#ukgdpr — Public Fediverse posts

Spotted TikTok's new UK "Pick your plan" screen this morning. Standard is pre-ticked; Confirm just asks you to "acknowledge having read" the privacy policy. That's notice language, not consent language, and pre-ticked boxes haven't been valid consent under GDPR since Planet49 (CJEU, 2019).
So we mocked up the honest version: one plan, nothing pre-ticked, Confirm stays dead until you actually tick "I consent." Turns out that's not hard.
#UKGDPR #ConsentOrPay #DigitalSovereignty

The ICO under John Edwards has seen the #UKGDPR weakened, with duties to balance rights with economic growth; and recent policy changes mean that the #ICO does not try to handle complaints about an organisation until they pile up.

𝗛𝗼𝘄 𝘁𝗼 𝗣𝗿𝗼𝘁𝗲𝗰𝘁 𝗬𝗼𝘂𝗿 𝗣𝗿𝗶𝘃𝗮𝗰𝘆 𝗶𝗻 𝘁𝗵𝗲 𝗔𝗜 𝗘𝗿𝗮: 𝗨𝗞 𝗚𝗗𝗣𝗥 & 𝗧𝗵𝗲 𝗡𝗲𝘄 𝗖𝗼𝗱𝗲 𝗼𝗳 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗲

#ArtificialIntelligence #UKGDPR #DataProtection #PrivacyLaw #AutomatedDecisionMaking #DataRights #TechLaw #AICodeOfPractice #MachineLearning #DigitalRights

https://youtu.be/qTiqqX2YukU

I missed a chunk of the #ICO #DPPC yesterday due to dental surgery, will be catching up on the videos today. A colleague who attended learned a lot!
https://ico.org.uk/about-the-ico/data-protection-practitioners-conference/

#DataProtection #InformationSecurity #InfoSec #GDPR #UKGDPR

The #cat has a microchip registered with #Identibase. After moving home I tried to update my address on Identibase, but they said that I needed to pay an annual subscription fee to do so...

My address is my personal data, and therefore comes under the #UKGDPR, so I submitted a Article 16 "right to rectification" request asking them to update the out of date personal data. Per Article 12(5) they have to do this for free.

And it worked! Identibase have updated my address for free.

#GDPR

@tdp_org Why are third-party analytics cookies considered "strictly necessary" on the BBC website?

https://www.bbc.com/usingthebbc/cookies/strictly-necessary-cookies/

Strict necessity is defined as those required for the site's basic functionality to work, such as remembering which shopping cart is yours, or saving your cookie preferences so you are not asked on every page (which could be seen as coercing the user to accept more cookies).

@noybeu, what do you think?

#gdpr #gdprcompliance #UKGDPR #cookies

ICO fines TikTok £12.7m. Looks like the contraventions were around allowing access to under 13s and failing to provide adequate transparency information

#UKGDPR #dataprotection

https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2023/04/ico-fines-tiktok-127-million-for-misusing-children-s-data/

December has flown by with lots of fun festive extra activities on the mind, presents to buy and events to go to. 🎄
 
This means it's been easy to lose track of important developments in data protection - an area of law which continues to be busy all year round! 🧐
 
So whilst lots of us are winding down for a nice long holiday weekend, here are five significant events in December from a GDPR and UK GDPR perspective in case you missed them:
 
1️⃣ The EU Commission has proposed a draft EU - US Data Privacy Framework (the new 'privacy shield' ). However, whilst the draft is significant, the decision has not been finalized. The process which expected to take another 6 months.

2️⃣ The UK Information Commissioner published various important pieces including its Direct Marketing Guidance which has long been anticipated by the industry. The ICO also released a forward thinking piece called 'Tech Horizons' which examines the implications of some of the most significant technological developments for privacy in the next two to five years.

