberties</a> organisations have expressed concerns. As the CNIL pointed out, facial recognition has the potential to become a particularly ubiquitous and intrusive tool. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The use of FR in Hong Kong and London Kings Cross has been seen as <a href=\"https://www.dezeen.com/2019/10/09/facial-recognition-hong-kong-threat/\">\"a fundamental threat to society\"</a> says Owen&nbsp;Hopkins.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The European Data Protection Supervisor, Wojciech Wiewiórowski, questioned: <a href=\"https://edps.europa.eu/press-publications/press-news/blog/facial-recognition-solution-search-problem_en\">Facial recognition A solution in search of a problem?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Based on a probability rather than on the absolute certainty of a match between the faces being compared and the baseline \"template\". Variations in performance can therefore have far-reaching consequences for individuals who are mis-identified. Over-reliance on technology can result on serious mis-judgements. The lack of accuracy has serious consequences for individuals being falsely identified whether as criminals or otherwise. Its <a href=\"http://www.pearltrees.com/privacyday/fr-low-accuracy/id28244035\">accuracy has been challenged</a> by several researchers. &nbsp;They are serious potential <a href=\"https://www.kairos.com/blog/face-off-confronting-bias-in-face-recognition-ai\">dangers associated with current&nbsp;racial biases</a> in face recognition, and misidentification could lead to wrongful conviction, or far worse.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>To resist against the rise of the intrusive technology, designers have created <a href=\"http://www.pearltrees.com/privacyday/design-products-combat-fr/id28968440\">clothing and accessories that helps to conceal people\'s identities from A.I.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Whatever the EU decide or regulate, <a href=\"http://www.pearltrees.com/privacyday/fr-china/id28248155\">the technology comes from China</a>&nbsp;or&nbsp;the&nbsp;US where <a href=\"https://threatpost.com/amazon-ring-facial-recognition-watch-list/150681/\">Amazon Plans Ring Facial Recognition-Based ‘Watch List’, Report</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/10/11/technology/flickr-facial-recognition.html\">This article </a>by the privacy expert journalist Kashmir Hill is thought provoking on the use of children\'s pictures posted by parents online on website such as Flickr. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Thiis a technology with many caveats and a major societal impacts. You are invited to read more <a href=\"http://www.pearltrees.com/privacyday/facial-recognition/id23427152\">HERE</a> from various sources to make your own opinion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->','Facial Recognition technologies','','inherit','closed','closed','','532-revision-v1','','','2020-01-18 13:26:24','2020-01-18 13:26:24','',532,'https://datarainbow.eu/2020/01/18/532-revision-v1/',0,'revision','',0),(551,5,'2020-01-18 13:43:59','2020-01-18 13:43:59','<!-- wp:paragraph -->\n<p>and their threats to fundamental human rights and security</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Leaked EU documents were intercepted by Euractiv journalist Samuel Stolton who published and article <a href=\"https://www.euractiv.com/section/digital/news/leak-commission-considers-facial-recognition-ban-in-ai-white-paper/\">\"LEAK: Commission considers facial recognition ban in AI ‘white paper’.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU Commission white paper suggests a temporary ban of 3 to 5 years on facial recognition in public spaces. Reminding this could provoke a serious conflict between The <a href=\"https://twitter.com/EU_Commission\">EU_Commission</a> and certain member states  - such as <a href=\"http://www.rfi.fr/en/france/20200108-government-wants-test-facial-recognition-video-surveillance-security-civil-liberties\">France</a> and <a href=\"https://www.euractiv.com/section/data-protection/news/german-ministers-plan-to-expand-automatic-facial-recognition-meets-fierce-criticism/\">Germany </a>having already taken different positions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fact, the French CNIL published a document in November 2019 with an English version in December \"<a href=\"https://www.cnil.fr/en/facial-recognition-debate-living-challenges\">Facial recognition: for a debate living up to the challenges\"</a>&nbsp;calling&nbsp;for&nbsp;an&nbsp;in-depth&nbsp;political&nbsp;debate. The purpose of which should be \'to determine in which cases facial recognition is necessary in a democratic society, and in which cases it is not.\' Suggesting a <strong>balanced overview</strong>&nbsp;of&nbsp;the&nbsp;different&nbsp;biometrics existing&nbsp;technologies to assess the risks and determine which technologies are not acceptable in a democratic society and which ones can be assumed with appropriate safeguards.&nbsp;Within&nbsp;the framework of the GDPR, the CNIL has already had the opportunity to allow certain uses in principle, while regulating them in practical terms (border control at airports), and to refuse others (controlling student access in schools).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The <a href=\"https://edpb.europa.eu/news/national-news/2019/facial-recognition-school-renders-swedens-first-gdpr-fine_en\">Swedish data protection authority recently imposed a fine </a>on a school for testing <a href=\"http://www.pearltrees.com/privacyday/fr-schools/id28244027http://www.pearltrees.com/privacyday/fr-schools/id28244027\">facial recognition technology to track its students’ attendance</a>. On the other hand, the <a href=\"https://iapp.org/news/a/swedish-dpa-authorizes-police-to-use-facial-recognition/\">Swedish DPA authorise the use of FR by police forces.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.forbes.com/sites/marisagarcia/2019/11/27/iberia-launches-facial-recognition-app-as-airline-industry-biometric-adoption-advances/amp/\">Iberia Launches Facial Recognition App As Airline Industry Biometric Adoption Advances</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>San Francisco recently became the first US city to <a href=\"https://www.theguardian.com/us-news/2019/may/14/san-francisco-facial-recognition-police-ban\">ban police and other agencies from using automated facial recognition</a>, following widespread condemnation of China’s use of the technology to impose <a href=\"https://www.theguardian.com/news/2019/apr/11/china-hi-tech-war-on-muslim-minority-xinjiang-uighurs-surveillance-face-recognition\">control over millions of Uighur Muslims</a> in the western region of Xinjiang. Somerville, Massachusetts, then <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">Oakland</a> have <a class=\"\" href=\"https://www.technologyreview.com/s/613536/facial-recognition-ban-san-francisco-surveillance-privacy-private-corporate-interests/\">banned government use of facial recognition</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the <a href=\"https://www.telegraph.co.uk/news/2019/10/07/london-council-used-facial-recognition-technology-streets-without/\">London council used facial recognition technology on streets without consulting residents,</a>&nbsp;the UK Information Commissioner\'s Office published its Opinion 2019/01 on the use of live facial recognition technology (LFR) by law enforcement in public places dated 31-10-2019. in summary :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(1) The use of LFR involves the processing of personal data and therefore #data protection law applies, whether it is for a trial or routine operational deployment.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(2) The processing of personal data by ‘competent authorities’ for ‘the law enforcement purposes’ is covered by UK law.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(3) The use of LFR for the law enforcement purposes constitutes ‘sensitive processing’ as it involves the processing of biometric data for the purpose of uniquely identifying a data subject.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(4) Such sensitive processing relates to all facial images captured and analysed by the software. A data protection impact assessment and an ‘appropriate policy document’ must be in place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(5) Sensitive processing occurs irrespective of whether that image yields a match to a person on a watchlist or the biometric data of unmatched persons is subsequently deleted within a short space of time.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(6) Data protection law applies to the whole process of LFR, from consideration about the necessity and proportionality for deployment, the compilation of watchlists, the processing of the biometric data through to the retention and deletion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial images are biometric data as: ‘relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person’ (GDPR Art. 2(14)). The GDPR generally forbids the processing of biometric data for uniquely identifying purposes unless relying on one of the ten exemptions listed in Art. 9(2).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For such technology to be deployed, given that it relies on the large-scale processing of sensitive data, consent would need to be explicit as well as freely-given, informed and specific.&nbsp;Additionally, when deployed in public spaces, how anyone could opt out?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK ICO questioned how far should we, as a society, consent to police forces reducing our privacy in order to keep us safe? They found that \'the current combination of laws, codes and practices relating to LFR will not drive the ethical and legal approach that’s needed to truly manage the risk that this technology presents.\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Statement from Elizabeth Denham, Information Commissioner, on the use of live facial recognition technology in King\'s Cross, London : <em>“Scanning people’s faces as they lawfully go about their daily lives, in order to identify them, is a potential threat to privacy that should concern us all. That is especially the case if it is done without people’s knowledge or understanding. “I remain deeply concerned about the growing use of facial recognition technology in public spaces, not only by law enforcement agencies but also increasingly by the private sector. My office and the judiciary are both independently considering the legal issues and whether the current framework has kept pace with emerging technologies and people’s expectations about how their most sensitive personal data is used. “Facial recognition technology is a priority area for the ICO and when necessary, we will not hesitate to use our investigative and enforcement powers to protect people’s legal rights. “We have launched an investigation following concerns reported in the media regarding the use of live facial recognition in the King\'s Cross area of central London, which thousands of people pass through every day. “As well as requiring detailed information from the relevant organisations about how the technology is used, we will also inspect the system and its operation on-site to assess whether or not it complies with data protection law. “Put simply, any organisations wanting to use facial recognition technology must comply with the law - and they must do so in a fair, transparent and accountable way. They must have documented how and why they believe their use of the technology is legal, proportionate and justified. “We support keeping people safe but new technologies and new uses of sensitive personal data must always be balanced against people’s legal rights.”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>After the High Court ruled in September that the <a href=\"https://www.bbc.co.uk/news/uk-wales-50251643\">South Wales Police had&nbsp;acted lawfully when a shopper complained&nbsp;his human rights</a> were breached when he was photographed, civil rights group Liberty said it was akin to the unregulated taking of DNA or fingerprints without consent, and  is campaigning for an outright ban of the practice. <a href=\"https://www.theguardian.com/technology/2019/jun/07/facial-recognition-technology-liberty-says-england-wales-police-use-should-be-banned\">Facial Recognition is Arsenic in Water of Democracy </a>said Liberty. Martha Spurrier, a human rights lawyer, said the technology had such fundamental problems that, despite police enthusiasm for the equipment, its use on the streets should not be permitted.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham said the use of facial recognition tools represents a \"step change\" in policing techniques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An investigation by commissioner Elizabeth Denham has raised \"serious concerns\" over use of the technology.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham called on the government to introduce a statutory code of practice.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"https://www.bitsoffreedom.nl\">civil liberties</a> organisations have expressed concerns. As the CNIL pointed out, facial recognition has the potential to become a particularly ubiquitous and intrusive tool. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The use of FR in Hong Kong and London Kings Cross has been seen as <a href=\"https://www.dezeen.com/2019/10/09/facial-recognition-hong-kong-threat/\">\"a fundamental threat to society\"</a> says Owen&nbsp;Hopkins.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The European Data Protection Supervisor, Wojciech Wiewiórowski, questioned: <a href=\"https://edps.europa.eu/press-publications/press-news/blog/facial-recognition-solution-search-problem_en\">Facial recognition A solution in search of a problem?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Based on a probability rather than on the absolute certainty of a match between the faces being compared and the baseline \"template\". Variations in performance can therefore have far-reaching consequences for individuals who are mis-identified. Over-reliance on technology can result on serious mis-judgements. The lack of accuracy has serious consequences for individuals being falsely identified whether as criminals or otherwise. Its <a href=\"http://www.pearltrees.com/privacyday/fr-low-accuracy/id28244035\">accuracy has been challenged</a> by several researchers. &nbsp;They are serious potential <a href=\"https://www.kairos.com/blog/face-off-confronting-bias-in-face-recognition-ai\">dangers associated with current&nbsp;racial biases</a> in face recognition, and misidentification could lead to wrongful conviction, or far worse.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>To resist against the rise of the intrusive technology, designers have created <a href=\"http://www.pearltrees.com/privacyday/design-products-combat-fr/id28968440\">clothing and accessories that helps to conceal people\'s identities from A.I.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Whatever the EU decide or regulate, <a href=\"http://www.pearltrees.com/privacyday/fr-china/id28248155\">the technology comes from China</a>&nbsp;or&nbsp;the&nbsp;US where <a href=\"https://threatpost.com/amazon-ring-facial-recognition-watch-list/150681/\">Amazon Plans Ring Facial Recognition-Based ‘Watch List’, Report</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/10/11/technology/flickr-facial-recognition.html\">This article </a>by the privacy expert journalist Kashmir Hill is thought provoking on the use of children\'s pictures posted by parents online on website such as Flickr. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Thiis a technology with many caveats and a major societal impacts. You are invited to read more <a href=\"http://www.pearltrees.com/privacyday/facial-recognition/id23427152\">HERE</a> from various sources to make your own opinion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->','Facial Recognition technologies','','inherit','closed','closed','','532-revision-v1','','','2020-01-18 13:43:59','2020-01-18 13:43:59','',532,'https://datarainbow.eu/2020/01/18/532-revision-v1/',0,'revision','',0),(554,5,'2020-01-18 13:53:11','2020-01-18 13:53:11','<!-- wp:paragraph -->\n<p>and their threats to fundamental human rights and security</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Leaked EU documents were intercepted by Euractiv journalist Samuel Stolton who published and article <a href=\"https://www.euractiv.com/section/digital/news/leak-commission-considers-facial-recognition-ban-in-ai-white-paper/\">\"LEAK: Commission considers facial recognition ban in AI ‘white paper’.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU Commission white paper suggests a temporary ban of 3 to 5 years on facial recognition in public spaces. Reminding this could provoke a serious conflict between The <a href=\"https://twitter.com/EU_Commission\">EU_Commission</a> and certain member states  - such as <a href=\"http://www.rfi.fr/en/france/20200108-government-wants-test-facial-recognition-video-surveillance-security-civil-liberties\">France</a> and <a href=\"https://www.euractiv.com/section/data-protection/news/german-ministers-plan-to-expand-automatic-facial-recognition-meets-fierce-criticism/\">Germany </a>having already taken different positions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fact, the French CNIL published a document in November 2019 with an English version in December \"<a href=\"https://www.cnil.fr/en/facial-recognition-debate-living-challenges\">Facial recognition: for a debate living up to the challenges\"</a>&nbsp;calling&nbsp;for&nbsp;an&nbsp;in-depth&nbsp;political&nbsp;debate. The purpose of which should be \'to determine in which cases facial recognition is necessary in a democratic society, and in which cases it is not.\' Suggesting a <strong>balanced overview</strong>&nbsp;of&nbsp;the&nbsp;different&nbsp;biometrics existing&nbsp;technologies to assess the risks and determine which technologies are not acceptable in a democratic society and which ones can be assumed with appropriate safeguards.&nbsp;Within&nbsp;the framework of the GDPR, the CNIL has already had the opportunity to allow certain uses in principle, while regulating them in practical terms (border control at airports), and to refuse others (controlling student access in schools).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The <a href=\"https://edpb.europa.eu/news/national-news/2019/facial-recognition-school-renders-swedens-first-gdpr-fine_en\">Swedish data protection authority recently imposed a fine </a>on a school for testing <a href=\"http://www.pearltrees.com/privacyday/fr-schools/id28244027http://www.pearltrees.com/privacyday/fr-schools/id28244027\">facial recognition technology to track its students’ attendance</a>. On the other hand, the <a href=\"https://iapp.org/news/a/swedish-dpa-authorizes-police-to-use-facial-recognition/\">Swedish DPA authorise the use of FR by police forces.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.forbes.com/sites/marisagarcia/2019/11/27/iberia-launches-facial-recognition-app-as-airline-industry-biometric-adoption-advances/amp/\">Iberia Launches Facial Recognition App As Airline Industry Biometric Adoption Advances</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>San Francisco recently became the first US city to <a href=\"https://www.theguardian.com/us-news/2019/may/14/san-francisco-facial-recognition-police-ban\">ban police and other agencies from using automated facial recognition</a>, following widespread condemnation of China’s use of the technology to impose <a href=\"https://www.theguardian.com/news/2019/apr/11/china-hi-tech-war-on-muslim-minority-xinjiang-uighurs-surveillance-face-recognition\">control over millions of Uighur Muslims</a> in the western region of Xinjiang. Somerville, Massachusetts, then <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">Oakland</a> have <a class=\"\" href=\"https://www.technologyreview.com/s/613536/facial-recognition-ban-san-francisco-surveillance-privacy-private-corporate-interests/\">banned government use of facial recognition</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the <a href=\"https://www.telegraph.co.uk/news/2019/10/07/london-council-used-facial-recognition-technology-streets-without/\">London council used facial recognition technology on streets without consulting residents,</a>&nbsp;the UK Information Commissioner\'s Office published its Opinion 2019/01 on the use of live facial recognition technology (LFR) by law enforcement in public places dated 31-10-2019. in summary :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(1) The use of LFR involves the processing of personal data and therefore #data protection law applies, whether it is for a trial or routine operational deployment.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(2) The processing of personal data by ‘competent authorities’ for ‘the law enforcement purposes’ is covered by UK law.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(3) The use of LFR for the law enforcement purposes constitutes ‘sensitive processing’ as it involves the processing of biometric data for the purpose of uniquely identifying a data subject.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(4) Such sensitive processing relates to all facial images captured and analysed by the software. A data protection impact assessment and an ‘appropriate policy document’ must be in place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(5) Sensitive processing occurs irrespective of whether that image yields a match to a person on a watchlist or the biometric data of unmatched persons is subsequently deleted within a short space of time.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(6) Data protection law applies to the whole process of LFR, from consideration about the necessity and proportionality for deployment, the compilation of watchlists, the processing of the biometric data through to the retention and deletion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial images are biometric data as: ‘relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person’ (GDPR Art. 2(14)). The GDPR generally forbids the processing of biometric data for uniquely identifying purposes unless relying on one of the ten exemptions listed in Art. 9(2).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For such technology to be deployed, given that it relies on the large-scale processing of sensitive data, consent would need to be explicit as well as freely-given, informed and specific.&nbsp;Additionally, when deployed in public spaces, how anyone could opt out?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK ICO questioned how far should we, as a society, consent to police forces reducing our privacy in order to keep us safe? They found that \'the current combination of laws, codes and practices relating to LFR will not drive the ethical and legal approach that’s needed to truly manage the risk that this technology presents.\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Statement from Elizabeth Denham, Information Commissioner, on the use of live facial recognition technology in King\'s Cross, London : <em>“Scanning people’s faces as they lawfully go about their daily lives, in order to identify them, is a potential threat to privacy that should concern us all. That is especially the case if it is done without people’s knowledge or understanding. “I remain deeply concerned about the growing use of facial recognition technology in public spaces, not only by law enforcement agencies but also increasingly by the private sector. My office and the judiciary are both independently considering the legal issues and whether the current framework has kept pace with emerging technologies and people’s expectations about how their most sensitive personal data is used. “Facial recognition technology is a priority area for the ICO and when necessary, we will not hesitate to use our investigative and enforcement powers to protect people’s legal rights. “We have launched an investigation following concerns reported in the media regarding the use of live facial recognition in the King\'s Cross area of central London, which thousands of people pass through every day. “As well as requiring detailed information from the relevant organisations about how the technology is used, we will also inspect the system and its operation on-site to assess whether or not it complies with data protection law. “Put simply, any organisations wanting to use facial recognition technology must comply with the law - and they must do so in a fair, transparent and accountable way. They must have documented how and why they believe their use of the technology is legal, proportionate and justified. “We support keeping people safe but new technologies and new uses of sensitive personal data must always be balanced against people’s legal rights.”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>After the High Court ruled in September that the <a href=\"https://www.bbc.co.uk/news/uk-wales-50251643\">South Wales Police had&nbsp;acted lawfully when a shopper complained&nbsp;his human rights</a> were breached when he was photographed, civil rights group Liberty said it was akin to the unregulated taking of DNA or fingerprints without consent, and  is campaigning for an outright ban of the practice. <a href=\"https://www.theguardian.com/technology/2019/jun/07/facial-recognition-technology-liberty-says-england-wales-police-use-should-be-banned\">Facial Recognition is Arsenic in Water of Democracy </a>said Liberty. Martha Spurrier, a human rights lawyer, said the technology had such fundamental problems that, despite police enthusiasm for the equipment, its use on the streets should not be permitted.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham said the use of facial recognition tools represents a \"step change\" in policing techniques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An investigation by commissioner Elizabeth Denham has raised \"serious concerns\" over use of the technology.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham called on the government to introduce a statutory code of practice.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"https://www.bitsoffreedom.nl\">civil liberties </a>organisations<a href=\"https://www.bitsoffreedom.nl\">,</a> such as the <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">Electronic Frontier Foundation</a> or <a href=\"https://edri.org/facial-recognition-and-fundamental-rights-101/\">EDRI </a> have expressed concerns. As the CNIL pointed out, facial recognition has the potential to become a particularly ubiquitous and intrusive tool. <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The use of FR in Hong Kong and London Kings Cross has been seen as <a href=\"https://www.dezeen.com/2019/10/09/facial-recognition-hong-kong-threat/\">\"a fundamental threat to society\"</a> says Owen&nbsp;Hopkins.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The European Data Protection Supervisor, Wojciech Wiewiórowski, questioned: <a href=\"https://edps.europa.eu/press-publications/press-news/blog/facial-recognition-solution-search-problem_en\">Facial recognition A solution in search of a problem?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Based on a probability rather than on the absolute certainty of a match between the faces being compared and the baseline \"template\". Variations in performance can therefore have far-reaching consequences for individuals who are mis-identified. Over-reliance on technology can result on serious mis-judgements. The lack of accuracy has serious consequences for individuals being falsely identified whether as criminals or otherwise. Its <a href=\"http://www.pearltrees.com/privacyday/fr-low-accuracy/id28244035\">accuracy has been challenged</a> by several researchers. &nbsp;They are serious potential <a href=\"https://www.kairos.com/blog/face-off-confronting-bias-in-face-recognition-ai\">dangers associated with current&nbsp;racial biases</a> in face recognition, and misidentification could lead to wrongful conviction, or far worse.