Skip to content

Understanding MyData Operators

Understanding MyData Operators focuses on practical aspects of technology and governance to make the operation of infrastructures for personal data easier and more human-centric, with the goal of establishing full interoperability between operators. For the white paper, the group studied examples of products, services and organisations that are in one way or another performing or supporting …

The consumer-data opportunity and the privacy imperative

As consumers become more careful about sharing data, and regulators step up privacy requirements, leading companies are learning that data protection and privacy can create a business advantage. To find out what consumers think about the privacy and collection of data, McKinsey conducted a survey of 1,000 North American consumers. To determine their views on …

A Commons for Privacy Consent

Since the European General Data Protection Regulation (GDPR) mandate, marketers worldwide have reluctantly appended privacy consent mechanisms to their site user flow. The dark patterns they use show they have no viable alternative but to collect cookie data. Consumers respond by providing fake data, using ad blockers and other techniques. Escaping this vicious cycle requires …

Empowering Personal Data For Exponential Economic Growth

It’s painful having to navigate the privacy consent forms for online services, and that’s before being able to find what you’re looking for from the endless permutations on offer. For the cash rich – time poor have long employed personal assistants to relieve them of this chore. But what about the rest of us? In …

We must save privacy from privacy itself

“Michele Loi is a post-doctoral researcher at the University of Zurich. He argues that proponents of privacy should not put privacy above health – else risk sliding into irrelevance. [..] The second risk for privacy is paradoxical: it follows from having “too much respect” for privacy itself. If our concern with privacy prevents urgent political action …

Why the new privacy laws demand data-centric security

Regulations such as the California Consumer Privacy Act (CCPA) and the EU’s General Data Protection Regulation (GDPR) require companies to take a more data-centric approach to security. Instead of focusing simply on protecting data at different layers of the technology, enterprises need to pay attention to securing data through its entire lifecycle—from the moment it …

ICO consultation on the draft AI auditing framework guidance for organisations

The ICO has launched its consultation on our draft guidance on the AI auditing framework. The guidance contains advice on how to understand data protection law in relation to artificial intelligence (AI) and recommendations for organisational and technical measures to mitigate the risks AI poses to individuals. It also provides a solid methodology to audit AI applications …