3️⃣ The EU has signed a declaration on EU digital rights and principles that highlights "the EU's commitment to a secure, safe and sustainable digital transformation." The declaration is wider than just protecting personal data including #ESG themes around sustainability and digital inclusion.

4️⃣ Microsoft plans to roll out a 'data boundary' for its EU customers from 1 January to help their customers comply with their commitments under the GDPR.

5️⃣ New draft texts has been released for significant EU legislation in the data space, including the upcoming #AI Act, and the EU Data Act.
 
And of course, there were many more developments. Would anything else make your top 5?

#dataprotectionlaw #dataprivacylaw #dataprotection #GDPR #UKGDPR #data #Privacyshield #internationalbusiness

As a data protection lawyer, I often seen companies push data retention or data deletion policies to the bottom of the list.

It's sometimes seen as less important, because customers don't typically see this.

However, a recent fine by the CNIL shows there are real risks in delaying and never quite getting round to it. 😬

In this instance, Discord (a popular chat platform for gamers 🎮) received a fine over 800,000 euros for:

❌ Not having a written data retention policy
❌ Not having specific retention periods or criteria for determining retention periods
❌ Failing to ensure data protection by default in the way the application sat in the background on Windows platforms
❌ Failure to ensure security by not setting strong enough password criteria
❌ Failure to carry out data protection impact assessments.

If you are a company dealing with customers in the EU or UK, there is no better time than now to be elevating data retention/deletion on your 'to do' list. ✔️

#dataprotection #dataprivacy #dataretention #datadeletion #dataprocessing #gaming #gamingnews #GDPR #UKGDPR

https://www.cnil.fr/en/discord-inc-fined-800-000-euros

Less than a week to go! Last chance for tickets for our in-person conference. Tickets free for members, £50 for non-members. A great line-up of speakers, lunch provided. Can't wait to see everyone #DataProtection #GDPR #UKGDPR #FOI #FreedomOfInformation https://nadpo.co.uk/event/nadpo-conference-2022/

📆 We’re looking forward to speaking about pressing Freedom of Information issues at the NADPO Annual Conference on Tuesday (22 Nov).

Confirmed speakers include:
👉John Edwards, Information Commissioner
👉 Maurice Frankel @CampaignFoI
👉 Prof Victoria Nash @oiioxford
👉 Prof Lillian Edwards @lilianedwards

Non-members can get tickets here: https://nadpo.co.uk/event/nadpo-conference-2022-tickets-nonmember/…

#FOI #FreedomOfInformation #FOIA #DataProtection #GDPR #UKGDPR

RT from Jim Killock (@jimkillock)

The “Task Force on Innovation, Growth, and Regulatory Reform”, headed up by Iain Duncan Smith, Theresa Villiers and George Freeman, reported back recommended gutting #UKGDPR.

Links to beneficiaries or not, it was incredibly partial and poor work.

https://www.theguardian.com/politics/2021/nov/09/iain-duncan-smith-accused-of-brazen-conflict-of-interest-over-25000-job

RT from Jim Killock (@jimkillock)

A sign of things to come, if the @ICOnews is given duties to promote data reuse in “Data a new Direction” #UKGDPR consultation?

https://birdsite.xanny.family/TomSamaki/status/1361003658125717506

RT from Jim Killock (@jimkillock)

This is why @DCMS plans to roll back #UKGDPR are a disaster for their other plans to introduce an Online Safety Bill.

https://birdsite.xanny.family/evan_greer/status/1445119564325523456

UK dials up the spin on data reform, claiming ‘simplified’ rules will drive ‘responsible’ data sharing - The UK government has announced a consultation on plans to shake up the national d... - http://feedproxy.google.com/~r/Techcrunch/~3/dWb9LtR16i8/ #informationcommissionersoffice #artificialintelligence #moorfieldseyehospital #dataprocessing #google-health #unitedkingdom #deeplearning #oliverdowden #ukgovernment #johnedwards #healthcare #deepmind #privacy #europe #policy #google #ukgdpr