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>To resist against the rise of the intrusive technology, designers have created <a href=\"http://www.pearltrees.com/privacyday/design-products-combat-fr/id28968440\">clothing and accessories that helps to conceal people\'s identities from A.I.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Whatever the EU decide or regulate, <a href=\"http://www.pearltrees.com/privacyday/fr-china/id28248155\">the technology comes from China</a>&nbsp;or&nbsp;the&nbsp;US where <a href=\"https://threatpost.com/amazon-ring-facial-recognition-watch-list/150681/\">Amazon Plans Ring Facial Recognition-Based ‘Watch List’, Report</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/10/11/technology/flickr-facial-recognition.html\">This article </a>by the privacy expert journalist Kashmir Hill is thought provoking on the use of children\'s pictures posted by parents online on website such as Flickr. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Thiis a technology with many caveats and a major societal impacts. You are invited to read more <a href=\"http://www.pearltrees.com/privacyday/facial-recognition/id23427152\">HERE</a> from various sources to make your own opinion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->','Facial Recognition technologies','','inherit','closed','closed','','532-revision-v1','','','2020-01-18 13:53:11','2020-01-18 13:53:11','',532,'https://datarainbow.eu/2020/01/18/532-revision-v1/',0,'revision','',0),(556,5,'2020-01-18 14:03:39','2020-01-18 14:03:39','<!-- wp:paragraph -->\n<p>and their threats to fundamental human rights and security</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Leaked EU documents were intercepted by Euractiv journalist Samuel Stolton who published and article <a href=\"https://www.euractiv.com/section/digital/news/leak-commission-considers-facial-recognition-ban-in-ai-white-paper/\">\"LEAK: Commission considers facial recognition ban in AI ‘white paper’.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU Commission white paper suggests a temporary ban of 3 to 5 years on facial recognition in public spaces. Reminding this could provoke a serious conflict between The <a href=\"https://twitter.com/EU_Commission\">EU_Commission</a> and certain member states  - such as <a href=\"http://www.rfi.fr/en/france/20200108-government-wants-test-facial-recognition-video-surveillance-security-civil-liberties\">France</a> and <a href=\"https://www.euractiv.com/section/data-protection/news/german-ministers-plan-to-expand-automatic-facial-recognition-meets-fierce-criticism/\">Germany </a>having already taken different positions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fact, the French CNIL published a document in November 2019 with an English version in December \"<a href=\"https://www.cnil.fr/en/facial-recognition-debate-living-challenges\">Facial recognition: for a debate living up to the challenges\"</a>&nbsp;calling&nbsp;for&nbsp;an&nbsp;in-depth&nbsp;political&nbsp;debate. The purpose of which should be \'to determine in which cases facial recognition is necessary in a democratic society, and in which cases it is not.\' Suggesting a <strong>balanced overview</strong>&nbsp;of&nbsp;the&nbsp;different&nbsp;biometrics existing&nbsp;technologies to assess the risks and determine which technologies are not acceptable in a democratic society and which ones can be assumed with appropriate safeguards.&nbsp;Within&nbsp;the framework of the GDPR, the CNIL has already had the opportunity to allow certain uses in principle, while regulating them in practical terms (border control at airports), and to refuse others (controlling student access in schools).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The <a href=\"https://edpb.europa.eu/news/national-news/2019/facial-recognition-school-renders-swedens-first-gdpr-fine_en\">Swedish data protection authority recently imposed a fine </a>on a school for testing <a href=\"http://www.pearltrees.com/privacyday/fr-schools/id28244027http://www.pearltrees.com/privacyday/fr-schools/id28244027\">facial recognition technology to track its students’ attendance</a>. On the other hand, the <a href=\"https://iapp.org/news/a/swedish-dpa-authorizes-police-to-use-facial-recognition/\">Swedish DPA authorise the use of FR by police forces.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.forbes.com/sites/marisagarcia/2019/11/27/iberia-launches-facial-recognition-app-as-airline-industry-biometric-adoption-advances/amp/\">Iberia Launches Facial Recognition App As Airline Industry Biometric Adoption Advances</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>San Francisco recently became the first US city to&nbsp;<a href=\"https://www.theguardian.com/us-news/2019/may/14/san-francisco-facial-recognition-police-ban\">ban police and other agencies from using automated facial recognition</a>, following widespread condemnation of China’s use of the technology to impose&nbsp;<a href=\"https://www.theguardian.com/news/2019/apr/11/china-hi-tech-war-on-muslim-minority-xinjiang-uighurs-surveillance-face-recognition\">control over millions of Uighur Muslims</a>&nbsp;in the western region of Xinjiang. Somerville, Massachusetts, then <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">Oakland</a> have&nbsp;<a class=\"\" href=\"https://www.technologyreview.com/s/613536/facial-recognition-ban-san-francisco-surveillance-privacy-private-corporate-interests/\">banned government use of facial recognition</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the <a href=\"https://www.telegraph.co.uk/news/2019/10/07/london-council-used-facial-recognition-technology-streets-without/\">London council used facial recognition technology on streets without consulting residents,</a>&nbsp;the UK Information Commissioner\'s Office published its Opinion 2019/01 on the use of live facial recognition technology (LFR) by law enforcement in public places dated 31-10-2019. in summary :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(1) The use of LFR involves the processing of personal data and therefore #data protection law applies, whether it is for a trial or routine operational deployment.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(2) The processing of personal data by ‘competent authorities’ for ‘the law enforcement purposes’ is covered by UK law.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(3) The use of LFR for the law enforcement purposes constitutes ‘sensitive processing’ as it involves the processing of biometric data for the purpose of uniquely identifying a data subject.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(4) Such sensitive processing relates to all facial images captured and analysed by the software. A data protection impact assessment and an ‘appropriate policy document’ must be in place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(5) Sensitive processing occurs irrespective of whether that image yields a match to a person on a watchlist or the biometric data of unmatched persons is subsequently deleted within a short space of time.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(6) Data protection law applies to the whole process of LFR, from consideration about the necessity and proportionality for deployment, the compilation of watchlists, the processing of the biometric data through to the retention and deletion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial images are biometric data as: ‘relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person’ (GDPR Art. 2(14)). The GDPR generally forbids the processing of biometric data for uniquely identifying purposes unless relying on one of the ten exemptions listed in Art. 9(2).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For such technology to be deployed, given that it relies on the large-scale processing of sensitive data, consent would need to be explicit as well as freely-given, informed and specific.&nbsp;Additionally, when deployed in public spaces, how anyone could opt out?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK ICO questioned how far should we, as a society, consent to police forces reducing our privacy in order to keep us safe? They found that \'the current combination of laws, codes and practices relating to LFR will not drive the ethical and legal approach that’s needed to truly manage the risk that this technology presents.\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Statement from Elizabeth Denham, Information Commissioner, on the use of live facial recognition technology in King\'s Cross, London : <em>“Scanning people’s faces as they lawfully go about their daily lives, in order to identify them, is a potential threat to privacy that should concern us all. That is especially the case if it is done without people’s knowledge or understanding. “I remain deeply concerned about the growing use of facial recognition technology in public spaces, not only by law enforcement agencies but also increasingly by the private sector. My office and the judiciary are both independently considering the legal issues and whether the current framework has kept pace with emerging technologies and people’s expectations about how their most sensitive personal data is used. “Facial recognition technology is a priority area for the ICO and when necessary, we will not hesitate to use our investigative and enforcement powers to protect people’s legal rights. “We have launched an investigation following concerns reported in the media regarding the use of live facial recognition in the King\'s Cross area of central London, which thousands of people pass through every day. “As well as requiring detailed information from the relevant organisations about how the technology is used, we will also inspect the system and its operation on-site to assess whether or not it complies with data protection law. “Put simply, any organisations wanting to use facial recognition technology must comply with the law - and they must do so in a fair, transparent and accountable way. They must have documented how and why they believe their use of the technology is legal, proportionate and justified. “We support keeping people safe but new technologies and new uses of sensitive personal data must always be balanced against people’s legal rights.”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>After the High Court ruled in September that the <a href=\"https://www.bbc.co.uk/news/uk-wales-50251643\">South Wales Police had&nbsp;acted lawfully when a shopper complained&nbsp;his human rights</a> were breached when he was photographed, civil rights group Liberty said it was akin to the unregulated taking of DNA or fingerprints without consent, and  is campaigning for an outright ban of the practice. <a href=\"https://www.theguardian.com/technology/2019/jun/07/facial-recognition-technology-liberty-says-england-wales-police-use-should-be-banned\">Facial Recognition is Arsenic in Water of Democracy </a>said Liberty. Martha Spurrier, a human rights lawyer, said the technology had such fundamental problems that, despite police enthusiasm for the equipment, its use on the streets should not be permitted.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham said the use of facial recognition tools represents a \"step change\" in policing techniques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An investigation by commissioner Elizabeth Denham has raised \"serious concerns\" over use of the technology.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham called on the government to introduce a statutory code of practice.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"https://www.bitsoffreedom.nl\">civil liberties </a>organisations<a href=\"https://www.bitsoffreedom.nl\">,</a>&nbsp;such&nbsp;as&nbsp;the&nbsp;<a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">Electronic&nbsp;Frontier&nbsp;Foundation</a> or <a href=\"https://edri.org/facial-recognition-and-fundamental-rights-101/\">EDRI </a> have expressed concerns. As the CNIL pointed out, facial recognition has the potential to become a particularly ubiquitous and intrusive tool. <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The use of FR in Hong Kong and London Kings Cross has been seen as <a href=\"https://www.dezeen.com/2019/10/09/facial-recognition-hong-kong-threat/\">\"a fundamental threat to society\"</a> says Owen&nbsp;Hopkins.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The European Data Protection Supervisor, Wojciech Wiewiórowski, questioned: <a href=\"https://edps.europa.eu/press-publications/press-news/blog/facial-recognition-solution-search-problem_en\">Facial recognition A solution in search of a problem?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Based on a probability rather than on the absolute certainty of a match between the faces being compared and the baseline \"template\". Variations in performance can therefore have far-reaching consequences for individuals who are mis-identified. Over-reliance on technology can result on serious mis-judgements. The lack of accuracy has serious consequences for individuals being falsely identified whether as criminals or otherwise. Its <a href=\"http://www.pearltrees.com/privacyday/fr-low-accuracy/id28244035\">accuracy has been challenged</a> by several researchers. &nbsp;They are serious potential <a href=\"https://www.kairos.com/blog/face-off-confronting-bias-in-face-recognition-ai\">dangers associated with current&nbsp;racial biases</a> in face recognition, and misidentification could lead to wrongful conviction, or far worse.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>To resist against the rise of the intrusive technology, designers have created <a href=\"http://www.pearltrees.com/privacyday/design-products-combat-fr/id28968440\">clothing and accessories that helps to conceal people\'s identities from A.I.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Whatever the EU decide or regulate, <a href=\"http://www.pearltrees.com/privacyday/fr-china/id28248155\">the technology comes from China</a>&nbsp;or&nbsp;the&nbsp;US where <a href=\"https://threatpost.com/amazon-ring-facial-recognition-watch-list/150681/\">Amazon Plans Ring Facial Recognition-Based ‘Watch List’, Report</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/10/11/technology/flickr-facial-recognition.html\">This article </a>by the privacy expert journalist Kashmir Hill is thought provoking on the use of children\'s pictures posted by parents online on website such as Flickr. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Thiis a technology with many caveats and a major societal impacts. You are invited to read more <a href=\"http://www.pearltrees.com/privacyday/facial-recognition/id23427152\">HERE</a> from various sources to make your own opinion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->','Facial Recognition technologies','','inherit','closed','closed','','532-revision-v1','','','2020-01-18 14:03:39','2020-01-18 14:03:39','',532,'https://datarainbow.eu/2020/01/18/532-revision-v1/',0,'revision','',0),(557,5,'2020-01-18 14:05:15','2020-01-18 14:05:15','<!-- wp:heading {\"level\":4} -->\n<h4>The omni-presence of CCTV cameras. A subject I have been writing about for many years, including <a href=\"https://www.linkedin.com/pulse/life-under-digit-tara-taubman-bassirian-llm/\">here</a> and <a href=\"https://www.linkedin.com/pulse/keeping-eye-tara-taubman-bassirian-llm/\">here</a>.</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Two new guidances, one by the <a href=\"https://t.co/iLfWe3PxTR\">Irish Data Protection commissionner</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>and one by the <a href=\"https://ico.org.uk/for-organisations/in-your-sector/business/general-data-protection-regulation-gdpr-faqs-for-small-retailers?utm_source=twitter&amp;utm_medium=iconews&amp;utm_term=11692803-24bf-4164-9af2-1bd530eea6b7&amp;utm_content&amp;utm_campaign&amp;fbclid=IwAR03GMYAKvSjh92H8VC5mHW69dv7Ldll_GYaJ5KcVaz4RGlwwDvMEhL8sD8\">UK ICO.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I know, big Brother is taking over our streets and buildings. This omniveillance has severe chilling effects on our Fundamental Rights of freedom and human dignity. We are seriously suffocating in our Panoptican society.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>What private CCTV camera surveillance can cause ?</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Record any movement. They are usually not allowed to record voices. They record indistinctly, regardless of criminals or purely innocent walking by.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Because <a href=\"https://datarainbow.eu/2019/01/22/why-privacy-matters/\">privacy matters</a>, CCTVs  have to obey to strict rules : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>You need :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>To inform the public by clear warning, </li><li>Register your cameras with the Information Commissionner, </li><li>Assess the privacy impact of the surveillance recording in a <a href=\"https://www.gov.uk/government/publications/data-protection-impact-assessments-for-surveillance-cameras\">DPIA</a>,</li><li>Secure the data collected,</li><li>Limit access to data collected,</li><li>Be ready for anyone to send a Subject Access Request to access the video footage at no cost with obligation to blur third parties faces, </li><li>Ensure that the CCTV images are clear and of a high quality,</li><li>Comply with the comprehensive ICO CCTV <a href=\"https://ico.org.uk/for-organisations/data-protection-self-assessment/cctv-checklist/?fbclid=IwAR0biT_007rE2cbDeMXL4aaRpvXmJcxGCieiV6tbgBGxxdaAqXxt96mQzok\">check list</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>The <a href=\"https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/282774/SurveillanceCameraCodePractice.pdf?fbclid=IwAR1jQCpXzQh1BnkXrWTdB6SBZ6ScEqHsBaS2HHICoraZHUsYB818lRal5Ac\">Surveillance Code of Practice</a> has not yet been updated to comply with the GDPR. It states \"<em>Principle 7 - Access to retained images and information should be restricted and there must be clearly defined rules on who can gain access and for what purpose such access is granted; the disclosure of images and information should only take place when it is necessary for such a purpose or for law enforcement purposes.</em>\"&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>What is the nature of the pictures recorded by the CCTV cameras?</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>GDPR require higher protection for \'<em>special category data\'</em>. Recital 51 clarifies when pictures can be considered of \'<em>special category</em>\' or as previously called \'<em>sensitive data</em>\' : “<em>Those personal data should include personal data revealing <strong>racial or ethnic origin</strong>, whereby the use of the term ‘racial origin’”: photographs should not systematically be considered to be processing of SC of PD as they are covered by the definition of biometric data only when processed through a specific technical means allowing the unique identification or authentication of a natural person</em>.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>The processing of photographs should not systematically be considered to be processing of special categories of personal data as they are covered by the definition of biometric data only when processed through a specific technical means allowing the unique identification or authentication of a natural person.</em>\"  <a href=\"https://iapp.org/news/a/ask-the-privacy-expert/)\">IAPP comments</a> </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Therefore when a CCTV footage reveal an image identifying an individual with its racial or ethic origin, by the colour of the skin or any external religious sign, these should be considered special category data. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>A management company intend to use CCTV images to name and shame fly tippers.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not seeing any result with their CCTV cameras to stop fly tipping, the management company of a private residence decide to pass at a higher speed by naming and shaming perpetrators.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The <a href=\"https://ico.org.uk/your-data-matters/cctv/?fbclid=IwAR2ukAzVv4yVY9KEv5zFUkSRb6g7Va1q07Xti8AdyqX3rQv_lzdyOmEq4qE\">UK ICO specifically request</a> that \"<em>CCTV operators are not allowed to disclose images of identifiable people to the media - or to put them on the internet - for entertainment. Images released to the media to help identify a person are usually disclosed by the police.</em>\"&nbsp;<a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https://l.facebook.com/l.php?u=https%3A%2F%2Fico.org.uk%2Fyour-data-matters%2Fcctv%2F%3Ffbclid%3DIwAR2mHJ3YdgIEo95OlkNPQEJIhtq8sddhUeFGLLwdLxP41EHuZhNcZi9AThs&amp;h=AT0KGO2z-vp79YdW98JcL8ySgXe0Yz8BlIB9Aw4UjOdZPWLZjN23jXvoxryzS0d4tVZboM1vwGJSvrO7OjOPiFXd2Ed1703uY3cA3Xvs0OgiZeUxQCoj7zy7FOtKZ-I6PeHcGQAnxg\">&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Naming and shaming will result in identifying, revealing racial, ethnic, religious origins and eventually capture minors.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not noticing much improvement with the cameras, the management has now decided to name and shame the perpetrators. When public naming and shaming, they should be ready for this sort of out of control incidents&nbsp;<a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https://www.bbc.co.uk/news/uk-england-coventry-warwickshire-11087061?fbclid=IwAR3JwAi7npCRmC_pkVcHyAM-D0LaEPt4xz62wYpX7uqsZj5TA9EBukD0TuQ\">https://www.bbc.co.uk/.../uk-england-coventry...</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>The issue of securing the data collected</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>CCTV cameras are easily hackable as shown in <a href=\"https://www.zerohedge.com/news/2019-05-02/chinas-mass-surveillance-app-hacked-code-reveals-specific-criterea-illegal?fbclid=IwAR3Vl1RuX8GW2fSYdixxxrKb9rE038S7MZ5rLO0srl3mJ2zAZwL3po1BCMg\">this case</a>&nbsp;and&nbsp;therefore&nbsp;a&nbsp;burden&nbsp;to&nbsp;keep&nbsp;safe. Cameras footage can be interecepted to <a href=\"https://clarinettesblog.wordpress.com/2012/02/07/would-you-like-a-webcam-in-your-bedrooms-and-bathrooms-broadcating-live/\">broadcast live online</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://securityboulevard.com/2019/05/smart-cities-and-smarter-hackers/amp/\">Smart cities and smarter hackers</a>. \'<em>Japan is planning a mass hackathon after passing legislation to prepare their citizens in advance of their 2020 Olympics. The company’s government plans to test the security of 200 Million IoT devices to create awareness of IoT security and its importance in the run up to the big event next year.</em>\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Do you want to give access to your data footage to any hacker? <a href=\"https://paulbernal.wordpress.com/2012/02/07/do-you-want-a-camera-in-your-kids-bedroom/\">Read more here</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>The issue of over-reliance on technology</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Wrong identification cans easily ruine someone\'s reputation as internet never forget. White Europeans are usually not good at identifying black or Asian. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Privacy, necessity and the balance of proportionality</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Privacy is a fundamental human rights resulting of the Article 8 ECHR. In the context of fundamental rights, such as the right to the protection of personal data, proportionality is key for any limitation on these rights. It is a requirement before deploying any process to consider the balance between the means used and the intended aim. \'<em>Proportionality requires that advantages due to limiting the right are not outweighed by the disadvantages to exercise the right.&nbsp; In other words, the limitation on the right must be justified. Safeguards accompanying a measure can support the justification of a measure.&nbsp; A pre-condition is that the measure is adequate to achieve the envisaged objective. In addition, when assessing the processing of personal data, proportionality requires that only that personal data which is adequate and relevant for the purposes of the processing is collected and processed.</em>\' The EDPB has published an <a href=\"https://edps.europa.eu/sites/edp/files/publication/17-06-01_necessity_toolkit_final_en_0.pdf\">Assessment and Necessity Toolkit</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Balancing fairness and proportionality</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 6(1)f  lawful ground of processing personal data balancing exercises require it to be ‘<em>necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject</em>’. In other words, the legitimate interests of the controller&nbsp;<em>and</em>&nbsp;those of third parties against the interests, fundamental rights and freedoms of the data subject have to be balanced. The legitimate interest of the data controlor has to be balanced against the individual’s interests, rights and freedoms. Where same result can reasonably be achieved in a less intrusive way the legitimate interests basis for processing will not apply.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The balance of rights between the use of CCTV cameras naming and shaming and the rights of individuals can be considered <a href=\"https://www.independent.co.uk/.../facial-recognition...\">excessive and out of proportion</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>When publicly naming and shaming,  this sort of <a href=\"https://www.bbc.co.uk/news/uk-england-coventry-warwickshire-11087061\">out of control incidents </a>should be expected. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I understand dumping is bad but it doesn\'t justify destroying someone\'s life and reputation. <a href=\"https://datarainbow.eu/2019/01/22/why-privacy-matters/\">Internet memory is indelible</a>. In a more legal term, it doesn\'t stand the balance of proportionality to publish the footage. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>When the same result could be achieved in a less intrusive way </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>CCTV Code of Conduct suggests other measures such as more lighting for a bette security. In Frankfurt/Germany, twice a month residents would leave outside their unwanted items for the council vans to pick up. Sadly in UK in many areas, they are insuffisant recycling centers, some have even started to charge. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fine, the balance of proportionality has in one side the constant nuisance caused by dumping and on the other hand, fundamental rights and freedom of innocent residents and their visitors, the security of the network, unauthorised access to CCTV footage, over-reliance on technology and mis-identification of perpetrators, excessive and out of control online reactions, Data subject Subject Access Requests,  </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>As example of issues created by pictures posted online to identify criminals:</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.independent.co.uk/news/uk/home-news/facial-recognition-london-inaccurate-met-police-trials-a8898946.html\">Facial recognition wrongly identifies public as potential criminals 96% of time, figures reveal </a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.digitaltrends.com/home-theater/dont-be-a-sucker-the-white-van-speaker-scam-explained/\">The white van speaker scam explained, and how it moved to Craigslist and Facebook</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.thejournal.ie/paris-white-van-4566347-Mar2019/\">How an internet hoax about a \'white van kidnapper\' sparked violence in Paris</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Was Mary Bale the most evil person in Britain to deserve to be publicly named and shamed <a href=\"https://www.independent.co.uk/news/uk/home-news/is-mary-bale-the-most-evil-woman-in-britain-2064733.html\">that way</a>? <a href=\"https://www.independent.co.uk/news/uk/home-news/is-mary-bale-the-most-evil-woman-in-britain-2064733.html\">The sad reputation of the woman who dumped her cat in a bin.