nicfab
137 subscribers
15 photos
16 files
2.34K links
Canale di aggiornamento su Privacy, Data Protection, Cybersecurity
Download Telegram
Privacy Community in the #Fediverse

Messaging Layer Security: Secure and Usable End-to-End Encryption

submitted by nicfab to privacy
2 points | 0 comments
https://www.ietf.org/blog/mls-secure-and-usable-end-to-end-encryption/
The IETF has approved publication of Messaging Layer Security (MLS), a new standard for end-to-end security that will make it easy for apps to provide the highest level of security to their users. End-to-end encryption is an increasingly important security feature in Internet applications. It keeps users’ information safe even if the cloud service they’re using has been breached.

...
Privacy Community in the #Fediverse

AI Act: European Parliament headed for key committee vote at end of April

submitted by nicfab to privacy
2 points | 0 comments
https://www.euractiv.com/section/artificial-intelligence/news/ai-act-european-parliament-headed-for-key-committee-vote-at-end-of-april/
EU lawmakers in the leading European Parliament committees are voting on the political agreement on the AI Act on 26 April, with many questions being settled but a few critical issues still open.

The AI Act is a landmark EU proposal to regulate Artificial Intelligence based on its potential to cause harm. The European Parliament is set to finalise its position on the file by May to quickly enter into negotiations with the EU Council and Commission in the so-called trilogues.

The discussions on the AI regulation have taken longer than expected due to political infighting in the Parliament, which resulted in a co-lead of the Internal Market and Consumer Protection committee (IMCO) and Civil Liberties committee (LIBE).

...
Privacy Community in the #Fediverse

Italy orders ChatGPT blocked citing data protection concerns

submitted by nicfab to privacy
2 points | 0 comments
https://techcrunch.com/2023/03/31/chatgpt-blocked-italy/?guccounter=1
Two days after an open letter called for a moratorium on more powerful generative AI models being developed so regulators can catch up with the likes of ChatGPT, Italy’s data protection authority has just put out a timely reminder that some countries do have laws that already apply to cutting edge AI — by ordering OpenAI to stop processing people’s data locally with immediate effect.

The Italian DPA said it’s concerned ChatGPT’s maker is breaching the European Union’s General Data Protection Regulation (GDPR).

Specifically, the Guarante said it has issued the order to block ChatGPT over concerns OpenAI has unlawfully processed people’s data — and also over the lack of any system to prevent minors from accessing the tech.

...
Privacy Community in the #Fediverse

Intelligenza artificiale: il Garante blocca ChatGPT. Raccolta illecita di dati personali. Assenza di sistemi per la verifica dell’età dei minori

submitted by nicfab to privacy
2 points | 0 comments
https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/9870847
Intelligenza artificiale: il Garante blocca ChatGPT
Raccolta illecita di dati personali. Assenza di sistemi per la verifica dell’età dei minori

Stop a ChatGPT finché non rispetterà la disciplina privacy. Il Garante per la protezione dei dati personali ha disposto, con effetto immediato, la limitazione provvisoria del trattamento dei dati degli utenti italiani nei confronti di OpenAI, la società statunitense che ha sviluppato e gestisce la piattaforma. L’Autorità ha contestualmente aperto un’istruttoria.

ChatGPT, il più noto tra i software di intelligenza artificiale relazionale in grado di simulare ed elaborare le conversazioni umane, lo scorso 20 marzo aveva subito una perdita di dati (data breach) riguardanti le conversazioni degli utenti e le informazioni relative al pagamento degli abbonati al servizio a pagamento.

...
Privacy Community in the #Fediverse

Cyber Resilience Act: Leading MEP proposes flexible lifetime, narrower reporting

submitted by nicfab to privacy
2 points | 0 comments
https://www.euractiv.com/section/cybersecurity/news/cyber-resilience-act-leading-mep-proposes-flexible-lifetime-narrower-reporting/
The EU lawmaker spearheading the Cyber Resilience Act has produced a draft report pitching the removal of time obligations for products’ lifetime and limiting the scope of reporting to significant incidents, among other significant changes.

The Cyber Resilience Act is a draft law introducing cybersecurity requirements for Internet of Things products (IoT), connected devices that can exchange data. The European Parliament’s rapporteur Nicola Danti circulated his draft report, seen by EURACTIV, with the other political groups on Friday (31 March).

While Danti maintained the overall scope of the regulation, he simplified the language, stating that the requirements apply to all connected devices “that can have a direct or indirect data connection to a device or network”.

...
Privacy Community in the #Fediverse

UK privacy regulator fines TikTok £12.7m for children’s data violations

submitted by nicfab to privacy
1 points | 0 comments
https://www.euractiv.com/section/data-privacy/news/uk-privacy-regulator-fines-tiktok-12-7m-for-childrens-data-violations/
The UK’s data protection authority sanctioned TikTok £12.7 million for multiple data law violations, including the unlawful use of children’s personal data.

The Information Commissioner’s Office (ICO) announced the fine on Tuesday (4 April) after concluding an investigation into potential breaches by the company of the UK’s data protection regime.

The inquiry found multiple infractions by the video-sharing platform, including some related to processing data belonging to children under the age of 13. An additional charge set out in the ICO’s prior notice of intent was dropped, however, reducing the original fine from £27 million to nearly £13 million.

...
Privacy Community in the #Fediverse

TikTok hit with $15.7M UK fine for misusing children’s data

submitted by nicfab to privacy
2 points | 0 comments
https://techcrunch.com/2023/04/04/tiktok-uk-gdpr-kids-data-fine/
TikTok has been issued with a fine of £12.7 million (~$15.7M) for breaching UK data protection law, including rules intended to protect children.