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>In an attempt to crack down on shoplifters, a UK storeowner has begun posting CCTV images of suspected thieves on the company\'s website, along with the incentive of a 500 pound (€580) reward for those who successfully identify thieves. On Saturday, the scheme claimed its first victim. But is it legal?</em>\' <a href=\"https://observers.france24.com/en/20090819-naming-shaming-shoplifters-cctv-legal-home-bargains?fbclid=IwAR26I88C13Nya4Wu3B21FBS9HN-5M61oGrrT5wzXY0y1_ETRqUypijE8JVI\">Read more here</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Does it worth the cost? I hope you share my view to answer no. Help me to explain to privacy consultants why CCTV cameras combined with naming and shaming of dumpers is not a great idea.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','CCTV cameras and captured images','Big Brother is taking over our streets and buildings. This omniveillance has severe chilling effects on our Fundamental Rights of freedom and human dignity. We are seriously suffocating in our Panoptican society.','inherit','closed','closed','','402-revision-v1','','','2020-01-18 14:05:15','2020-01-18 14:05:15','',402,'https://datarainbow.eu/2020/01/18/402-revision-v1/',0,'revision','',0),(558,5,'2020-01-18 14:06:18','2020-01-18 14:06:18','<!-- wp:heading {\"level\":4} -->\n<h4>Transparency and Consent.</h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Nearly a year after the GDPR entered into effect we are progressively getting more decisions from Data Protection Authorities around Europe .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO has&nbsp;<a href=\"https://ico.org.uk/action-weve-taken/enforcement/hall-and-hanley-ltd/\">fined a PPI claims management company £120,000</a>&nbsp;for sending unlawful spam texts about its services. The facts go back between January and June 2018, therefore ICO applied the Data Protection Act 1998 and the PECR to fine direct marketing sending some 4 million unsolicited messages. The ICO had received more than a thousand of complaints from users trough the 7726 complain messaging to the GSMA. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Although under DPA 1998, the decision clarifies some of the requirements for consent in order to send direct marketing messages.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":395} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-17.07.41.png\" alt=\"\" class=\"wp-image-395\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:image {\"id\":397} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-17.15.07.png\" alt=\"\" class=\"wp-image-397\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>We have previously discussed the prohibition of bundled consent <a href=\"https://datarainbow.eu/2019/01/27/website-transparency-cookies-and-privacy-notice/\">here</a> and <a href=\"https://datarainbow.eu/2019/01/27/french-cnils-six-first-month-of-gdpr/\">here</a>. The ICO here investigated the source of the personal data : marketers acting on behalf of Hall and Hanley collected data from three websites. <a href=\"https://www.getyaoffers.co.uk/privacy-policy.html\">Getyaoffers.co.uk</a>, <a href=\"http://petesdeals.co.uk/\">petesdeals.co.uk</a> , myloanoffers.co.uk, and <a href=\"https://prizereactor.co.uk/\">prizereactors.co.uk</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>1 -<strong> The ICO looked at the information provided by these websites collecting data in their privacy notices. </strong></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Getyaoffers.co.uk privacy policy states : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>HOW DO WE COLLECT YOUR PERSONAL INFORMATION?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We collect Personal Information about You in several ways including the following:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>when You enter one of Our competitions or prize draws;</em></li><li><em>when You complete one of Our lifestyle questionnaires or surveys;</em></li><li><em>when You complete Our unsubscribe form;</em></li><li><em>when You submit a Data Protection Enquiry or Subject Access Request (SAR);</em></li><li><em>when We purchase or license Your information from other suppliers.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Then in <em>\'WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Data, like many other products and services can be sold or licensed. When We license data to third parties We call them Clients. We work hard to ensure that We only deal with reputable Clients who like Us operate in accordance with UK Data Protection Law. We enforce this through Our contractual relationships with Our Clients in which they undertake to operate in accordance with the UK Data Protection Law and continue to enforce the rights You have. More information about those rights is set out in this Privacy Notice. Sometimes Our Clients operate in countries outside of the European Economic Area (EEA) who operate under different data protection laws. Where this happens We enforce additional contractual provisions to ensure they provide an adequate level of protection as required by UK Data Protection Law.Here is a list of business categories in which Our Clients operate. Depending on what personal information We hold about You Our Clients may contact You by telemarketing, post or email for direct marketing, debt collection and tracing.For a more detailed list of the types of companies that fall into each business category please click on the category name.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2- Consent and third party sharing personal data</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It\'s interesting to read that such a vague enumeration of categories of third parties accessing personal data is deemed as insufficient information for the ICO with regard to the balance of proportionality.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":377} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.18.02.png\" alt=\"\" class=\"wp-image-377\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p> Much same observation as for myloanoffers.co.uk there is a list of third party partners that \'may\' access personal data and an exhaustive list of partners subscribers \'<em>may</em>\' receive direct marketing messages from.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the other two website cases, if H&amp;H namely appeared, there was no active opt in to consent without detrimental consequences to the access to the service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that privacy notices require more transparency and clarity. Consent has to be informed and specific and no detrimental to the use of service.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>3- H&amp;H is recognised as the instigator of the direct marketing text messages </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":378} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.36.51.png\" alt=\"\" class=\"wp-image-378\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>In the words of the ICO,\" \'<em>similar organisations</em>\', \'<em>partners</em>\' or \'<em>selected third parties</em>\' are not sufficient information. When named, organisations need to appear immediately visible to subscribers with options to select who they wish to receive messages from with the specification of the type and method of marketing messages they wish to receive.\" These are pre-requisite conditions for free and specific consent. These conditions were not fulfilled in this case.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":379} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-15.45.36.png\" alt=\"\" class=\"wp-image-379\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>However, in view of its investigations, the Commissionner considered that H&amp;H did not deliberately contravene regulation 22 of PECR although it could not reasonably ignore its obligations</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4- It is not acceptable to rely on assurance given by third party suppliers</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is an important point stated by the ICO. This is as well valid when website owners commission a work to a web designer,. It is there duty to make sure the website is not collecting personal data without transparency and clear affirmative consent. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"H&amp;H \'opted Data Supply Agreement\' could not \'absolve [himself]<em> </em>of culpability under data protection legislation by transferring its duties of due diligence in respect of the data to the third party\".</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":380} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/05/Screenshot-2019-05-07-at-16.04.25.png\" alt=\"\" class=\"wp-image-380\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Satisfied that H&amp;H had access to sufficient financial resources to pay the monetary penalty \'without causing undue financial hardship\', a fine of 120.000 £ was issued. \' A fine rather clement in comparison with the maximum fine of 500.000 £ and the 4 million unsolicited messages sent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A reminder that stating a category of sector or third parties in privacy notices is insufficient to constitute a <em>clear, affirmative act establishing a freely given, specific, informed and unambiguous</em> consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Consent in direct Marketing','The ICO has fined a PPI claims management company £120,000 for sending unlawful spam texts about its services.','inherit','closed','closed','','376-revision-v1','','','2020-01-18 14:06:18','2020-01-18 14:06:18','',376,'https://datarainbow.eu/2020/01/18/376-revision-v1/',0,'revision','',0),(559,5,'2020-01-18 14:07:18','2020-01-18 14:07:18','<!-- wp:heading -->\n<h2>In the land of Facebook things are getting tough.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><strong>UPDATE :</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>There is an abundance of Facebook headlines in the news and the saga continues. 2019 is going to be the year of GAFAs, will Facebook survive? the combat of lobbies is tough. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Via <a href=\"https://www.linkedin.com/in/mario-guglielmetti-31a57242/\">Mario Guglielmetti </a>: \'<em>the Parliament(s) of 9 countries of the world, calling Mr Zuckerberg to testify on electoral manipulation by his company once more. Canadian Parliament asks for a subpoena. In case Facebook\'s CEO is on Canadian territory, he\'ll be brought to the hearing by force.</em>\'  <a href=\"https://www.cbc.ca/news/politics/facebook-zuckerberg-cambridge-analytica-1.5127007\">Ethics committee votes to subpoena Facebook\'s Mark Zuckerberg to testify</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Bloomberg report : <a href=\"https://news.bloomberglaw.com/securities-law/facebooks-zuckerberg-sued-over-scandals-alleged-insider-trades\">Zuckerberg Sued Over Privacy Scandals, Alleged Insider Trades (1)&nbsp;\"</a><em>Mark Zuckerberg and&nbsp;Facebook Inc.‘s other top executives have been hit with a lawsuit accusing them of insider trading and blaming them for the privacy scandals that have rocked the social media giant and its stock value since 2016.</em>  <em>The shareholder complaint was filed May 1 in Delaware Chancery Court against Zuckerberg, Sheryl Sandberg, Peter Thiel, and three other Facebook board members. It comes about a week after the company announced it expected to pay a fine of up to $5 billion for violating a Federal Trade Commission consent decree requiring better privacy safeguards</em>.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.politico.com/story/2019/05/01/new-privacy-oversight-on-the-table-for-facebook-zuckerberg-1402278\">Nancy Scola wrote in Politico</a> : \'<em>Facebook and the Federal Trade Commission are negotiating a possible settlement that would require the company to place privacy-minded executives at the company\'s highest levels, a source close to the talks told POLITICO on Wednesday — in addition to paying the expected multibillion-dollar fine it disclosed last week.</em>\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.businessinsider.com/facebook-uploaded-1-5-million-users-email-contacts-without-permission-2019-4?fbclid=IwAR1XTZ2N6ItSW6a760zrKscOIyOGOhlpbQ8hWa9uhFqtUO-sjvwCVyGWvgM\">Facebook says it \'unintentionally uploaded\' 1.5 million people\'s email contacts without their consent</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nbcnews.com/tech/social-media/mark-zuckerberg-leveraged-facebook-user-data-fight-rivals-help-friends-n994706?fbclid=IwAR1_lQxZTH1JJABPhomkI69YO1x7sH8I1QA3EJX8YSPANSP0skZJhhP-AZ0\">Mark Zuckerberg leveraged Facebook user data to fight rivals and help friends, leaked documents show</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-regulation-ftc-fine.html\">Regulators Around the World Are Circling Facebook</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://thehackernews.com/2019/04/facebook-privacy-investigation.html\">New York, Canada, Ireland Launch New Investigations Into Facebook Privacy Breaches</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Canada’s privacy commissioner is suing Facebook over its balking at the country’s recommended privacy changes: \"<em>Facebook should not get to decide what Canadian privacy law does or does not require.</em>” </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Michael Geist wrote : <a href=\"http://Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate\">Thank Facebook for reminding us Canada’s privacy protection is utterly inadequate</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For Kameron F Kerry <a href=\"https://www.latimes.com/opinion/op-ed/la-oe-kerry-ccpa-data-privacy-laws-20190425-story.html\">A federal privacy law could do better than California’s</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Irish Times reports : <a href=\"https://www.irishtimes.com/business/technology/data-protection-commissioner-to-investigate-facebook-over-password-storage-1.3871585\">Data Protection Commissioner to investigate Facebook over password storage</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ashkan Soltani reported Irish Data Commission Board announced they’re investigating  <a href=\"https://twitter.com/facebook\"><strong>Facebook</strong></a> for plaintext storage of <a href=\"https://abcnews.go.com/Technology/europes-privacy-watchdog-opens-11th-investigation-facebook/story?id=62626462\">“hundreds of millions of user passwords\" This is the \"at least the 11th probe\" by European regulators into Facebook\'s violations of GDPR</a> <a href=\"https://twitter.com/hashtag/privacy?src=hash\">#<strong>privacy</strong></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>New York Attorney General opens investigation into collection of e-mail addresses by <a href=\"https://twitter.com/hashtag/Facebook?src=hash\"><strong>Facebook</strong></a>. <a href=\"https://www.nytimes.com/2019/04/25/technology/facebook-new-york-attorney-general-investigation.html\">“It is time Facebook is held accountable for how it handles consumers’ personal information.”</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Will <a href=\"https://www.wired.com/story/facebook-will-finally-pay-billions-privacy-missteps/?utm_social-type=owned&amp;utm_source=twitter&amp;utm_medium=social&amp;utm_campaign=wired&amp;mbid=social_twitter&amp;utm_brand=wired\">FACEBOOK FINALLY PAY—BILLIONS—FOR ITS PRIVACY MISSTEPS&nbsp;</a>?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Facebook made $15B in the last three months – $3B for violating an FTC order &amp; a decade of privacy violations would be a mere slap on the wrist. FTC must pursue strong structural remedies &amp; impose managerial accountability. Facebook won’t listen otherwise.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amp.cnn.com/cnn/2019/04/24/tech/facebook-q1-earnings/index.html?__twitter_impression=true\">Facebook expects FTC fine could be as much as $5 billion</a><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For <em><a href=\"https://www.theguardian.com/profile/siva-vaidhyanathan\">Siva Vaidhyanathan&nbsp;</a></em><a href=\"https://www.theguardian.com/commentisfree/2019/apr/28/regulating-facebook-will-be-one-of-the-greatest-challenges-in-human-history\">Regulating Facebook will be one of the greatest challenges in human history</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Wired wrote : \'<em>Every time Mark Zuckerberg has pushed the boundaries of privacy, he\'d get a slap on the wrist, and continue rolling out new disruptive products. Until now. Facebook says it expects to pay a fine of $3- $5 billion to the FTC for privacy violations.</em> \'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.linkedin.com/pulse/german-data-protection-authorities-publish-new-guidelines-piltz/\">German data protection authorities publish new guidelines for operating Facebook fanpages</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.computerweekly.com/news/252462301/GDPR-cases-drive-bigger-budgets-for-Nordic-regulators\">GDPR cases drive bigger budgets for Nordic regulators</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The French CNIL has announced the end of the grace period, Dutch DPA has announced investigating non compliant websites, German DPAs have followed but still nothing from the UK ICO and Irish DPC slow on waking up. What is the EDPB going to do to ensure the consistency mechanism ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>The GDPR is the world\'s toughest standard for data privacy. But nearly a year later, its chief enforcer has yet to take a single action against major tech firms like Facebook and Google.\'</em> Read more <a href=\"https://www.politico.com/story/2019/04/24/ireland-data-privacy-1270123\">here</a>.<a href=\"https://digiday.com/hot-topic/gdpr-impact/\">T</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph {\"align\":\"left\"} -->\n<p style=\"text-align:left\"><a href=\"https://digiday.com/media/european-commissions-giovanni-buttarelli-state-gdpr-adoption-even-ticking-box-not-necessarily-mean-consent-freely-given/\">Giovanni Buttarelli on state of GDPR adoption: ‘Even ticking a box does not necessarily mean consent is freely given’.&nbsp;</a>The&nbsp;head&nbsp;of&nbsp;the&nbsp;European&nbsp;Data&nbsp;Protection&nbsp;board,&nbsp;in&nbsp;charge&nbsp;of&nbsp;the&nbsp;Consistency Mechanism and harmonisation of regulations announced :&nbsp;&nbsp;“<em>Yesterday, we had an important discussion within the European Data Protection Board — the network of all data protection authorities. We agreed to better synchronize our efforts around cross border [rulings]. Although Ireland is legal authority for Facebook and Google, we have decided to work on the basis of increased cooperation between the DPAs</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Graham Cluley writes : <a href=\"https://www.grahamcluley.com/so-hows-facebook-going-to-screw-us-next/\">So, how’s Facebook going to screw us next?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From&nbsp;<a href=\"https://www.facebook.com/groups/epicgroupies/?fref=mentions\" rel=\"noreferrer noopener\" target=\"_blank\">EPIC - Electronic Privacy Information Center</a>:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>More than 26,000 complaints against Facebook are currently pending before the FTC. In the eight years since the Commission announced the consent order against Facebook it has not taken a single enforcement action against Facebook. EPIC and a coalition of consumer privacy organizations filed the original complaint against Facebook in 2009.\"While Facebook has been claiming for stronger data regulation, while stil struggling to comply with the GDPR, here comes a new story, Data breach on Amazon servers. Facebook has much on its plate to fight survival. will Facebook resist?</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.facebook.com/hashtag/gdpr?source=feed_text&amp;epa=HASHTAG\">#gdpr</a>&nbsp;update - Press release from the European Commission</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook promise it changed its terms and clarify its use of data for consumers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A new notification tells users events their \'friends\' will attend. Not sure this is going to be much privacy friendly !</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Vera Jourová, EU Commissioner for Justice:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Today Facebook finally shows commitment to more transparency and straight forward language in its terms of use. A company that wants to restore consumers trust after the Facebook/ Cambridge Analytica scandal should not hide behind complicated, legalistic jargon on how it is making billions on people\'s data. Now, users will clearly understand that their data is used by the social network to sell targeted ads.</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook also amended its:<br>- policy on limitation of liability and now acknowledges its responsibility in case of negligence, e.g where data has been mishandled by third parties;<br>- power to unilaterally change terms and conditions by limiting it to cases where the changes are reasonable also taking into account the interest of the consumer;<br>- rules concerning the temporary retention of content which has been deleted by consumers. Such content can only be retained in specific cases and for a maximum of 90 days in case of technical reasons;<br>- the language clarifying the right to appeal of users when the their content has been removed.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the news :<a href=\"https://www.zdnet.com/article/over-540-million-facebook-records-found-on-exposed-aws-servers/\"> Over 540 million Facebook records found on exposed AWS servers.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As <a href=\"https://www.bloomberg.com/news/articles/2019-04-03/millions-of-facebook-records-found-on-amazon-cloud-servers\">Millions of Facebook Records Found on Amazon Cloud Servers</a> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“<em>The data exposure is not the result of a breach of Facebook’s systems. Rather, it is another example, akin to the Cambridge Analytica case, of Facebook allowing third parties to extract large amounts of user data without controls on how that data is then used or secured.</em>” <a href=\"https://www.theguardian.com/technology/2019/apr/03/facebook-data-public-servers-amazon?CMP=Share_iOSApp_Other\">The Guardian</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On the other hand, The Economist reveals that <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook has been under scrutiny by the US FTC and <a href=\"https://www.theverge.com/2019/2/14/18225440/facebook-multibillion-dollar-ftc-fine-privacy-violations\">could reportedly face multibillion-dollar FTC fine over privacy violations.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 \'The UK Parliament used a rarely-used procedure to compel an app developer to seize a number of internal Facebook documents related to the company’s decision-making process preceding the Cambridge Analytica scandal,&nbsp;<a href=\"https://www.theguardian.com/technology/2018/nov/24/mps-seize-cache-facebook-internal-papers?CMP=share_btn_tw\">reports&nbsp;<em>The Guardian</em></a>. The documents reportedly contain “significant revelations” about the decisions that set the stage for the Cambridge Analytica scandal.\' Reported <a href=\"https://www.theverge.com/2018/11/25/18111007/uk-parliament-seized-internal-facebook-documents-app-developer-six4three-cambridge-analytica\">the Verge</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In October 2018 <a href=\"https://www.theguardian.com/technology/2018/oct/25/facebook-fined-uk-privacy-access-user-data-cambridge-analytica\">UK fined Facebook £500,000 for failing to protect user data.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'The British government is going to hit social media firms with fines potentially worth billions of dollars if they fail to rid their platforms of harmful content.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In an interview with Business Insider, the U.K.\'s digital minister Margot James said a new independent tech regulator will be given powers to punish companies, including Facebook and Google, which don\'t properly protect users.\' As reported by <a href=\"https://www.entrepreneur.com/article/329195\">The Entrepreneur.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facing scrutiny, Facebook reportedly hired a PR firm that wrote negative articles about rivals Apple, Google, reports <a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook is partnering with a big UK newspaper to publish sponsored articles downplaying \'technofears\' and praising the company<a href=\"https://www.cnbc.com/2018/11/14/facebook-hired-pr-firm-that-wrote-negative-articles-about-rivals-nyt.html\">.&nbsp;says&nbsp;CNN</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Not enough? <a href=\"https://www.economist.com/business/2019/04/04/facebooks-ad-system-seems-to-discriminate-by-race-and-gender\">Facebook’s ad system seems to discriminate by race and gender</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Trying hard to avoid to drawn <a href=\"https://gizmodo.com/facebook-is-paying-a-british-newspaper-to-run-facebook-1833797033\">Facebook Is Paying a British Newspaper to Run Facebook-Friendly Sponsored Content.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In November 2018 <a href=\"https://www.theverge.com/2018/11/15/18097346/facebook-definers-opposition-research-george-soros-mark-zuckerberg-sharyl-sandberg\">The Verge </a>reported : \'One of the bigger bombshells in&nbsp;<a href=\"https://www.nytimes.com/2018/11/14/technology/facebook-data-russia-election-racism.html?action=click&amp;module=inline&amp;pgtype=Homepage\"><em>The New York Times</em>’ massive Facebook investigation published yesterday</a>&nbsp;was that the company had hired an opposition research and consulting firm known as Definers Public Affairs, which it said had created deceptive news posts and pushed them onto a network of conservative websites. Now, Facebook CEO Mark Zuckerberg says he has no idea who hired them.\' </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook tries to <a href=\"https://www.prnewsonline.com/facebook-regulation\">Flunk PR With Its Call for Regulation.&nbsp;</a>‘People shouldn’t have to rely on individual companies’ to address issues such as privacy and hate speech, Zuckerberg says in op-edcalls&nbsp;for&nbsp;stronger&nbsp;regulation\' Reports <a href=\"https://www.wsj.com/articles/facebook-chief-mark-zuckerberg-wants-more-internet-regulation-11553999323\">the WSJ.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>\'At the weekend Facebook\'s Mark Zuckerberg surprised the world by&nbsp;</strong><a href=\"https://www.bbc.co.uk/news/world-us-canada-47762091\">calling for more regulation, suggesting that the US should adopt Europe\'s data protection rules </a>UK said to Zuckerberg: <a href=\"https://www.bbc.co.uk/news/technology-47778093\">Show us you\'re sincere about regulation. Rory Cellan Jones from the BBC reported \'</a>UK\' data regulator <a href=\"https://twitter.com/ICOnews\">@<strong>iconews</strong></a> says Zuckerberg should \"review\" appeal against £0.5m fine to show Facebook is sincere about regulation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":339} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/04/Screenshot-2019-04-04-at-14.19.29.png\" alt=\"\" class=\"wp-image-339\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>The issue with Facebook is only showing why these Tech businesses built on the \'Free\' business model are no more sustainable. \'Presidential candidate Elizabeth Warren has accused technology giants of competing unfairly\' Reports <a href=\"https://www.theguardian.com/technology/2019/apr/02/big-tech-monopoly-power-elizabeth-warren-technology?fbclid=IwAR0fMDeJt4unlWn5K45TiVmXk9gmPVz5P-YCVHBx6Ip-t4PGWfkwBWiuT4A\">The Guardian.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Dr&nbsp;<a href=\"https://www.irishtimes.com/topics/topics-7.1213540?article=true&amp;tag_person=Johnny+Ryan\">Johnny Ryan</a>, who works as chief policy and industry officer for privacy-oriented web browser Brave. wrote on Twitter, \'<em>If Zuckerberg wanted a global GDPR, he would have kept Facebook’s non-EU users under European regulation.\'</em> Surely he could \'<em>reverse the decision to move non-EU users from Ireland to US processing centers on the eve of the GDPR enforcement.</em>\' as Tim Walters said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tim Turner, Data Protection trainer &amp; consultant commented <em>\"Unpopular opinion: the ICO wants Facebook to drop their appeal because they’re worried that if it goes ahead, Facebook will win. ICO’s case is based on a flawed hypothetical argument, having changed substantially halfway though. Appeals are good. They allow a fresh set of eyes on the case and the ICO’s handling of it. Denham’s impatience with controllers’ right to appeal (expressed publicly more than once) suggests that she doesn’t respect the system she is part of. If her case against Facebook is solid, she should relish the chance to prove it. If it isn’t, the appeal is all the more necessary.\"</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Zuckerberg says he wants to fix the internet. Don\'t take him seriously - <em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">Roger McNamee&nbsp;</a></em>in&nbsp;<a href=\"https://www.theguardian.com/commentisfree/2019/apr/02/mark-zuckerberg-fix-the-internet\">The&nbsp;Guardia</a><em><a href=\"https://www.theguardian.com/profile/roger-mcnamee\">n.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In February this year \'Germany\'s antitrust watchdog ruled on Thursday that Facebook abused its market dominance in collecting, merging and using user data.\' <a href=\"https://www.cnbc.com/2019/02/07/german-antitrust-watchdog-cracks-down-on-facebook.html\">reports CNBC</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the US <a href=\"https://www.theverge.com/2019/3/19/18272605/facebook-ftc-investigation-congress-republican-david-cicilline\">Democratic leader calls on FTC to investigate Facebook’s market power.&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facebook \'has paid teenagers&nbsp;<a rel=\"noreferrer noopener\" href=\"https://techcrunch.com/2019/01/29/facebook-project-atlas/\" target=\"_blank\">to spy on their behavior</a>, even asking users “to screenshot their Amazon order history page,” according to the website TechCrunch. The company has&nbsp;<a rel=\"noreferrer noopener\" href=\"https://www.wsj.com/articles/you-give-apps-sensitive-personal-information-then-they-tell-facebook-11550851636\" target=\"_blank\">secretly collected</a>&nbsp;highly sensitive data through the back doors of other apps, such as ovulation trackers, to target ads at users “even if no Facebook account is used to log in and if the end user isn’t a Facebook member,” The Wall Street Journal reported.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>And in its pursuit of dominance,&nbsp;<a href=\"https://www.nytimes.com/interactive/2018/06/03/technology/facebook-device-partners-users-friends-data.html?module=inline\">Facebook gave at least 60 device makers</a>&nbsp;direct access to its users’ data. Those actions are&nbsp;<a href=\"https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline\">under criminal investigation</a>, The Times reported last week. Facebook has also engaged in campaigns to obstruct congressional oversight and to smear and discredit critics — tactics reminiscent of the big tobacco playbook.\' <a href=\"https://www.nytimes.com/2019/03/19/opinion/facebook-antitrust-investigation.html\">Reports the New York Times.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"http://www.pearltrees.com/privacyday/class-actions/id23426779\">class actions</a> against Facebook are pending. Will <a href=\"http://www.pearltrees.com/privacyday/facebook/id23766375\">Facebook</a> survive?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->','Facebook Saga','','inherit','closed','closed','','336-revision-v1','','','2020-01-18 14:07:18','2020-01-18 14:07:18','',336,'https://datarainbow.eu/2020/01/18/336-revision-v1/',0,'revision','',0),(560,5,'2020-01-18 14:12:47','2020-01-18 14:12:47','<!-- wp:paragraph -->\n<p>and their threats to fundamental human rights and security</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Leaked EU documents were intercepted by Euractiv journalist Samuel Stolton who published and article <a href=\"https://www.euractiv.com/section/digital/news/leak-commission-considers-facial-recognition-ban-in-ai-white-paper/\">\"LEAK: Commission considers facial recognition ban in AI ‘white paper’.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU Commission white paper suggests a temporary ban of 3 to 5 years on facial recognition in public spaces. Reminding this could provoke a serious conflict between The <a href=\"https://twitter.com/EU_Commission\">EU_Commission</a> and certain member states  - such as <a href=\"http://www.rfi.fr/en/france/20200108-government-wants-test-facial-recognition-video-surveillance-security-civil-liberties\">France</a> and <a href=\"https://www.euractiv.com/section/data-protection/news/german-ministers-plan-to-expand-automatic-facial-recognition-meets-fierce-criticism/\">Germany </a>having already taken different positions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fact, the French CNIL published a document in November 2019 with an English version in December \"<a href=\"https://www.cnil.fr/en/facial-recognition-debate-living-challenges\">Facial recognition: for a debate living up to the challenges\"</a>&nbsp;calling&nbsp;for&nbsp;an&nbsp;in-depth&nbsp;political&nbsp;debate. The purpose of which should be \'to determine in which cases facial recognition is necessary in a democratic society, and in which cases it is not.\' Suggesting a <strong>balanced overview</strong>&nbsp;of&nbsp;the&nbsp;different&nbsp;biometrics existing&nbsp;technologies to assess the risks and determine which technologies are not acceptable in a democratic society and which ones can be assumed with appropriate safeguards.&nbsp;Within&nbsp;the framework of the GDPR, the CNIL has already had the opportunity to allow certain uses in principle, while regulating them in practical terms (border control at airports), and to refuse others (controlling student access in schools).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The <a href=\"https://edpb.europa.eu/news/national-news/2019/facial-recognition-school-renders-swedens-first-gdpr-fine_en\">Swedish data protection authority recently imposed a fine </a>on a school for testing <a href=\"http://www.pearltrees.com/privacyday/fr-schools/id28244027http://www.pearltrees.com/privacyday/fr-schools/id28244027\">facial recognition technology to track its students’ attendance</a>. On the other hand, the <a href=\"https://iapp.org/news/a/swedish-dpa-authorizes-police-to-use-facial-recognition/\">Swedish DPA authorise the use of FR by police forces.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.forbes.com/sites/marisagarcia/2019/11/27/iberia-launches-facial-recognition-app-as-airline-industry-biometric-adoption-advances/amp/\">Iberia Launches Facial Recognition App As Airline Industry Biometric Adoption Advances</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>San Francisco recently became the first US city to&nbsp;<a href=\"https://www.theguardian.com/us-news/2019/may/14/san-francisco-facial-recognition-police-ban\">ban police and other agencies from using automated facial recognition</a>, following widespread condemnation of China’s use of the technology to impose&nbsp;<a href=\"https://www.theguardian.com/news/2019/apr/11/china-hi-tech-war-on-muslim-minority-xinjiang-uighurs-surveillance-face-recognition\">control over millions of Uighur Muslims</a>&nbsp;in the western region of Xinjiang. Somerville, Massachusetts, then <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">Oakland</a> have&nbsp;<a class=\"\" href=\"https://www.technologyreview.com/s/613536/facial-recognition-ban-san-francisco-surveillance-privacy-private-corporate-interests/\">banned government use of facial recognition</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the <a href=\"https://www.telegraph.co.uk/news/2019/10/07/london-council-used-facial-recognition-technology-streets-without/\">London council used facial recognition technology on streets without consulting residents,</a>&nbsp;the UK Information Commissioner\'s Office published its Opinion 2019/01 on the use of live facial recognition technology (LFR) by law enforcement in public places dated 31-10-2019. in summary :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(1) The use of LFR involves the processing of personal data and therefore #data protection law applies, whether it is for a trial or routine operational deployment.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(2) The processing of personal data by ‘competent authorities’ for ‘the law enforcement purposes’ is covered by UK law.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(3) The use of LFR for the law enforcement purposes constitutes ‘sensitive processing’ as it involves the processing of biometric data for the purpose of uniquely identifying a data subject.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(4) Such sensitive processing relates to all facial images captured and analysed by the software. A data protection impact assessment and an ‘appropriate policy document’ must be in place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(5) Sensitive processing occurs irrespective of whether that image yields a match to a person on a watchlist or the biometric data of unmatched persons is subsequently deleted within a short space of time.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(6) Data protection law applies to the whole process of LFR, from consideration about the necessity and proportionality for deployment, the compilation of watchlists, the processing of the biometric data through to the retention and deletion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial images are biometric data as: ‘relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person’ (GDPR Art. 2(14)). The GDPR generally forbids the processing of biometric data for uniquely identifying purposes unless relying on one of the ten exemptions listed in Art. 9(2).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For such technology to be deployed, given that it relies on the large-scale processing of sensitive data, consent would need to be explicit as well as freely-given, informed and specific.&nbsp;Additionally, when deployed in public spaces, how anyone could opt out?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK ICO questioned how far should we, as a society, consent to police forces reducing our privacy in order to keep us safe? They found that \'the current combination of laws, codes and practices relating to LFR will not drive the ethical and legal approach that’s needed to truly manage the risk that this technology presents.\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Statement from Elizabeth Denham, Information Commissioner, on the use of live facial recognition technology in King\'s Cross, London : <em>“Scanning people’s faces as they lawfully go about their daily lives, in order to identify them, is a potential threat to privacy that should concern us all. That is especially the case if it is done without people’s knowledge or understanding. “I remain deeply concerned about the growing use of facial recognition technology in public spaces, not only by law enforcement agencies but also increasingly by the private sector. My office and the judiciary are both independently considering the legal issues and whether the current framework has kept pace with emerging technologies and people’s expectations about how their most sensitive personal data is used. “Facial recognition technology is a priority area for the ICO and when necessary, we will not hesitate to use our investigative and enforcement powers to protect people’s legal rights. “We have launched an investigation following concerns reported in the media regarding the use of live facial recognition in the King\'s Cross area of central London, which thousands of people pass through every day. “As well as requiring detailed information from the relevant organisations about how the technology is used, we will also inspect the system and its operation on-site to assess whether or not it complies with data protection law. “Put simply, any organisations wanting to use facial recognition technology must comply with the law - and they must do so in a fair, transparent and accountable way. They must have documented how and why they believe their use of the technology is legal, proportionate and justified. “We support keeping people safe but new technologies and new uses of sensitive personal data must always be balanced against people’s legal rights.”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>After the High Court ruled in September that the <a href=\"https://www.bbc.co.uk/news/uk-wales-50251643\">South Wales Police had&nbsp;acted lawfully when a shopper complained&nbsp;his human rights</a> were breached when he was photographed, civil rights group Liberty said it was akin to the unregulated taking of DNA or fingerprints without consent, and  is campaigning for an outright ban of the practice. <a href=\"https://www.theguardian.com/technology/2019/jun/07/facial-recognition-technology-liberty-says-england-wales-police-use-should-be-banned\">Facial Recognition is Arsenic in Water of Democracy </a>said Liberty. Martha Spurrier, a human rights lawyer, said the technology had such fundamental problems that, despite police enthusiasm for the equipment, its use on the streets should not be permitted.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham said the use of facial recognition tools represents a \"step change\" in policing techniques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An investigation by commissioner Elizabeth Denham has raised \"serious concerns\" over use of the technology.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham called on the government to introduce a statutory code of practice.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"https://www.bitsoffreedom.nl\">civil liberties </a>organisations<a href=\"https://www.bitsoffreedom.nl\">,</a> such as the <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">Electronic Frontier Foundation,</a><a href=\"https://epic.org/banfacesurveillance/\"> EPIC</a> or <a href=\"https://edri.org/facial-recognition-and-fundamental-rights-101/\">EDRI </a> have expressed concerns. As the CNIL pointed out, facial recognition has the potential to become a particularly ubiquitous and intrusive tool. <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The use of FR in Hong Kong and London Kings Cross has been seen as <a href=\"https://www.dezeen.com/2019/10/09/facial-recognition-hong-kong-threat/\">\"a fundamental threat to society\"</a> says Owen&nbsp;Hopkins.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The European Data Protection Supervisor, Wojciech Wiewiórowski, questioned: <a href=\"https://edps.europa.eu/press-publications/press-news/blog/facial-recognition-solution-search-problem_en\">Facial recognition A solution in search of a problem?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Based on a probability rather than on the absolute certainty of a match between the faces being compared and the baseline \"template\". Variations in performance can therefore have far-reaching consequences for individuals who are mis-identified. Over-reliance on technology can result on serious mis-judgements. The lack of accuracy has serious consequences for individuals being falsely identified whether as criminals or otherwise. Its <a href=\"http://www.pearltrees.com/privacyday/fr-low-accuracy/id28244035\">accuracy has been challenged</a> by several researchers. &nbsp;They are serious potential <a href=\"https://www.kairos.com/blog/face-off-confronting-bias-in-face-recognition-ai\">dangers associated with current&nbsp;racial biases</a> in face recognition, and misidentification could lead to wrongful conviction, or far worse.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>To resist against the rise of the intrusive technology, designers have created <a href=\"http://www.pearltrees.com/privacyday/design-products-combat-fr/id28968440\">clothing and accessories that helps to conceal people\'s identities from A.I.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Whatever the EU decide or regulate, <a href=\"http://www.pearltrees.com/privacyday/fr-china/id28248155\">the technology comes from China</a>&nbsp;or&nbsp;the&nbsp;US where <a href=\"https://threatpost.com/amazon-ring-facial-recognition-watch-list/150681/\">Amazon Plans Ring Facial Recognition-Based ‘Watch List’, Report</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/10/11/technology/flickr-facial-recognition.html\">This article </a>by the privacy expert journalist Kashmir Hill is thought provoking on the use of children\'s pictures posted by parents online on website such as Flickr. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Thiis a technology with many caveats and a major societal impacts. You are invited to read more <a href=\"http://www.pearltrees.com/privacyday/facial-recognition/id23427152\">HERE</a> from various sources to make your own opinion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->','Facial Recognition technologies','','inherit','closed','closed','','532-revision-v1','','','2020-01-18 14:12:47','2020-01-18 14:12:47','',532,'https://datarainbow.eu/2020/01/18/532-revision-v1/',0,'revision','',0),(561,5,'2020-01-20 11:55:07','2020-01-20 11:55:07','<!-- wp:paragraph -->\n<p>and their threats to fundamental human rights and security</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Leaked EU documents were intercepted by Euractiv journalist Samuel Stolton who published and article <a href=\"https://www.euractiv.com/section/digital/news/leak-commission-considers-facial-recognition-ban-in-ai-white-paper/\">\"LEAK: Commission considers facial recognition ban in AI ‘white paper’.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The EU Commission white paper suggests a temporary ban of 3 to 5 years on facial recognition in public spaces. Reminding this could provoke a serious conflict between The <a href=\"https://twitter.com/EU_Commission\">EU_Commission</a> and certain member states  - such as <a href=\"http://www.rfi.fr/en/france/20200108-government-wants-test-facial-recognition-video-surveillance-security-civil-liberties\">France</a> and <a href=\"https://www.euractiv.com/section/data-protection/news/german-ministers-plan-to-expand-automatic-facial-recognition-meets-fierce-criticism/\">Germany </a>having already taken different positions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fact, the French CNIL published a document in November 2019 with an English version in December \"<a href=\"https://www.cnil.fr/en/facial-recognition-debate-living-challenges\">Facial recognition: for a debate living up to the challenges\"</a>&nbsp;calling&nbsp;for&nbsp;an&nbsp;in-depth&nbsp;political&nbsp;debate. The purpose of which should be \'to determine in which cases facial recognition is necessary in a democratic society, and in which cases it is not.\' Suggesting a <strong>balanced overview</strong>&nbsp;of&nbsp;the&nbsp;different&nbsp;biometrics existing&nbsp;technologies to assess the risks and determine which technologies are not acceptable in a democratic society and which ones can be assumed with appropriate safeguards.&nbsp;Within&nbsp;the framework of the GDPR, the CNIL has already had the opportunity to allow certain uses in principle, while regulating them in practical terms (border control at airports), and to refuse others (controlling student access in schools).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The <a href=\"https://edpb.europa.eu/news/national-news/2019/facial-recognition-school-renders-swedens-first-gdpr-fine_en\">Swedish data protection authority recently imposed a fine </a>on a school for testing <a href=\"http://www.pearltrees.com/privacyday/fr-schools/id28244027http://www.pearltrees.com/privacyday/fr-schools/id28244027\">facial recognition technology to track its students’ attendance</a>. On the other hand, the <a href=\"https://iapp.org/news/a/swedish-dpa-authorizes-police-to-use-facial-recognition/\">Swedish DPA authorise the use of FR by police forces.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.forbes.com/sites/marisagarcia/2019/11/27/iberia-launches-facial-recognition-app-as-airline-industry-biometric-adoption-advances/amp/\">Iberia Launches Facial Recognition App As Airline Industry Biometric Adoption Advances</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>San Francisco recently became the first US city to&nbsp;<a href=\"https://www.theguardian.com/us-news/2019/may/14/san-francisco-facial-recognition-police-ban\">ban police and other agencies from using automated facial recognition</a>, following widespread condemnation of China’s use of the technology to impose&nbsp;<a href=\"https://www.theguardian.com/news/2019/apr/11/china-hi-tech-war-on-muslim-minority-xinjiang-uighurs-surveillance-face-recognition\">control over millions of Uighur Muslims</a>&nbsp;in the western region of Xinjiang. Somerville, Massachusetts, then <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">Oakland</a> have&nbsp;<a class=\"\" href=\"https://www.technologyreview.com/s/613536/facial-recognition-ban-san-francisco-surveillance-privacy-private-corporate-interests/\">banned government use of facial recognition</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the <a href=\"https://www.telegraph.co.uk/news/2019/10/07/london-council-used-facial-recognition-technology-streets-without/\">London council used facial recognition technology on streets without consulting residents,</a>&nbsp;the UK Information Commissioner\'s Office published its Opinion 2019/01 on the use of live facial recognition technology (LFR) by law enforcement in public places dated 31-10-2019. in summary :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(1) The use of LFR involves the processing of personal data and therefore #data protection law applies, whether it is for a trial or routine operational deployment.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(2) The processing of personal data by ‘competent authorities’ for ‘the law enforcement purposes’ is covered by UK law.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(3) The use of LFR for the law enforcement purposes constitutes ‘sensitive processing’ as it involves the processing of biometric data for the purpose of uniquely identifying a data subject.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(4) Such sensitive processing relates to all facial images captured and analysed by the software. A data protection impact assessment and an ‘appropriate policy document’ must be in place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(5) Sensitive processing occurs irrespective of whether that image yields a match to a person on a watchlist or the biometric data of unmatched persons is subsequently deleted within a short space of time.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(6) Data protection law applies to the whole process of LFR, from consideration about the necessity and proportionality for deployment, the compilation of watchlists, the processing of the biometric data through to the retention and deletion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial images are biometric data as: ‘relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person’ (GDPR Art. 2(14)). The GDPR generally forbids the processing of biometric data for uniquely identifying purposes unless relying on one of the ten exemptions listed in Art. 9(2).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For such technology to be deployed, given that it relies on the large-scale processing of sensitive data, consent would need to be explicit as well as freely-given, informed and specific.&nbsp;Additionally, when deployed in public spaces, how anyone could opt out?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK ICO questioned how far should we, as a society, consent to police forces reducing our privacy in order to keep us safe? They found that \'the current combination of laws, codes and practices relating to LFR will not drive the ethical and legal approach that’s needed to truly manage the risk that this technology presents.\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Statement from Elizabeth Denham, Information Commissioner, on the use of live facial recognition technology in King\'s Cross, London : <em>“Scanning people’s faces as they lawfully go about their daily lives, in order to identify them, is a potential threat to privacy that should concern us all. That is especially the case if it is done without people’s knowledge or understanding. “I remain deeply concerned about the growing use of facial recognition technology in public spaces, not only by law enforcement agencies but also increasingly by the private sector. My office and the judiciary are both independently considering the legal issues and whether the current framework has kept pace with emerging technologies and people’s expectations about how their most sensitive personal data is used. “Facial recognition technology is a priority area for the ICO and when necessary, we will not hesitate to use our investigative and enforcement powers to protect people’s legal rights. “We have launched an investigation following concerns reported in the media regarding the use of live facial recognition in the King\'s Cross area of central London, which thousands of people pass through every day. “As well as requiring detailed information from the relevant organisations about how the technology is used, we will also inspect the system and its operation on-site to assess whether or not it complies with data protection law. “Put simply, any organisations wanting to use facial recognition technology must comply with the law - and they must do so in a fair, transparent and accountable way. They must have documented how and why they believe their use of the technology is legal, proportionate and justified. “We support keeping people safe but new technologies and new uses of sensitive personal data must always be balanced against people’s legal rights.”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>After the High Court ruled in September that the <a href=\"https://www.bbc.co.uk/news/uk-wales-50251643\">South Wales Police had&nbsp;acted lawfully when a shopper complained&nbsp;his human rights</a> were breached when he was photographed, civil rights group Liberty said it was akin to the unregulated taking of DNA or fingerprints without consent, and  is campaigning for an outright ban of the practice. <a href=\"https://www.theguardian.com/technology/2019/jun/07/facial-recognition-technology-liberty-says-england-wales-police-use-should-be-banned\">Facial Recognition is Arsenic in Water of Democracy </a>said Liberty. Martha Spurrier, a human rights lawyer, said the technology had such fundamental problems that, despite police enthusiasm for the equipment, its use on the streets should not be permitted.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham said the use of facial recognition tools represents a \"step change\" in policing techniques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An investigation by commissioner Elizabeth Denham has raised \"serious concerns\" over use of the technology.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ms Denham called on the government to introduce a statutory code of practice.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several <a href=\"https://www.bitsoffreedom.nl\">civil liberties </a>organisations<a href=\"https://www.bitsoffreedom.nl\">,</a>&nbsp;such&nbsp;as&nbsp;the&nbsp;<a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">Electronic&nbsp;Frontier&nbsp;Foundation,</a><a href=\"https://epic.org/banfacesurveillance/\">&nbsp;EPIC</a> or <a href=\"https://edri.org/facial-recognition-and-fundamental-rights-101/\">EDRI </a> have expressed concerns. As the CNIL pointed out, facial recognition has the potential to become a particularly ubiquitous and intrusive tool. <a href=\"https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance\">https://www.eff.org/deeplinks/2019/12/year-fight-against-government-face-surveillance</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The use of FR in Hong Kong and London Kings Cross has been seen as <a href=\"https://www.dezeen.com/2019/10/09/facial-recognition-hong-kong-threat/\">\"a fundamental threat to society\"</a> says Owen&nbsp;Hopkins.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The European Data Protection Supervisor, Wojciech Wiewiórowski, questioned: <a href=\"https://edps.europa.eu/press-publications/press-news/blog/facial-recognition-solution-search-problem_en\">Facial recognition A solution in search of a problem?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Based on a probability rather than on the absolute certainty of a match between the faces being compared and the baseline \"template\". Variations in performance can therefore have far-reaching consequences for individuals who are mis-identified. Over-reliance on technology can result on serious mis-judgements. The lack of accuracy has serious consequences for individuals being falsely identified whether as criminals or otherwise. Its <a href=\"http://www.pearltrees.com/privacyday/fr-low-accuracy/id28244035\">accuracy has been challenged</a> by several researchers. &nbsp;They are serious potential <a href=\"https://www.kairos.com/blog/face-off-confronting-bias-in-face-recognition-ai\">dangers associated with current&nbsp;racial biases</a> in face recognition, and misidentification could lead to wrongful conviction, or far worse.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>To resist against the rise of the intrusive technology, designers have created <a href=\"http://www.pearltrees.com/privacyday/design-products-combat-fr/id28968440\">clothing and accessories that helps to conceal people\'s identities from A.I.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Whatever the EU decide or regulate, <a href=\"http://www.pearltrees.com/privacyday/fr-china/id28248155\">the technology comes from China</a>&nbsp;or&nbsp;the&nbsp;US where <a href=\"https://threatpost.com/amazon-ring-facial-recognition-watch-list/150681/\">Amazon Plans Ring Facial Recognition-Based ‘Watch List’, Report</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nytimes.com/interactive/2019/10/11/technology/flickr-facial-recognition.html\">This article </a>by the privacy expert journalist Kashmir Hill is thought provoking on the use of children\'s pictures posted by parents online on website such as Flickr. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Thiis a technology with many caveats and a major societal impacts. You are invited to read more <a href=\"http://www.pearltrees.com/privacyday/facial-recognition/id23427152\">HERE</a> from various sources to make your own opinion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->','Facial Recognition technologies','','inherit','closed','closed','','532-revision-v1','','','2020-01-20 11:55:07','2020-01-20 11:55:07','',532,'https://datarainbow.eu/2020/01/20/532-revision-v1/',0,'revision','',0),(564,5,'2020-03-02 14:57:15','2020-03-02 14:57:15','<!-- wp:heading {\"level\":4} -->\n<h4><a href=\"https://ai-regulation.com/first-decision-ever-of-a-french-court-applying-gdpr-to-facial-recognition/\">FIRST EVER DECISION OF A FRENCH COURT APPLYING GDPR TO FACIAL RECOGNITION</a></h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>In a ruling on 27th of February, a French court canceled a decision by the South-Est Region of France (Provence-Alpes-Côte d’Azur – PACA) to undertake a series of tests using facial recognition at the entrance of two High schools considering that this would be illegal. This has been a well noticed decision  of the French Court applying the General Data Protection Regulation (GDPR) on Facial Recognition Technologies (FRTs).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A great win for « La Quadrature du Net », la Ligue des droits de l’Homme, parent association of state schools of Alpes-Maritimes et CGT Union Educ’Action of Alpes-Maritimes,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following previous recommendations by the <a href=\"https://www.cnil.fr/fr/reconnaissance-faciale-pour-un-debat-la-hauteur-des-enjeux\">CNIL</a>, the Administratif court ruled that the processing of biometric data are subject to strict conditions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The local region of  Provence-Alpes-Côte d’Azur had set a tripartite agreement for a trial with schools and Cisco International Limited  to install<br>access control, facial recognition and tracking in three high schools.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial recognition data processing relate to biometrics, special category data under the General Data Protection Regulation. As such their processing is in principal prohibited. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9 lists the conditions for processing special category data:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(a) Explicit consent<br>(b) Employment, social security and social protection (if authorised by law)<br>(c) Vital interests<br>(d) Not-for-profit bodies<br>(e) Made public by the data subject<br>(f) Legal claims or judicial acts<br>(g) Reasons of substantial public interest (with a basis in law)<br>(h) Health or social care (with a basis in law)<br>(i) Public health (with a basis in law)<br>(j) Archiving, research and statistics (with a basis in law)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The municipality had based its ground of processing on student\'s consents and for minors, their parents\'s consent collected on a signed form. The court objected against the legality of this project based on the imbalance of power.   </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9(2)(a) permits to process special category if:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“the data subject has given <strong>explicit consent</strong> to the processing of those personal data for one or more specified purposes”.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In order to be valid, explicit consent must be <strong>freely given, specific, affirmative (opt-in) and unambiguous</strong>, and able to be withdrawn at any time. In practice, the extra requirements for consent to be ‘explicit’ are likely to be:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>explicit consent must be confirmed in a clear statement (whether oral or written), rather than by any other type of affirmative action;</li><li>it must specify the nature of the special category data; and</li><li>it should be separate from any other consents.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>It must be made sure that a <strong>genuine choice</strong> over whether and how you use their data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In particular, if consent is required as a condition of  access to services, or wherever there is a position of power over the individual,  such as a public authority or their employer, consent cannot be freely given and deemed to be invalid.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In a context of a consent required by a local authority from students, without allowing any alternative, knowing the imbalance of power, it is with no surprise that the Administratif court has invalidated the facial recognition monitoring in school.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is unreasonable to believe ALL students, present and future, would freely consent to have their biometrics processed, without alternative. Additionally, are concerned all staff and visitors, including minors.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Convinced by the imbalance of powers, the Court then argued the lack of proportionality, ruling the security aim could be reached in a less intrusive manner with student badges. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the <a href=\"https://www.bfmtv.com/tech/reconnaissance-faciale-dans-les-lycees-un-dispositif-juge-disproportionne-1795950.html\">CNIL</a> opinion, the court ruled that facial recognition is a disproportionate measure to manage the access to school, especially since alternative measures could reach the same result in a less intrusive manner. Student badges. are much less detrimental to rights exist to do this. On this subject,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Another case will be heard on Monday, March 2, 2020 at the Marseille administrative court. An appeal filed with the Ligue des Droits Humains against automated video surveillance (which identifies among other things \"suspicious behavior\" of  individuals on the public highway.<br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have warned previously against <a href=\"https://datarainbow.eu/2020/01/17/facial-recognition-technologies/\">the issue of biometrics data processing in surveillance </a>and the inherent security issues of a <a href=\"https://edition.cnn.com/2020/02/10/tech/clearview-ai-ceo-hoan-ton-that/index.html\">data thirsty technology</a>. Every data base creates risks of data leak. Clearview data base has since revealed a major leak.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.bloomberglaw.com/privacy-and-data-security/clearview-ai-faces-california-illinois-lawsuit-after-breach\">Clearview AI Faces California, Illinois Lawsuit After Breach (1).</a> The question will remain how to monetise the compensation resulting from the harm caused by the loss of control over something as unique as biometrics. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'Clearview AI, a&nbsp;<a href=\"https://www.cnet.com/news/clearview-app-lets-strangers-find-your-name-info-with-snap-of-a-photo-report-says/\">controversial facial recognition app</a>&nbsp;being used by US law enforcement to identify suspects and other people, is facing&nbsp;<a href=\"https://www.cnet.com/news/clearview-ai-faces-lawsuit-following-facial-recognition-privacy-concerns/\">another lawsuit</a>. The new suit, filed Thursday, seeks class-action status and $5 million in damages for what it calls&nbsp;<a rel=\"noreferrer noopener\" href=\"https://twitter.com/RMac18/status/1228097214578225153\" target=\"_blank\">willful, reckless or negligent violations of biometrics laws in Illinois by Clearview</a>&nbsp;and CDW.\'  in <a href=\"https://www.cnet.com/news/clearview-ai-facial-recognition-company-faces-another-lawsuit/\">CNET</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>New York facial recognition startup&nbsp;</em><a href=\"https://clearview.ai/\"><em>Clearview AI</em></a><em>&nbsp;– which has amassed a huge database of more than three billion images scraped from employment sites, news sites, educational sites, and social networks including Facebook, YouTube, Twitter, Instagram and Venmo – is being sued in a potential class action lawsuit that claims the company gobbled up photos out of “pure greed” to sell to law enforcement.</em>\' writes <a href=\"https://nakedsecurity.sophos.com/2020/01/28/facial-recognition-firm-sued-for-scraping-3-billion-faceprints/\">Lisa Vaas in Naked Security</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://theconversation.com/facial-recognition-is-spreading-faster-than-you-realise-132047\">Facial recognition is spreading faster than you&nbsp;realise.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/algorithmwatch.org\\/en\\/story\\/face-recognition-police-europe\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"algorithmwatch\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-algorithmwatch\"><div class=\"wp-block-embed__wrapper\">\nhttps://algorithmwatch.org/en/story/face-recognition-police-europe/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/www.neweurope.eu\\/article\\/facial-recognition-technology-breaches-gdpr-says-vestager\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"new-europe\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-new-europe\"><div class=\"wp-block-embed__wrapper\">\nhttps://www.neweurope.eu/article/facial-recognition-technology-breaches-gdpr-says-vestager/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is 81% inaccurate and could be illegal.\" -<a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\"> Sky News</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Concerning the processing of biometrics, Susan Brown, Executive Chairwoman and Founder of Zortrex wrote : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Time to wake up!  Data Pipeline - Personalisation Marketing/advertising - taking our identities, the bad actors see this open air gap and taking over the data output and input. Biometrics is not security, your actually giving away your DNA!  If <a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23governments&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">governments&nbsp;</a><a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23companies&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">companies</a> do not start securing identities now, going to be disastrous.  You cannot replace your DNA or your Identity. Every day, mass surveillance, greed, humans are the product, if we do not start securing the future children now and their education and their financial banking, their medical history then everyone may just give up while the world comes to an end. \"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Finally, the UK ICO in his guidance give an example :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>A gym introduces a facial recognition system to allow members access to the facilities. It requires all members to agree to facial recognition as a condition of entry – there is no other way to access the gym. This is not valid consent as the members are not being given a real choice – if they do not consent, they cannot access the gym. Although facial recognition might have some security and convenience benefits, it is not objectively necessary in order to provide access to gym facilities, so consent is not freely given.</p><p>However, if the gym provides an alternative, such as a choice between access via facial recognition and access via a membership card, consent could be considered freely given. The gym could rely on explicit consent for processing the biometric facial scans of the members who indicate that they prefer that option.</p><cite><br></cite></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>Despite that, <a href=\"https://ipvm.com/reports/ico-conference\">UK ICO Approves Unconsented Facial Recognition At Security Conferences</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\">The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is not accurate, and could be illegal.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://onezero.medium.com/this-filter-makes-your-photos-invisible-to-facial-recognition-a26929b5ccf\">This Filter Makes Your Photos Invisible to Facial Recognition.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The European regulatory corpus applicable to facial recognition is composed of:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>2012: Working Party 29,&nbsp;<strong><a href=\"https://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2012/wp193_en.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Opinion 3/2012 on developments in biometric technologies</a></strong></li><li>2016:&nbsp;<strong><a href=\"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016L0680&amp;from=FR\" target=\"_blank\" rel=\"noreferrer noopener\">Directive 2016/680 Data Protection Law Enforcement Directive</a></strong></li><li>2016:&nbsp;<strong><a href=\"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&amp;from=FR\" target=\"_blank\" rel=\"noreferrer noopener\">Regulation 2016/679 General Data Protection Regulation (GDPR)</a></strong></li><li>2019: EU Agency for Fundamental Rights (FRA),&nbsp;<strong><a href=\"https://fra.europa.eu/sites/default/files/fra_uploads/fra-2019-facial-recognition-technology-focus-paper-1_en.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Facial Recognition Technology : fundamental rights considerations in the context of law enforcement</a></strong>.</li><li>2020: European Commission (EC),&nbsp;<strong><a href=\"https://ec.europa.eu/info/sites/info/files/commission-white-paper-artificial-intelligence-feb2020_en.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">White Paper on AI</a></strong></li></ul>\n<!-- /wp:list -->','Court said NO to Facial Recognition Technology','FIRST EVER DECISION OF A FRENCH COURT APPLYING GDPR TO FACIAL RECOGNITION﻿. Facial recognition technology deemed disproportionate measure in schools.','publish','closed','closed','','court-said-no-to-facial-recognition-technology','','\nhttps://ai-regulation.com/first-decision-ever-of-a-french-court-applying-gdpr-to-facial-recognition/','2020-03-06 16:06:04','2020-03-06 16:06:04','',0,'http://datarainbow.eu/?p=564',0,'post','',0),(565,5,'2020-03-02 14:57:15','2020-03-02 14:57:15','<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In ruling on 27th of February, a French court canceled a decision by the South-Est Region of France (Provence-Alpes-Côte d’Azur – PACA) to undertake a series of tests using facial recognition at the entrance of two High schools considering that this would be illegal. This has been a well noticed decision  of the French Court applying the General Data Protection Regulation (GDPR) on Facial Recognition Technologies (FRTs).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A great win for La Quadrature du Net, </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A great win for « La Quadrature du Net », la Ligue des droits de l’Homme, parent association of state schools of Alpes-Maritimes et CGT Union Educ’Action of Alpes-Maritimes,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> Following previous recommendations by the CNIL, the Administratif court ruled that the processing of biometric data are subject to strict conditions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The local region of  Provence-Alpes-Côte d’Azur had set a tripartite agreement for a trial with schools and Cisco International Limited  to install<br>access control, facial recognition and tracking in three high schools.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial recognition data processing relate to biometrics, special category data. As such their processing is in principal prohibited. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9 lists the conditions for processing special category data:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(a) Explicit consent<br>(b) Employment, social security and social protection (if authorised by law)<br>(c) Vital interests<br>(d) Not-for-profit bodies<br>(e) Made public by the data subject<br>(f) Legal claims or judicial acts<br>(g) Reasons of substantial public interest (with a basis in law)<br>(h) Health or social care (with a basis in law)<br>(i) Public health (with a basis in law)<br>(j) Archiving, research and statistics (with a basis in law)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The municipality had based its ground of processing on student\'s consents and for minors, their parents\'s consent collected on a signed form. The court objected against the legality of this project based on the imbalance of power.   </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9(2)(a) permits to process special category if:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“the data subject has given <strong>explicit consent</strong> to the processing of those personal data for one or more specified purposes”.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In order to be valid, explicit consent must be <strong>freely given, specific, affirmative (opt-in) and unambiguous</strong>, and able to be withdrawn at any time. In practice, the extra requirements for consent to be ‘explicit’ are likely to be:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>explicit consent must be confirmed in a clear statement (whether oral or written), rather than by any other type of affirmative action;</li><li>it must specify the nature of the special category data; and</li><li>it should be separate from any other consents.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>It must be made sure that a <strong>genuine choice</strong> over whether and how you use their data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In particular, if consent is required as a condition of  access to services, or wherever there is a position of power over the individual,  such as a public authority or their employer, consent cannot be freely given and deemed to be invalid.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In a context of a consent required by a local authority from students, without alternative, knowing the imbalance of power, it is with no surprise that the Administratif court has invalidated the facial recognition monitoring.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is unreasonable to believe ALL students, present and future, would freely consent to have their biometrics processed, without alternative. Additionally, are concerned all staff and visitors, including minors.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Convinced by the imbalance of powers, the Court then argued the lack of proportionality, ruling the security aim could be reached in a less intrusive manner with student badges. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>the court, following the CNIL opinion, ruled that facial recognition is a disproportionate measure to manage the access to school, especially since alternative measures could reach the sim in a less intrusive manner. Student badges. are much less detrimental to rights exist to do this. On this subject,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Another case will be heard on Monday, March 2, 2020 at the Marseille administrative court. An appeal filed with the Ligue des Droits Humains against automated video surveillance (which identifies among other things \"suspicious behavior\" of  individuals on the public highway.<br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have warned against the issue of biometrics data processing in surveillance and the inherent security issues of a <a href=\"https://edition.cnn.com/2020/02/10/tech/clearview-ai-ceo-hoan-ton-that/index.html\">data thirsty technology</a>. Every data base creates risks of data leak. Clearview data base has since revealed a major leak.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.bloomberglaw.com/privacy-and-data-security/clearview-ai-faces-california-illinois-lawsuit-after-breach\">Clearview AI Faces California, Illinois Lawsuit After Breach (1).</a> The question will remain how to monetise the compensation resulting from the harm caused by the loss of control over something as unique as biometrics. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>New York facial recognition startup </em><a href=\"https://clearview.ai/\"><em>Clearview AI</em></a><em> – which has amassed a huge database of more than three billion images scraped from employment sites, news sites, educational sites, and social networks including Facebook, YouTube, Twitter, Instagram and Venmo – is being sued in a potential class action lawsuit that claims the company gobbled up photos out of “pure greed” to sell to law enforcement.</em>\' writes <a href=\"https://nakedsecurity.sophos.com/2020/01/28/facial-recognition-firm-sued-for-scraping-3-billion-faceprints/\">Lisa Vaas in Naked Security</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://theconversation.com/facial-recognition-is-spreading-faster-than-you-realise-132047\">Facial recognition is spreading faster than you realise.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/www.neweurope.eu\\/article\\/facial-recognition-technology-breaches-gdpr-says-vestager\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"new-europe\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-new-europe\"><div class=\"wp-block-embed__wrapper\">\nhttps://www.neweurope.eu/article/facial-recognition-technology-breaches-gdpr-says-vestager/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/algorithmwatch.org\\/en\\/story\\/face-recognition-police-europe\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"algorithmwatch\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-algorithmwatch\"><div class=\"wp-block-embed__wrapper\">\nhttps://algorithmwatch.org/en/story/face-recognition-police-europe/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>\"The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is 81% inaccurate and could be illegal.\" -<a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\"> Sky News</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Concerning the processing of biometrics, Susan Brown, Executive Chairwoman and Founder of Zortrex wrote : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Time to wake up!  Data Pipeline - Personalisation Marketing/advertising - taking our identities, the bad actors see this open air gap and taking over the data output and input. Biometrics is not security, your actually giving away your DNA!  If <a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23governments&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">governments </a><a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23companies&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">companies</a> do not start securing identities now, going to be disastrous.  You cannot replace your DNA or your Identity. Every day, mass surveillance, greed, humans are the product, if we do not start securing the future children now and their education and their financial banking, their medical history then everyone may just give up while the world comes to an end. \"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Finally, the UK ICO in his guidance give an example :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>A gym introduces a facial recognition system to allow members access to the facilities. It requires all members to agree to facial recognition as a condition of entry – there is no other way to access the gym. This is not valid consent as the members are not being given a real choice – if they do not consent, they cannot access the gym. Although facial recognition might have some security and convenience benefits, it is not objectively necessary in order to provide access to gym facilities, so consent is not freely given.</p><p>However, if the gym provides an alternative, such as a choice between access via facial recognition and access via a membership card, consent could be considered freely given. The gym could rely on explicit consent for processing the biometric facial scans of the members who indicate that they prefer that option.</p><cite><br></cite></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>Despite that, <a href=\"https://ipvm.com/reports/ico-conference\">UK ICO Approves Unconsented Facial Recognition At Security Conferences</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://onezero.medium.com/this-filter-makes-your-photos-invisible-to-facial-recognition-a26929b5ccf\">This Filter Makes Your Photos Invisible to Facial Recognition</a></p>\n<!-- /wp:paragraph -->','Court said NO to Facial Recognition Technology','','inherit','closed','closed','','564-revision-v1','','','2020-03-02 14:57:15','2020-03-02 14:57:15','',564,'https://datarainbow.eu/2020/03/02/564-revision-v1/',0,'revision','',0),(567,5,'2020-03-02 15:06:18','2020-03-02 15:06:18','<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In ruling on 27th of February, a French court canceled a decision by the South-Est Region of France (Provence-Alpes-Côte d’Azur – PACA) to undertake a series of tests using facial recognition at the entrance of two High schools considering that this would be illegal. This has been a well noticed decision  of the French Court applying the General Data Protection Regulation (GDPR) on Facial Recognition Technologies (FRTs).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A great win for La Quadrature du Net, </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A great win for « La Quadrature du Net », la Ligue des droits de l’Homme, parent association of state schools of Alpes-Maritimes et CGT Union Educ’Action of Alpes-Maritimes,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> Following previous recommendations by the CNIL, the Administratif court ruled that the processing of biometric data are subject to strict conditions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The local region of  Provence-Alpes-Côte d’Azur had set a tripartite agreement for a trial with schools and Cisco International Limited  to install<br>access control, facial recognition and tracking in three high schools.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial recognition data processing relate to biometrics, special category data. As such their processing is in principal prohibited. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9 lists the conditions for processing special category data:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(a) Explicit consent<br>(b) Employment, social security and social protection (if authorised by law)<br>(c) Vital interests<br>(d) Not-for-profit bodies<br>(e) Made public by the data subject<br>(f) Legal claims or judicial acts<br>(g) Reasons of substantial public interest (with a basis in law)<br>(h) Health or social care (with a basis in law)<br>(i) Public health (with a basis in law)<br>(j) Archiving, research and statistics (with a basis in law)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The municipality had based its ground of processing on student\'s consents and for minors, their parents\'s consent collected on a signed form. The court objected against the legality of this project based on the imbalance of power.   </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9(2)(a) permits to process special category if:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“the data subject has given <strong>explicit consent</strong> to the processing of those personal data for one or more specified purposes”.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In order to be valid, explicit consent must be <strong>freely given, specific, affirmative (opt-in) and unambiguous</strong>, and able to be withdrawn at any time. In practice, the extra requirements for consent to be ‘explicit’ are likely to be:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>explicit consent must be confirmed in a clear statement (whether oral or written), rather than by any other type of affirmative action;</li><li>it must specify the nature of the special category data; and</li><li>it should be separate from any other consents.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>It must be made sure that a <strong>genuine choice</strong> over whether and how you use their data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In particular, if consent is required as a condition of  access to services, or wherever there is a position of power over the individual,  such as a public authority or their employer, consent cannot be freely given and deemed to be invalid.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In a context of a consent required by a local authority from students, without alternative, knowing the imbalance of power, it is with no surprise that the Administratif court has invalidated the facial recognition monitoring.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is unreasonable to believe ALL students, present and future, would freely consent to have their biometrics processed, without alternative. Additionally, are concerned all staff and visitors, including minors.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Convinced by the imbalance of powers, the Court then argued the lack of proportionality, ruling the security aim could be reached in a less intrusive manner with student badges. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>the court, following the CNIL opinion, ruled that facial recognition is a disproportionate measure to manage the access to school, especially since alternative measures could reach the sim in a less intrusive manner. Student badges. are much less detrimental to rights exist to do this. On this subject,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Another case will be heard on Monday, March 2, 2020 at the Marseille administrative court. An appeal filed with the Ligue des Droits Humains against automated video surveillance (which identifies among other things \"suspicious behavior\" of  individuals on the public highway.<br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have warned against the issue of biometrics data processing in surveillance and the inherent security issues of a <a href=\"https://edition.cnn.com/2020/02/10/tech/clearview-ai-ceo-hoan-ton-that/index.html\">data thirsty technology</a>. Every data base creates risks of data leak. Clearview data base has since revealed a major leak.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.bloomberglaw.com/privacy-and-data-security/clearview-ai-faces-california-illinois-lawsuit-after-breach\">Clearview AI Faces California, Illinois Lawsuit After Breach (1).</a> The question will remain how to monetise the compensation resulting from the harm caused by the loss of control over something as unique as biometrics. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'Clearview AI, a <a href=\"https://www.cnet.com/news/clearview-app-lets-strangers-find-your-name-info-with-snap-of-a-photo-report-says/\">controversial facial recognition app</a> being used by US law enforcement to identify suspects and other people, is facing <a href=\"https://www.cnet.com/news/clearview-ai-faces-lawsuit-following-facial-recognition-privacy-concerns/\">another lawsuit</a>. The new suit, filed Thursday, seeks class-action status and $5 million in damages for what it calls <a rel=\"noreferrer noopener\" href=\"https://twitter.com/RMac18/status/1228097214578225153\" target=\"_blank\">willful, reckless or negligent violations of biometrics laws in Illinois by Clearview</a> and CDW.\'  in <a href=\"https://www.cnet.com/news/clearview-ai-facial-recognition-company-faces-another-lawsuit/\">CNET</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>New York facial recognition startup&nbsp;</em><a href=\"https://clearview.ai/\"><em>Clearview AI</em></a><em>&nbsp;– which has amassed a huge database of more than three billion images scraped from employment sites, news sites, educational sites, and social networks including Facebook, YouTube, Twitter, Instagram and Venmo – is being sued in a potential class action lawsuit that claims the company gobbled up photos out of “pure greed” to sell to law enforcement.</em>\' writes <a href=\"https://nakedsecurity.sophos.com/2020/01/28/facial-recognition-firm-sued-for-scraping-3-billion-faceprints/\">Lisa Vaas in Naked Security</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://theconversation.com/facial-recognition-is-spreading-faster-than-you-realise-132047\">Facial recognition is spreading faster than you&nbsp;realise.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/algorithmwatch.org\\/en\\/story\\/face-recognition-police-europe\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"algorithmwatch\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-algorithmwatch\"><div class=\"wp-block-embed__wrapper\">\nhttps://algorithmwatch.org/en/story/face-recognition-police-europe/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/www.neweurope.eu\\/article\\/facial-recognition-technology-breaches-gdpr-says-vestager\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"new-europe\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-new-europe\"><div class=\"wp-block-embed__wrapper\">\nhttps://www.neweurope.eu/article/facial-recognition-technology-breaches-gdpr-says-vestager/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is 81% inaccurate and could be illegal.\" -<a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\"> Sky News</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Concerning the processing of biometrics, Susan Brown, Executive Chairwoman and Founder of Zortrex wrote : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Time to wake up!  Data Pipeline - Personalisation Marketing/advertising - taking our identities, the bad actors see this open air gap and taking over the data output and input. Biometrics is not security, your actually giving away your DNA!  If <a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23governments&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">governments&nbsp;</a><a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23companies&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">companies</a> do not start securing identities now, going to be disastrous.  You cannot replace your DNA or your Identity. Every day, mass surveillance, greed, humans are the product, if we do not start securing the future children now and their education and their financial banking, their medical history then everyone may just give up while the world comes to an end. \"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Finally, the UK ICO in his guidance give an example :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>A gym introduces a facial recognition system to allow members access to the facilities. It requires all members to agree to facial recognition as a condition of entry – there is no other way to access the gym. This is not valid consent as the members are not being given a real choice – if they do not consent, they cannot access the gym. Although facial recognition might have some security and convenience benefits, it is not objectively necessary in order to provide access to gym facilities, so consent is not freely given.</p><p>However, if the gym provides an alternative, such as a choice between access via facial recognition and access via a membership card, consent could be considered freely given. The gym could rely on explicit consent for processing the biometric facial scans of the members who indicate that they prefer that option.</p><cite><br></cite></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>Despite that, <a href=\"https://ipvm.com/reports/ico-conference\">UK ICO Approves Unconsented Facial Recognition At Security Conferences</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\">The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is not accurate, and could be illegal.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://onezero.medium.com/this-filter-makes-your-photos-invisible-to-facial-recognition-a26929b5ccf\">This Filter Makes Your Photos Invisible to Facial Recognition.</a></p>\n<!-- /wp:paragraph -->','Court said NO to Facial Recognition Technology','','inherit','closed','closed','','564-revision-v1','','','2020-03-02 15:06:18','2020-03-02 15:06:18','',564,'https://datarainbow.eu/2020/03/02/564-revision-v1/',0,'revision','',0),(569,5,'2020-03-02 15:11:56','2020-03-02 15:11:56','<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In ruling on 27th of February, a French court canceled a decision by the South-Est Region of France (Provence-Alpes-Côte d’Azur – PACA) to undertake a series of tests using facial recognition at the entrance of two High schools considering that this would be illegal. This has been a well noticed decision  of the French Court applying the General Data Protection Regulation (GDPR) on Facial Recognition Technologies (FRTs).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A great win for La Quadrature du Net, </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A great win for « La Quadrature du Net », la Ligue des droits de l’Homme, parent association of state schools of Alpes-Maritimes et CGT Union Educ’Action of Alpes-Maritimes,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> Following previous recommendations by the CNIL, the Administratif court ruled that the processing of biometric data are subject to strict conditions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The local region of  Provence-Alpes-Côte d’Azur had set a tripartite agreement for a trial with schools and Cisco International Limited  to install<br>access control, facial recognition and tracking in three high schools.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial recognition data processing relate to biometrics, special category data. As such their processing is in principal prohibited. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9 lists the conditions for processing special category data:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(a) Explicit consent<br>(b) Employment, social security and social protection (if authorised by law)<br>(c) Vital interests<br>(d) Not-for-profit bodies<br>(e) Made public by the data subject<br>(f) Legal claims or judicial acts<br>(g) Reasons of substantial public interest (with a basis in law)<br>(h) Health or social care (with a basis in law)<br>(i) Public health (with a basis in law)<br>(j) Archiving, research and statistics (with a basis in law)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The municipality had based its ground of processing on student\'s consents and for minors, their parents\'s consent collected on a signed form. The court objected against the legality of this project based on the imbalance of power.   </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9(2)(a) permits to process special category if:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“the data subject has given <strong>explicit consent</strong> to the processing of those personal data for one or more specified purposes”.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In order to be valid, explicit consent must be <strong>freely given, specific, affirmative (opt-in) and unambiguous</strong>, and able to be withdrawn at any time. In practice, the extra requirements for consent to be ‘explicit’ are likely to be:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>explicit consent must be confirmed in a clear statement (whether oral or written), rather than by any other type of affirmative action;</li><li>it must specify the nature of the special category data; and</li><li>it should be separate from any other consents.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>It must be made sure that a <strong>genuine choice</strong> over whether and how you use their data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In particular, if consent is required as a condition of  access to services, or wherever there is a position of power over the individual,  such as a public authority or their employer, consent cannot be freely given and deemed to be invalid.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In a context of a consent required by a local authority from students, without alternative, knowing the imbalance of power, it is with no surprise that the Administratif court has invalidated the facial recognition monitoring.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is unreasonable to believe ALL students, present and future, would freely consent to have their biometrics processed, without alternative. Additionally, are concerned all staff and visitors, including minors.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Convinced by the imbalance of powers, the Court then argued the lack of proportionality, ruling the security aim could be reached in a less intrusive manner with student badges. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>the court, following the CNIL opinion, ruled that facial recognition is a disproportionate measure to manage the access to school, especially since alternative measures could reach the sim in a less intrusive manner. Student badges. are much less detrimental to rights exist to do this. On this subject,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Another case will be heard on Monday, March 2, 2020 at the Marseille administrative court. An appeal filed with the Ligue des Droits Humains against automated video surveillance (which identifies among other things \"suspicious behavior\" of  individuals on the public highway.<br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have warned against the issue of biometrics data processing in surveillance and the inherent security issues of a <a href=\"https://edition.cnn.com/2020/02/10/tech/clearview-ai-ceo-hoan-ton-that/index.html\">data thirsty technology</a>. Every data base creates risks of data leak. Clearview data base has since revealed a major leak.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.bloomberglaw.com/privacy-and-data-security/clearview-ai-faces-california-illinois-lawsuit-after-breach\">Clearview AI Faces California, Illinois Lawsuit After Breach (1).</a> The question will remain how to monetise the compensation resulting from the harm caused by the loss of control over something as unique as biometrics. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'Clearview AI, a&nbsp;<a href=\"https://www.cnet.com/news/clearview-app-lets-strangers-find-your-name-info-with-snap-of-a-photo-report-says/\">controversial facial recognition app</a>&nbsp;being used by US law enforcement to identify suspects and other people, is facing&nbsp;<a href=\"https://www.cnet.com/news/clearview-ai-faces-lawsuit-following-facial-recognition-privacy-concerns/\">another lawsuit</a>. The new suit, filed Thursday, seeks class-action status and $5 million in damages for what it calls&nbsp;<a rel=\"noreferrer noopener\" href=\"https://twitter.com/RMac18/status/1228097214578225153\" target=\"_blank\">willful, reckless or negligent violations of biometrics laws in Illinois by Clearview</a>&nbsp;and CDW.\'  in <a href=\"https://www.cnet.com/news/clearview-ai-facial-recognition-company-faces-another-lawsuit/\">CNET</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>New York facial recognition startup&nbsp;</em><a href=\"https://clearview.ai/\"><em>Clearview AI</em></a><em>&nbsp;– which has amassed a huge database of more than three billion images scraped from employment sites, news sites, educational sites, and social networks including Facebook, YouTube, Twitter, Instagram and Venmo – is being sued in a potential class action lawsuit that claims the company gobbled up photos out of “pure greed” to sell to law enforcement.</em>\' writes <a href=\"https://nakedsecurity.sophos.com/2020/01/28/facial-recognition-firm-sued-for-scraping-3-billion-faceprints/\">Lisa Vaas in Naked Security</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://theconversation.com/facial-recognition-is-spreading-faster-than-you-realise-132047\">Facial recognition is spreading faster than you&nbsp;realise.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/algorithmwatch.org\\/en\\/story\\/face-recognition-police-europe\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"algorithmwatch\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-algorithmwatch\"><div class=\"wp-block-embed__wrapper\">\nhttps://algorithmwatch.org/en/story/face-recognition-police-europe/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/www.neweurope.eu\\/article\\/facial-recognition-technology-breaches-gdpr-says-vestager\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"new-europe\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-new-europe\"><div class=\"wp-block-embed__wrapper\">\nhttps://www.neweurope.eu/article/facial-recognition-technology-breaches-gdpr-says-vestager/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is 81% inaccurate and could be illegal.\" -<a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\"> Sky News</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Concerning the processing of biometrics, Susan Brown, Executive Chairwoman and Founder of Zortrex wrote : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Time to wake up!  Data Pipeline - Personalisation Marketing/advertising - taking our identities, the bad actors see this open air gap and taking over the data output and input. Biometrics is not security, your actually giving away your DNA!  If <a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23governments&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">governments&nbsp;</a><a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23companies&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">companies</a> do not start securing identities now, going to be disastrous.  You cannot replace your DNA or your Identity. Every day, mass surveillance, greed, humans are the product, if we do not start securing the future children now and their education and their financial banking, their medical history then everyone may just give up while the world comes to an end. \"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Finally, the UK ICO in his guidance give an example :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>A gym introduces a facial recognition system to allow members access to the facilities. It requires all members to agree to facial recognition as a condition of entry – there is no other way to access the gym. This is not valid consent as the members are not being given a real choice – if they do not consent, they cannot access the gym. Although facial recognition might have some security and convenience benefits, it is not objectively necessary in order to provide access to gym facilities, so consent is not freely given.</p><p>However, if the gym provides an alternative, such as a choice between access via facial recognition and access via a membership card, consent could be considered freely given. The gym could rely on explicit consent for processing the biometric facial scans of the members who indicate that they prefer that option.</p><cite><br></cite></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>Despite that, <a href=\"https://ipvm.com/reports/ico-conference\">UK ICO Approves Unconsented Facial Recognition At Security Conferences</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\">The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is not accurate, and could be illegal.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://onezero.medium.com/this-filter-makes-your-photos-invisible-to-facial-recognition-a26929b5ccf\">This Filter Makes Your Photos Invisible to Facial Recognition.</a></p>\n<!-- /wp:paragraph -->','Court said NO to Facial Recognition Technology','','inherit','closed','closed','','564-revision-v1','','','2020-03-02 15:11:56','2020-03-02 15:11:56','',564,'https://datarainbow.eu/2020/03/02/564-revision-v1/',0,'revision','',0),(571,5,'2020-03-02 15:16:07','2020-03-02 15:16:07','<!-- wp:heading {\"level\":4} -->\n<h4><a href=\"https://ai-regulation.com/first-decision-ever-of-a-french-court-applying-gdpr-to-facial-recognition/\">FIRST EVER DECISION OF A FRENCH COURT APPLYING GDPR TO FACIAL RECOGNITION</a></h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>In ruling on 27th of February, a French court canceled a decision by the South-Est Region of France (Provence-Alpes-Côte d’Azur – PACA) to undertake a series of tests using facial recognition at the entrance of two High schools considering that this would be illegal. This has been a well noticed decision  of the French Court applying the General Data Protection Regulation (GDPR) on Facial Recognition Technologies (FRTs).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A great win for La Quadrature du Net, </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A great win for « La Quadrature du Net », la Ligue des droits de l’Homme, parent association of state schools of Alpes-Maritimes et CGT Union Educ’Action of Alpes-Maritimes,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> Following previous recommendations by the CNIL, the Administratif court ruled that the processing of biometric data are subject to strict conditions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The local region of  Provence-Alpes-Côte d’Azur had set a tripartite agreement for a trial with schools and Cisco International Limited  to install<br>access control, facial recognition and tracking in three high schools.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial recognition data processing relate to biometrics, special category data. As such their processing is in principal prohibited. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9 lists the conditions for processing special category data:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(a) Explicit consent<br>(b) Employment, social security and social protection (if authorised by law)<br>(c) Vital interests<br>(d) Not-for-profit bodies<br>(e) Made public by the data subject<br>(f) Legal claims or judicial acts<br>(g) Reasons of substantial public interest (with a basis in law)<br>(h) Health or social care (with a basis in law)<br>(i) Public health (with a basis in law)<br>(j) Archiving, research and statistics (with a basis in law)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The municipality had based its ground of processing on student\'s consents and for minors, their parents\'s consent collected on a signed form. The court objected against the legality of this project based on the imbalance of power.   </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9(2)(a) permits to process special category if:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“the data subject has given <strong>explicit consent</strong> to the processing of those personal data for one or more specified purposes”.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In order to be valid, explicit consent must be <strong>freely given, specific, affirmative (opt-in) and unambiguous</strong>, and able to be withdrawn at any time. In practice, the extra requirements for consent to be ‘explicit’ are likely to be:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>explicit consent must be confirmed in a clear statement (whether oral or written), rather than by any other type of affirmative action;</li><li>it must specify the nature of the special category data; and</li><li>it should be separate from any other consents.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>It must be made sure that a <strong>genuine choice</strong> over whether and how you use their data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In particular, if consent is required as a condition of  access to services, or wherever there is a position of power over the individual,  such as a public authority or their employer, consent cannot be freely given and deemed to be invalid.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In a context of a consent required by a local authority from students, without alternative, knowing the imbalance of power, it is with no surprise that the Administratif court has invalidated the facial recognition monitoring.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is unreasonable to believe ALL students, present and future, would freely consent to have their biometrics processed, without alternative. Additionally, are concerned all staff and visitors, including minors.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Convinced by the imbalance of powers, the Court then argued the lack of proportionality, ruling the security aim could be reached in a less intrusive manner with student badges. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>the court, following the CNIL opinion, ruled that facial recognition is a disproportionate measure to manage the access to school, especially since alternative measures could reach the sim in a less intrusive manner. Student badges. are much less detrimental to rights exist to do this. On this subject,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Another case will be heard on Monday, March 2, 2020 at the Marseille administrative court. An appeal filed with the Ligue des Droits Humains against automated video surveillance (which identifies among other things \"suspicious behavior\" of  individuals on the public highway.<br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have warned against the issue of biometrics data processing in surveillance and the inherent security issues of a <a href=\"https://edition.cnn.com/2020/02/10/tech/clearview-ai-ceo-hoan-ton-that/index.html\">data thirsty technology</a>. Every data base creates risks of data leak. Clearview data base has since revealed a major leak.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.bloomberglaw.com/privacy-and-data-security/clearview-ai-faces-california-illinois-lawsuit-after-breach\">Clearview AI Faces California, Illinois Lawsuit After Breach (1).</a> The question will remain how to monetise the compensation resulting from the harm caused by the loss of control over something as unique as biometrics. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'Clearview AI, a&nbsp;<a href=\"https://www.cnet.com/news/clearview-app-lets-strangers-find-your-name-info-with-snap-of-a-photo-report-says/\">controversial facial recognition app</a>&nbsp;being used by US law enforcement to identify suspects and other people, is facing&nbsp;<a href=\"https://www.cnet.com/news/clearview-ai-faces-lawsuit-following-facial-recognition-privacy-concerns/\">another lawsuit</a>. The new suit, filed Thursday, seeks class-action status and $5 million in damages for what it calls&nbsp;<a rel=\"noreferrer noopener\" href=\"https://twitter.com/RMac18/status/1228097214578225153\" target=\"_blank\">willful, reckless or negligent violations of biometrics laws in Illinois by Clearview</a>&nbsp;and CDW.\'  in <a href=\"https://www.cnet.com/news/clearview-ai-facial-recognition-company-faces-another-lawsuit/\">CNET</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>New York facial recognition startup&nbsp;</em><a href=\"https://clearview.ai/\"><em>Clearview AI</em></a><em>&nbsp;– which has amassed a huge database of more than three billion images scraped from employment sites, news sites, educational sites, and social networks including Facebook, YouTube, Twitter, Instagram and Venmo – is being sued in a potential class action lawsuit that claims the company gobbled up photos out of “pure greed” to sell to law enforcement.</em>\' writes <a href=\"https://nakedsecurity.sophos.com/2020/01/28/facial-recognition-firm-sued-for-scraping-3-billion-faceprints/\">Lisa Vaas in Naked Security</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://theconversation.com/facial-recognition-is-spreading-faster-than-you-realise-132047\">Facial recognition is spreading faster than you&nbsp;realise.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/algorithmwatch.org\\/en\\/story\\/face-recognition-police-europe\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"algorithmwatch\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-algorithmwatch\"><div class=\"wp-block-embed__wrapper\">\nhttps://algorithmwatch.org/en/story/face-recognition-police-europe/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/www.neweurope.eu\\/article\\/facial-recognition-technology-breaches-gdpr-says-vestager\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"new-europe\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-new-europe\"><div class=\"wp-block-embed__wrapper\">\nhttps://www.neweurope.eu/article/facial-recognition-technology-breaches-gdpr-says-vestager/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is 81% inaccurate and could be illegal.\" -<a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\"> Sky News</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Concerning the processing of biometrics, Susan Brown, Executive Chairwoman and Founder of Zortrex wrote : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Time to wake up!  Data Pipeline - Personalisation Marketing/advertising - taking our identities, the bad actors see this open air gap and taking over the data output and input. Biometrics is not security, your actually giving away your DNA!  If <a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23governments&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">governments&nbsp;</a><a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23companies&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">companies</a> do not start securing identities now, going to be disastrous.  You cannot replace your DNA or your Identity. Every day, mass surveillance, greed, humans are the product, if we do not start securing the future children now and their education and their financial banking, their medical history then everyone may just give up while the world comes to an end. \"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Finally, the UK ICO in his guidance give an example :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>A gym introduces a facial recognition system to allow members access to the facilities. It requires all members to agree to facial recognition as a condition of entry – there is no other way to access the gym. This is not valid consent as the members are not being given a real choice – if they do not consent, they cannot access the gym. Although facial recognition might have some security and convenience benefits, it is not objectively necessary in order to provide access to gym facilities, so consent is not freely given.</p><p>However, if the gym provides an alternative, such as a choice between access via facial recognition and access via a membership card, consent could be considered freely given. The gym could rely on explicit consent for processing the biometric facial scans of the members who indicate that they prefer that option.</p><cite><br></cite></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>Despite that, <a href=\"https://ipvm.com/reports/ico-conference\">UK ICO Approves Unconsented Facial Recognition At Security Conferences</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\">The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is not accurate, and could be illegal.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://onezero.medium.com/this-filter-makes-your-photos-invisible-to-facial-recognition-a26929b5ccf\">This Filter Makes Your Photos Invisible to Facial Recognition.</a></p>\n<!-- /wp:paragraph -->','Court said NO to Facial Recognition Technology','','inherit','closed','closed','','564-revision-v1','','','2020-03-02 15:16:07','2020-03-02 15:16:07','',564,'https://datarainbow.eu/2020/03/02/564-revision-v1/',0,'revision','',0),(573,5,'2020-03-02 15:20:37','2020-03-02 15:20:37','<!-- wp:heading {\"level\":4} -->\n<h4><a href=\"https://ai-regulation.com/first-decision-ever-of-a-french-court-applying-gdpr-to-facial-recognition/\">FIRST EVER DECISION OF A FRENCH COURT APPLYING GDPR TO FACIAL RECOGNITION</a></h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>In a ruling on 27th of February, a French court canceled a decision by the South-Est Region of France (Provence-Alpes-Côte d’Azur – PACA) to undertake a series of tests using facial recognition at the entrance of two High schools considering that this would be illegal. This has been a well noticed decision  of the French Court applying the General Data Protection Regulation (GDPR) on Facial Recognition Technologies (FRTs).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A great win for « La Quadrature du Net », la Ligue des droits de l’Homme, parent association of state schools of Alpes-Maritimes et CGT Union Educ’Action of Alpes-Maritimes,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following previous recommendations by the CNIL, the Administratif court ruled that the processing of biometric data are subject to strict conditions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The local region of  Provence-Alpes-Côte d’Azur had set a tripartite agreement for a trial with schools and Cisco International Limited  to install<br>access control, facial recognition and tracking in three high schools.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial recognition data processing relate to biometrics, special category data under the General Data Protection Regulation. As such their processing is in principal prohibited. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9 lists the conditions for processing special category data:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(a) Explicit consent<br>(b) Employment, social security and social protection (if authorised by law)<br>(c) Vital interests<br>(d) Not-for-profit bodies<br>(e) Made public by the data subject<br>(f) Legal claims or judicial acts<br>(g) Reasons of substantial public interest (with a basis in law)<br>(h) Health or social care (with a basis in law)<br>(i) Public health (with a basis in law)<br>(j) Archiving, research and statistics (with a basis in law)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The municipality had based its ground of processing on student\'s consents and for minors, their parents\'s consent collected on a signed form. The court objected against the legality of this project based on the imbalance of power.   </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9(2)(a) permits to process special category if:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“the data subject has given <strong>explicit consent</strong> to the processing of those personal data for one or more specified purposes”.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In order to be valid, explicit consent must be <strong>freely given, specific, affirmative (opt-in) and unambiguous</strong>, and able to be withdrawn at any time. In practice, the extra requirements for consent to be ‘explicit’ are likely to be:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>explicit consent must be confirmed in a clear statement (whether oral or written), rather than by any other type of affirmative action;</li><li>it must specify the nature of the special category data; and</li><li>it should be separate from any other consents.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>It must be made sure that a <strong>genuine choice</strong> over whether and how you use their data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In particular, if consent is required as a condition of  access to services, or wherever there is a position of power over the individual,  such as a public authority or their employer, consent cannot be freely given and deemed to be invalid.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In a context of a consent required by a local authority from students, without alternative, knowing the imbalance of power, it is with no surprise that the Administratif court has invalidated the facial recognition monitoring.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is unreasonable to believe ALL students, present and future, would freely consent to have their biometrics processed, without alternative. Additionally, are concerned all staff and visitors, including minors.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Convinced by the imbalance of powers, the Court then argued the lack of proportionality, ruling the security aim could be reached in a less intrusive manner with student badges. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>the court, following the CNIL opinion, ruled that facial recognition is a disproportionate measure to manage the access to school, especially since alternative measures could reach the sim in a less intrusive manner. Student badges. are much less detrimental to rights exist to do this. On this subject,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Another case will be heard on Monday, March 2, 2020 at the Marseille administrative court. An appeal filed with the Ligue des Droits Humains against automated video surveillance (which identifies among other things \"suspicious behavior\" of  individuals on the public highway.<br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have warned against the issue of biometrics data processing in surveillance and the inherent security issues of a <a href=\"https://edition.cnn.com/2020/02/10/tech/clearview-ai-ceo-hoan-ton-that/index.html\">data thirsty technology</a>. Every data base creates risks of data leak. Clearview data base has since revealed a major leak.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.bloomberglaw.com/privacy-and-data-security/clearview-ai-faces-california-illinois-lawsuit-after-breach\">Clearview AI Faces California, Illinois Lawsuit After Breach (1).</a> The question will remain how to monetise the compensation resulting from the harm caused by the loss of control over something as unique as biometrics. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'Clearview AI, a&nbsp;<a href=\"https://www.cnet.com/news/clearview-app-lets-strangers-find-your-name-info-with-snap-of-a-photo-report-says/\">controversial facial recognition app</a>&nbsp;being used by US law enforcement to identify suspects and other people, is facing&nbsp;<a href=\"https://www.cnet.com/news/clearview-ai-faces-lawsuit-following-facial-recognition-privacy-concerns/\">another lawsuit</a>. The new suit, filed Thursday, seeks class-action status and $5 million in damages for what it calls&nbsp;<a rel=\"noreferrer noopener\" href=\"https://twitter.com/RMac18/status/1228097214578225153\" target=\"_blank\">willful, reckless or negligent violations of biometrics laws in Illinois by Clearview</a>&nbsp;and CDW.\'  in <a href=\"https://www.cnet.com/news/clearview-ai-facial-recognition-company-faces-another-lawsuit/\">CNET</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>New York facial recognition startup&nbsp;</em><a href=\"https://clearview.ai/\"><em>Clearview AI</em></a><em>&nbsp;– which has amassed a huge database of more than three billion images scraped from employment sites, news sites, educational sites, and social networks including Facebook, YouTube, Twitter, Instagram and Venmo – is being sued in a potential class action lawsuit that claims the company gobbled up photos out of “pure greed” to sell to law enforcement.</em>\' writes <a href=\"https://nakedsecurity.sophos.com/2020/01/28/facial-recognition-firm-sued-for-scraping-3-billion-faceprints/\">Lisa Vaas in Naked Security</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://theconversation.com/facial-recognition-is-spreading-faster-than-you-realise-132047\">Facial recognition is spreading faster than you&nbsp;realise.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/algorithmwatch.org\\/en\\/story\\/face-recognition-police-europe\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"algorithmwatch\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-algorithmwatch\"><div class=\"wp-block-embed__wrapper\">\nhttps://algorithmwatch.org/en/story/face-recognition-police-europe/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/www.neweurope.eu\\/article\\/facial-recognition-technology-breaches-gdpr-says-vestager\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"new-europe\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-new-europe\"><div class=\"wp-block-embed__wrapper\">\nhttps://www.neweurope.eu/article/facial-recognition-technology-breaches-gdpr-says-vestager/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is 81% inaccurate and could be illegal.\" -<a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\"> Sky News</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Concerning the processing of biometrics, Susan Brown, Executive Chairwoman and Founder of Zortrex wrote : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Time to wake up!  Data Pipeline - Personalisation Marketing/advertising - taking our identities, the bad actors see this open air gap and taking over the data output and input. Biometrics is not security, your actually giving away your DNA!  If <a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23governments&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">governments&nbsp;</a><a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23companies&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">companies</a> do not start securing identities now, going to be disastrous.  You cannot replace your DNA or your Identity. Every day, mass surveillance, greed, humans are the product, if we do not start securing the future children now and their education and their financial banking, their medical history then everyone may just give up while the world comes to an end. \"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Finally, the UK ICO in his guidance give an example :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>A gym introduces a facial recognition system to allow members access to the facilities. It requires all members to agree to facial recognition as a condition of entry – there is no other way to access the gym. This is not valid consent as the members are not being given a real choice – if they do not consent, they cannot access the gym. Although facial recognition might have some security and convenience benefits, it is not objectively necessary in order to provide access to gym facilities, so consent is not freely given.</p><p>However, if the gym provides an alternative, such as a choice between access via facial recognition and access via a membership card, consent could be considered freely given. The gym could rely on explicit consent for processing the biometric facial scans of the members who indicate that they prefer that option.</p><cite><br></cite></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>Despite that, <a href=\"https://ipvm.com/reports/ico-conference\">UK ICO Approves Unconsented Facial Recognition At Security Conferences</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\">The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is not accurate, and could be illegal.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://onezero.medium.com/this-filter-makes-your-photos-invisible-to-facial-recognition-a26929b5ccf\">This Filter Makes Your Photos Invisible to Facial Recognition.</a></p>\n<!-- /wp:paragraph -->','Court said NO to Facial Recognition Technology','','inherit','closed','closed','','564-revision-v1','','','2020-03-02 15:20:37','2020-03-02 15:20:37','',564,'https://datarainbow.eu/2020/03/02/564-revision-v1/',0,'revision','',0),(575,5,'2020-03-02 15:24:30','2020-03-02 15:24:30','<!-- wp:heading {\"level\":4} -->\n<h4><a href=\"https://ai-regulation.com/first-decision-ever-of-a-french-court-applying-gdpr-to-facial-recognition/\">FIRST EVER DECISION OF A FRENCH COURT APPLYING GDPR TO FACIAL RECOGNITION</a></h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>In a ruling on 27th of February, a French court canceled a decision by the South-Est Region of France (Provence-Alpes-Côte d’Azur – PACA) to undertake a series of tests using facial recognition at the entrance of two High schools considering that this would be illegal. This has been a well noticed decision  of the French Court applying the General Data Protection Regulation (GDPR) on Facial Recognition Technologies (FRTs).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A great win for « La Quadrature du Net », la Ligue des droits de l’Homme, parent association of state schools of Alpes-Maritimes et CGT Union Educ’Action of Alpes-Maritimes,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following previous recommendations by the CNIL, the Administratif court ruled that the processing of biometric data are subject to strict conditions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The local region of  Provence-Alpes-Côte d’Azur had set a tripartite agreement for a trial with schools and Cisco International Limited  to install<br>access control, facial recognition and tracking in three high schools.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial recognition data processing relate to biometrics, special category data under the General Data Protection Regulation. As such their processing is in principal prohibited. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9 lists the conditions for processing special category data:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(a) Explicit consent<br>(b) Employment, social security and social protection (if authorised by law)<br>(c) Vital interests<br>(d) Not-for-profit bodies<br>(e) Made public by the data subject<br>(f) Legal claims or judicial acts<br>(g) Reasons of substantial public interest (with a basis in law)<br>(h) Health or social care (with a basis in law)<br>(i) Public health (with a basis in law)<br>(j) Archiving, research and statistics (with a basis in law)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The municipality had based its ground of processing on student\'s consents and for minors, their parents\'s consent collected on a signed form. The court objected against the legality of this project based on the imbalance of power.   </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9(2)(a) permits to process special category if:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“the data subject has given <strong>explicit consent</strong> to the processing of those personal data for one or more specified purposes”.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In order to be valid, explicit consent must be <strong>freely given, specific, affirmative (opt-in) and unambiguous</strong>, and able to be withdrawn at any time. In practice, the extra requirements for consent to be ‘explicit’ are likely to be:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>explicit consent must be confirmed in a clear statement (whether oral or written), rather than by any other type of affirmative action;</li><li>it must specify the nature of the special category data; and</li><li>it should be separate from any other consents.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>It must be made sure that a <strong>genuine choice</strong> over whether and how you use their data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In particular, if consent is required as a condition of  access to services, or wherever there is a position of power over the individual,  such as a public authority or their employer, consent cannot be freely given and deemed to be invalid.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In a context of a consent required by a local authority from students, without allowing any alternative, knowing the imbalance of power, it is with no surprise that the Administratif court has invalidated the facial recognition monitoring in school.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is unreasonable to believe ALL students, present and future, would freely consent to have their biometrics processed, without alternative. Additionally, are concerned all staff and visitors, including minors.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Convinced by the imbalance of powers, the Court then argued the lack of proportionality, ruling the security aim could be reached in a less intrusive manner with student badges. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the CNIL opinion, the court ruled that facial recognition is a disproportionate measure to manage the access to school, especially since alternative measures could reach the same result in a less intrusive manner. Student badges. are much less detrimental to rights exist to do this. On this subject,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Another case will be heard on Monday, March 2, 2020 at the Marseille administrative court. An appeal filed with the Ligue des Droits Humains against automated video surveillance (which identifies among other things \"suspicious behavior\" of  individuals on the public highway.<br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have warned previously against <a href=\"https://datarainbow.eu/2020/01/17/facial-recognition-technologies/\">the issue of biometrics data processing in surveillance </a>and the inherent security issues of a <a href=\"https://edition.cnn.com/2020/02/10/tech/clearview-ai-ceo-hoan-ton-that/index.html\">data thirsty technology</a>. Every data base creates risks of data leak. Clearview data base has since revealed a major leak.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.bloomberglaw.com/privacy-and-data-security/clearview-ai-faces-california-illinois-lawsuit-after-breach\">Clearview AI Faces California, Illinois Lawsuit After Breach (1).</a> The question will remain how to monetise the compensation resulting from the harm caused by the loss of control over something as unique as biometrics. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'Clearview AI, a&nbsp;<a href=\"https://www.cnet.com/news/clearview-app-lets-strangers-find-your-name-info-with-snap-of-a-photo-report-says/\">controversial facial recognition app</a>&nbsp;being used by US law enforcement to identify suspects and other people, is facing&nbsp;<a href=\"https://www.cnet.com/news/clearview-ai-faces-lawsuit-following-facial-recognition-privacy-concerns/\">another lawsuit</a>. The new suit, filed Thursday, seeks class-action status and $5 million in damages for what it calls&nbsp;<a rel=\"noreferrer noopener\" href=\"https://twitter.com/RMac18/status/1228097214578225153\" target=\"_blank\">willful, reckless or negligent violations of biometrics laws in Illinois by Clearview</a>&nbsp;and CDW.\'  in <a href=\"https://www.cnet.com/news/clearview-ai-facial-recognition-company-faces-another-lawsuit/\">CNET</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>New York facial recognition startup&nbsp;</em><a href=\"https://clearview.ai/\"><em>Clearview AI</em></a><em>&nbsp;– which has amassed a huge database of more than three billion images scraped from employment sites, news sites, educational sites, and social networks including Facebook, YouTube, Twitter, Instagram and Venmo – is being sued in a potential class action lawsuit that claims the company gobbled up photos out of “pure greed” to sell to law enforcement.</em>\' writes <a href=\"https://nakedsecurity.sophos.com/2020/01/28/facial-recognition-firm-sued-for-scraping-3-billion-faceprints/\">Lisa Vaas in Naked Security</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://theconversation.com/facial-recognition-is-spreading-faster-than-you-realise-132047\">Facial recognition is spreading faster than you&nbsp;realise.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/algorithmwatch.org\\/en\\/story\\/face-recognition-police-europe\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"algorithmwatch\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-algorithmwatch\"><div class=\"wp-block-embed__wrapper\">\nhttps://algorithmwatch.org/en/story/face-recognition-police-europe/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/www.neweurope.eu\\/article\\/facial-recognition-technology-breaches-gdpr-says-vestager\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"new-europe\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-new-europe\"><div class=\"wp-block-embed__wrapper\">\nhttps://www.neweurope.eu/article/facial-recognition-technology-breaches-gdpr-says-vestager/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is 81% inaccurate and could be illegal.\" -<a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\"> Sky News</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Concerning the processing of biometrics, Susan Brown, Executive Chairwoman and Founder of Zortrex wrote : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Time to wake up!  Data Pipeline - Personalisation Marketing/advertising - taking our identities, the bad actors see this open air gap and taking over the data output and input. Biometrics is not security, your actually giving away your DNA!  If <a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23governments&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">governments&nbsp;</a><a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23companies&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">companies</a> do not start securing identities now, going to be disastrous.  You cannot replace your DNA or your Identity. Every day, mass surveillance, greed, humans are the product, if we do not start securing the future children now and their education and their financial banking, their medical history then everyone may just give up while the world comes to an end. \"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Finally, the UK ICO in his guidance give an example :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>A gym introduces a facial recognition system to allow members access to the facilities. It requires all members to agree to facial recognition as a condition of entry – there is no other way to access the gym. This is not valid consent as the members are not being given a real choice – if they do not consent, they cannot access the gym. Although facial recognition might have some security and convenience benefits, it is not objectively necessary in order to provide access to gym facilities, so consent is not freely given.</p><p>However, if the gym provides an alternative, such as a choice between access via facial recognition and access via a membership card, consent could be considered freely given. The gym could rely on explicit consent for processing the biometric facial scans of the members who indicate that they prefer that option.</p><cite><br></cite></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>Despite that, <a href=\"https://ipvm.com/reports/ico-conference\">UK ICO Approves Unconsented Facial Recognition At Security Conferences</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\">The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is not accurate, and could be illegal.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://onezero.medium.com/this-filter-makes-your-photos-invisible-to-facial-recognition-a26929b5ccf\">This Filter Makes Your Photos Invisible to Facial Recognition.</a></p>\n<!-- /wp:paragraph -->','Court said NO to Facial Recognition Technology','','inherit','closed','closed','','564-revision-v1','','','2020-03-02 15:24:30','2020-03-02 15:24:30','',564,'https://datarainbow.eu/2020/03/02/564-revision-v1/',0,'revision','',0),(577,5,'2020-03-02 15:32:01','2020-03-02 15:32:01','<!-- wp:heading {\"level\":4} -->\n<h4><a href=\"https://ai-regulation.com/first-decision-ever-of-a-french-court-applying-gdpr-to-facial-recognition/\">FIRST EVER DECISION OF A FRENCH COURT APPLYING GDPR TO FACIAL RECOGNITION</a></h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>In a ruling on 27th of February, a French court canceled a decision by the South-Est Region of France (Provence-Alpes-Côte d’Azur – PACA) to undertake a series of tests using facial recognition at the entrance of two High schools considering that this would be illegal. This has been a well noticed decision  of the French Court applying the General Data Protection Regulation (GDPR) on Facial Recognition Technologies (FRTs).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A great win for « La Quadrature du Net », la Ligue des droits de l’Homme, parent association of state schools of Alpes-Maritimes et CGT Union Educ’Action of Alpes-Maritimes,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following previous recommendations by the <a href=\"https://www.cnil.fr/fr/reconnaissance-faciale-pour-un-debat-la-hauteur-des-enjeux\">CNIL</a>, the Administratif court ruled that the processing of biometric data are subject to strict conditions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The local region of  Provence-Alpes-Côte d’Azur had set a tripartite agreement for a trial with schools and Cisco International Limited  to install<br>access control, facial recognition and tracking in three high schools.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial recognition data processing relate to biometrics, special category data under the General Data Protection Regulation. As such their processing is in principal prohibited. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9 lists the conditions for processing special category data:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(a) Explicit consent<br>(b) Employment, social security and social protection (if authorised by law)<br>(c) Vital interests<br>(d) Not-for-profit bodies<br>(e) Made public by the data subject<br>(f) Legal claims or judicial acts<br>(g) Reasons of substantial public interest (with a basis in law)<br>(h) Health or social care (with a basis in law)<br>(i) Public health (with a basis in law)<br>(j) Archiving, research and statistics (with a basis in law)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The municipality had based its ground of processing on student\'s consents and for minors, their parents\'s consent collected on a signed form. The court objected against the legality of this project based on the imbalance of power.   </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9(2)(a) permits to process special category if:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“the data subject has given <strong>explicit consent</strong> to the processing of those personal data for one or more specified purposes”.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In order to be valid, explicit consent must be <strong>freely given, specific, affirmative (opt-in) and unambiguous</strong>, and able to be withdrawn at any time. In practice, the extra requirements for consent to be ‘explicit’ are likely to be:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>explicit consent must be confirmed in a clear statement (whether oral or written), rather than by any other type of affirmative action;</li><li>it must specify the nature of the special category data; and</li><li>it should be separate from any other consents.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>It must be made sure that a <strong>genuine choice</strong> over whether and how you use their data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In particular, if consent is required as a condition of  access to services, or wherever there is a position of power over the individual,  such as a public authority or their employer, consent cannot be freely given and deemed to be invalid.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In a context of a consent required by a local authority from students, without allowing any alternative, knowing the imbalance of power, it is with no surprise that the Administratif court has invalidated the facial recognition monitoring in school.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is unreasonable to believe ALL students, present and future, would freely consent to have their biometrics processed, without alternative. Additionally, are concerned all staff and visitors, including minors.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Convinced by the imbalance of powers, the Court then argued the lack of proportionality, ruling the security aim could be reached in a less intrusive manner with student badges. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the CNIL opinion, the court ruled that facial recognition is a disproportionate measure to manage the access to school, especially since alternative measures could reach the same result in a less intrusive manner. Student badges. are much less detrimental to rights exist to do this. On this subject,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Another case will be heard on Monday, March 2, 2020 at the Marseille administrative court. An appeal filed with the Ligue des Droits Humains against automated video surveillance (which identifies among other things \"suspicious behavior\" of  individuals on the public highway.<br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have warned previously against <a href=\"https://datarainbow.eu/2020/01/17/facial-recognition-technologies/\">the issue of biometrics data processing in surveillance </a>and the inherent security issues of a <a href=\"https://edition.cnn.com/2020/02/10/tech/clearview-ai-ceo-hoan-ton-that/index.html\">data thirsty technology</a>. Every data base creates risks of data leak. Clearview data base has since revealed a major leak.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.bloomberglaw.com/privacy-and-data-security/clearview-ai-faces-california-illinois-lawsuit-after-breach\">Clearview AI Faces California, Illinois Lawsuit After Breach (1).</a> The question will remain how to monetise the compensation resulting from the harm caused by the loss of control over something as unique as biometrics. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'Clearview AI, a&nbsp;<a href=\"https://www.cnet.com/news/clearview-app-lets-strangers-find-your-name-info-with-snap-of-a-photo-report-says/\">controversial facial recognition app</a>&nbsp;being used by US law enforcement to identify suspects and other people, is facing&nbsp;<a href=\"https://www.cnet.com/news/clearview-ai-faces-lawsuit-following-facial-recognition-privacy-concerns/\">another lawsuit</a>. The new suit, filed Thursday, seeks class-action status and $5 million in damages for what it calls&nbsp;<a rel=\"noreferrer noopener\" href=\"https://twitter.com/RMac18/status/1228097214578225153\" target=\"_blank\">willful, reckless or negligent violations of biometrics laws in Illinois by Clearview</a>&nbsp;and CDW.\'  in <a href=\"https://www.cnet.com/news/clearview-ai-facial-recognition-company-faces-another-lawsuit/\">CNET</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>New York facial recognition startup&nbsp;</em><a href=\"https://clearview.ai/\"><em>Clearview AI</em></a><em>&nbsp;– which has amassed a huge database of more than three billion images scraped from employment sites, news sites, educational sites, and social networks including Facebook, YouTube, Twitter, Instagram and Venmo – is being sued in a potential class action lawsuit that claims the company gobbled up photos out of “pure greed” to sell to law enforcement.</em>\' writes <a href=\"https://nakedsecurity.sophos.com/2020/01/28/facial-recognition-firm-sued-for-scraping-3-billion-faceprints/\">Lisa Vaas in Naked Security</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://theconversation.com/facial-recognition-is-spreading-faster-than-you-realise-132047\">Facial recognition is spreading faster than you&nbsp;realise.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/algorithmwatch.org\\/en\\/story\\/face-recognition-police-europe\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"algorithmwatch\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-algorithmwatch\"><div class=\"wp-block-embed__wrapper\">\nhttps://algorithmwatch.org/en/story/face-recognition-police-europe/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/www.neweurope.eu\\/article\\/facial-recognition-technology-breaches-gdpr-says-vestager\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"new-europe\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-new-europe\"><div class=\"wp-block-embed__wrapper\">\nhttps://www.neweurope.eu/article/facial-recognition-technology-breaches-gdpr-says-vestager/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is 81% inaccurate and could be illegal.\" -<a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\"> Sky News</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Concerning the processing of biometrics, Susan Brown, Executive Chairwoman and Founder of Zortrex wrote : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Time to wake up!  Data Pipeline - Personalisation Marketing/advertising - taking our identities, the bad actors see this open air gap and taking over the data output and input. Biometrics is not security, your actually giving away your DNA!  If <a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23governments&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">governments&nbsp;</a><a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23companies&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">companies</a> do not start securing identities now, going to be disastrous.  You cannot replace your DNA or your Identity. Every day, mass surveillance, greed, humans are the product, if we do not start securing the future children now and their education and their financial banking, their medical history then everyone may just give up while the world comes to an end. \"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Finally, the UK ICO in his guidance give an example :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>A gym introduces a facial recognition system to allow members access to the facilities. It requires all members to agree to facial recognition as a condition of entry – there is no other way to access the gym. This is not valid consent as the members are not being given a real choice – if they do not consent, they cannot access the gym. Although facial recognition might have some security and convenience benefits, it is not objectively necessary in order to provide access to gym facilities, so consent is not freely given.</p><p>However, if the gym provides an alternative, such as a choice between access via facial recognition and access via a membership card, consent could be considered freely given. The gym could rely on explicit consent for processing the biometric facial scans of the members who indicate that they prefer that option.</p><cite><br></cite></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>Despite that, <a href=\"https://ipvm.com/reports/ico-conference\">UK ICO Approves Unconsented Facial Recognition At Security Conferences</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\">The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is not accurate, and could be illegal.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://onezero.medium.com/this-filter-makes-your-photos-invisible-to-facial-recognition-a26929b5ccf\">This Filter Makes Your Photos Invisible to Facial Recognition.</a></p>\n<!-- /wp:paragraph -->','Court said NO to Facial Recognition Technology','','inherit','closed','closed','','564-revision-v1','','','2020-03-02 15:32:01','2020-03-02 15:32:01','',564,'https://datarainbow.eu/2020/03/02/564-revision-v1/',0,'revision','',0),(578,5,'2020-03-02 15:49:10','2020-03-02 15:49:10','<!-- wp:heading {\"level\":4} -->\n<h4><a href=\"https://ai-regulation.com/first-decision-ever-of-a-french-court-applying-gdpr-to-facial-recognition/\">FIRST EVER DECISION OF A FRENCH COURT APPLYING GDPR TO FACIAL RECOGNITION</a></h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>In a ruling on 27th of February, a French court canceled a decision by the South-Est Region of France (Provence-Alpes-Côte d’Azur – PACA) to undertake a series of tests using facial recognition at the entrance of two High schools considering that this would be illegal. This has been a well noticed decision  of the French Court applying the General Data Protection Regulation (GDPR) on Facial Recognition Technologies (FRTs).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A great win for « La Quadrature du Net », la Ligue des droits de l’Homme, parent association of state schools of Alpes-Maritimes et CGT Union Educ’Action of Alpes-Maritimes,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following previous recommendations by the <a href=\"https://www.cnil.fr/fr/reconnaissance-faciale-pour-un-debat-la-hauteur-des-enjeux\">CNIL</a>, the Administratif court ruled that the processing of biometric data are subject to strict conditions. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The local region of  Provence-Alpes-Côte d’Azur had set a tripartite agreement for a trial with schools and Cisco International Limited  to install<br>access control, facial recognition and tracking in three high schools.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Facial recognition data processing relate to biometrics, special category data under the General Data Protection Regulation. As such their processing is in principal prohibited. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9 lists the conditions for processing special category data:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(a) Explicit consent<br>(b) Employment, social security and social protection (if authorised by law)<br>(c) Vital interests<br>(d) Not-for-profit bodies<br>(e) Made public by the data subject<br>(f) Legal claims or judicial acts<br>(g) Reasons of substantial public interest (with a basis in law)<br>(h) Health or social care (with a basis in law)<br>(i) Public health (with a basis in law)<br>(j) Archiving, research and statistics (with a basis in law)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The municipality had based its ground of processing on student\'s consents and for minors, their parents\'s consent collected on a signed form. The court objected against the legality of this project based on the imbalance of power.   </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Article 9(2)(a) permits to process special category if:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“the data subject has given <strong>explicit consent</strong> to the processing of those personal data for one or more specified purposes”.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In order to be valid, explicit consent must be <strong>freely given, specific, affirmative (opt-in) and unambiguous</strong>, and able to be withdrawn at any time. In practice, the extra requirements for consent to be ‘explicit’ are likely to be:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>explicit consent must be confirmed in a clear statement (whether oral or written), rather than by any other type of affirmative action;</li><li>it must specify the nature of the special category data; and</li><li>it should be separate from any other consents.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>It must be made sure that a <strong>genuine choice</strong> over whether and how you use their data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In particular, if consent is required as a condition of  access to services, or wherever there is a position of power over the individual,  such as a public authority or their employer, consent cannot be freely given and deemed to be invalid.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In a context of a consent required by a local authority from students, without allowing any alternative, knowing the imbalance of power, it is with no surprise that the Administratif court has invalidated the facial recognition monitoring in school.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is unreasonable to believe ALL students, present and future, would freely consent to have their biometrics processed, without alternative. Additionally, are concerned all staff and visitors, including minors.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Convinced by the imbalance of powers, the Court then argued the lack of proportionality, ruling the security aim could be reached in a less intrusive manner with student badges. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Following the <a href=\"https://www.bfmtv.com/tech/reconnaissance-faciale-dans-les-lycees-un-dispositif-juge-disproportionne-1795950.html\">CNIL</a> opinion, the court ruled that facial recognition is a disproportionate measure to manage the access to school, especially since alternative measures could reach the same result in a less intrusive manner. Student badges. are much less detrimental to rights exist to do this. On this subject,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Another case will be heard on Monday, March 2, 2020 at the Marseille administrative court. An appeal filed with the Ligue des Droits Humains against automated video surveillance (which identifies among other things \"suspicious behavior\" of  individuals on the public highway.<br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We have warned previously against <a href=\"https://datarainbow.eu/2020/01/17/facial-recognition-technologies/\">the issue of biometrics data processing in surveillance </a>and the inherent security issues of a <a href=\"https://edition.cnn.com/2020/02/10/tech/clearview-ai-ceo-hoan-ton-that/index.html\">data thirsty technology</a>. Every data base creates risks of data leak. Clearview data base has since revealed a major leak.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.bloomberglaw.com/privacy-and-data-security/clearview-ai-faces-california-illinois-lawsuit-after-breach\">Clearview AI Faces California, Illinois Lawsuit After Breach (1).</a> The question will remain how to monetise the compensation resulting from the harm caused by the loss of control over something as unique as biometrics. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'Clearview AI, a&nbsp;<a href=\"https://www.cnet.com/news/clearview-app-lets-strangers-find-your-name-info-with-snap-of-a-photo-report-says/\">controversial facial recognition app</a>&nbsp;being used by US law enforcement to identify suspects and other people, is facing&nbsp;<a href=\"https://www.cnet.com/news/clearview-ai-faces-lawsuit-following-facial-recognition-privacy-concerns/\">another lawsuit</a>. The new suit, filed Thursday, seeks class-action status and $5 million in damages for what it calls&nbsp;<a rel=\"noreferrer noopener\" href=\"https://twitter.com/RMac18/status/1228097214578225153\" target=\"_blank\">willful, reckless or negligent violations of biometrics laws in Illinois by Clearview</a>&nbsp;and CDW.\'  in <a href=\"https://www.cnet.com/news/clearview-ai-facial-recognition-company-faces-another-lawsuit/\">CNET</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\'<em>New York facial recognition startup&nbsp;</em><a href=\"https://clearview.ai/\"><em>Clearview AI</em></a><em>&nbsp;– which has amassed a huge database of more than three billion images scraped from employment sites, news sites, educational sites, and social networks including Facebook, YouTube, Twitter, Instagram and Venmo – is being sued in a potential class action lawsuit that claims the company gobbled up photos out of “pure greed” to sell to law enforcement.</em>\' writes <a href=\"https://nakedsecurity.sophos.com/2020/01/28/facial-recognition-firm-sued-for-scraping-3-billion-faceprints/\">Lisa Vaas in Naked Security</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.buzzfeednews.com/article/ryanmac/clearview-ai-fbi-ice-global-law-enforcement\">Clearview’s Facial Recognition App Has Been Used By The Justice Department, ICE, Macy’s, Walmart, And The NBA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://theconversation.com/facial-recognition-is-spreading-faster-than-you-realise-132047\">Facial recognition is spreading faster than you&nbsp;realise.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/algorithmwatch.org\\/en\\/story\\/face-recognition-police-europe\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"algorithmwatch\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-algorithmwatch\"><div class=\"wp-block-embed__wrapper\">\nhttps://algorithmwatch.org/en/story/face-recognition-police-europe/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:core-embed/wordpress {\"url\":\"https:\\/\\/www.neweurope.eu\\/article\\/facial-recognition-technology-breaches-gdpr-says-vestager\\/\",\"type\":\"wp-embed\",\"providerNameSlug\":\"new-europe\",\"className\":\"\"} -->\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-new-europe\"><div class=\"wp-block-embed__wrapper\">\nhttps://www.neweurope.eu/article/facial-recognition-technology-breaches-gdpr-says-vestager/\n</div></figure>\n<!-- /wp:core-embed/wordpress -->\n\n<!-- wp:paragraph -->\n<p>Anna Merlon writes \'<a href=\"https://www.vice.com/en_us/article/5dmkyq/heres-the-file-clearview-ai-has-been-keeping-on-me-and-probably-on-you-too\">Here’s the File Clearview AI Has Been Keeping on Me, and Probably on You Too\'.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is 81% inaccurate and could be illegal.\" -<a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\"> Sky News</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Concerning the processing of biometrics, Susan Brown, Executive Chairwoman and Founder of Zortrex wrote : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Time to wake up!  Data Pipeline - Personalisation Marketing/advertising - taking our identities, the bad actors see this open air gap and taking over the data output and input. Biometrics is not security, your actually giving away your DNA!  If <a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23governments&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">governments&nbsp;</a><a href=\"https://www.linkedin.com/feed/hashtag/?highlightedUpdateUrns=urn%3Ali%3Aactivity%3A6640226290303676416&amp;keywords=%23companies&amp;originTrackingId=re8h7SAhroyJ%2BQeMNl7%2BGw%3D%3D\">companies</a> do not start securing identities now, going to be disastrous.  You cannot replace your DNA or your Identity. Every day, mass surveillance, greed, humans are the product, if we do not start securing the future children now and their education and their financial banking, their medical history then everyone may just give up while the world comes to an end. \"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Finally, the UK ICO in his guidance give an example :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>A gym introduces a facial recognition system to allow members access to the facilities. It requires all members to agree to facial recognition as a condition of entry – there is no other way to access the gym. This is not valid consent as the members are not being given a real choice – if they do not consent, they cannot access the gym. Although facial recognition might have some security and convenience benefits, it is not objectively necessary in order to provide access to gym facilities, so consent is not freely given.</p><p>However, if the gym provides an alternative, such as a choice between access via facial recognition and access via a membership card, consent could be considered freely given. The gym could rely on explicit consent for processing the biometric facial scans of the members who indicate that they prefer that option.</p><cite><br></cite></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>Despite that, <a href=\"https://ipvm.com/reports/ico-conference\">UK ICO Approves Unconsented Facial Recognition At Security Conferences</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://news.sky.com/story/damning-report-on-police-use-of-facial-recognition-11756793\">The first ever independent evaluation into the Metropolitan Police\'s use of facial recognition technology suggests it is not accurate, and could be illegal.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://onezero.medium.com/this-filter-makes-your-photos-invisible-to-facial-recognition-a26929b5ccf\">This Filter Makes Your Photos Invisible to Facial Recognition.</a></p>\n<!-- /wp:paragraph -->','Court said NO to Facial Recognition Technology','','inherit','closed','closed','','564-revision-v1','','','2020-03-02 15:49:10','2020-03-02 15:49:10','',564,'https://datarainbow.eu/2020/03/02/564-revision-v1/',0,'revision','',0),