The privacy watchdog, the Information Commissioner’s Office (ICO), announced today that it found the video sharing site “did not do enough” to check who was using their platform and failed to take sufficient action to remove the underage children that were using the service.

Per the ICO, TikTok had an estimated 1.4 million underage UK users during a two-year period, between May 2018 and July 2020 — which its investigation was focused on — contrary to terms of service stating users must be 13 or older.

...
Privacy Community in the #Fediverse

TikTok: multa da 12,7 milioni di sterline da Authority Uk per utilizzo dei dati dei bambini

submitted by nicfab to privacy
1 points | 0 comments
https://www.ilsole24ore.com/art/tiktok-multa-127-milioni-sterline-authority-uk-utilizzo-dati-bambini-AEqoLaDD?refresh_ce=1
Il social network cinese TikTok è stato multato per 12,7 milioni di sterline (14,5 milioni di euro) dall’Ico, l’Information Commissioner’s Office, l’autorità britannica di regolamentazione dei dati digitali, per uso “illegale” dei dati personali dei bambini. In particolare, l’Ico stima che TikTok, soggetta recentemente a restrizioni in diversi Paesi, abbia consentito a fino a 1,4 milioni di minori sotto i 13 anni nel Regno Unito di aprire un account sulla sua piattaforma nel 2020, contrariamente a quanto previsto dalle sue regole ufficiali. Inoltre l’Authority contesta l’utilizzo dei dati senza il consenso dei genitori.
Privacy Community in the #Fediverse

EDPB adopted letter to EU institutions on data sharing for AML/CFT purposes

submitted by nicfab to privacy
1 points | 0 comments
https://edpb.europa.eu/news/news/2023/edpb-adopted-letter-eu-institutions-data-sharing-amlcft-purposes_en
During its latest plenary, the EDPB adopted a letter to the European Parliament, the Council and the European Commission on data sharing for anti-money laundering and countering the financing of terrorism (AML/CFT) purposes. This letter highlights the significant risks to privacy and data protection posed by some amendments introduced by the Council, which would allow private entities, under certain conditions, to share personal data between each other for AML/CFT purposes concerning “suspicious transactions” and data collected in the course of performing customer due diligence obligations.

The EDPB expresses serious concerns about the lawfulness, necessity and proportionality of these provisions, which could result in very large-scale processing by private entities. The EDPB considers that the amendments do not adequately specify the conditions under which such processing is justified, and that they do not provide sufficient safeguards, given that such processing could have a significant impact on individuals, such as blacklisting and exclusion from financial services. The EDPB therefore recommends the co-legislators not to include these provisions in the final text of the Proposal.
Privacy Community in the #Fediverse

The XMPP Newsletter March 2023

submitted by nicfab to privacy
2 points | 0 comments
https://xmpp.org/2023/04/the-xmpp-newsletter-march-2023/
Welcome to the XMPP Newsletter, great to have you here again! This issue covers the month of March 2023. Many thanks to all our readers and all contributors!

Like this newsletter, many projects and their efforts in the XMPP community are a result of people’s voluntary work. If you are happy with the services and software you may be using, please consider saying thanks or help these projects! Interested in supporting the Newsletter team? Read more at the bottom.

...
Privacy Community in the #Fediverse

Newsletter XMPP di marzo 2023 - versione italiana

submitted by nicfab to privacy
2 points | 0 comments
https://notes.nicfab.eu/it/posts/newsletter_xmpp/newsletter-xmpp-mar-2023/
Benvenuti alla Newsletter XMPP, è un piacere avervi di nuovo qui! Questo numero copre il mese di marzo 2023. Grazie a tutti i nostri lettori e a tutti i collaboratori!

Come questa newsletter, molti progetti e i loro sforzi nella comunità XMPP sono il risultato del lavoro volontario delle persone. Se siete soddisfatti dei servizi e del software che utilizzate, vi invitiamo a ringraziare o ad aiutare questi progetti! Siete interessati a sostenere il team della newsletter? Leggi di più in fondo.

...
Privacy Community in the #Fediverse

DATA BREACH: 1,000,000+ Financial Records Exposed in Data Incident Involving Fintech Company

submitted by nicfab to privacy
2 points | 0 comments
https://www.iainfraser.net/2023/04/fintech-data-breach.html
Cybersecurity researcher Jeremiah Fowler discovered and reported to WebsitePlanet a non-password protected database that contained a large number of PDF documents.

The PDF documents that were made public included invoices from both individuals and businesses who used an app to pay for products and services. The invoices contained names, email addresses and physical addresses, phone numbers, and more. In addition, the documents also included notes about what the payment was for, the total amount, due date, and some even contained tax information such as a tax id number.

Upon further research, it was identified that the database belonged to NorthOne Bank, a financial technology company that is used by over 320,000 American businesses (based on information on their website). It is worth noting that NorthOne is not a full service bank. Banking services to NorthOne Bank are provided by The Bancorp Bank, which is also a member of the Federal Deposit Insurance Corporation (FDIC), a government agency that provides deposit insurance to financial institutions. NorthOne Bank has offices in New York, USA and Toronto, Canada and its services are available throughout North America.
...
Privacy Community in the #Fediverse

Italian Watchdog Issues a List of To-Dos to Lift ChatGPT Ban

submitted by nicfab to privacy
2 points | 0 comments
https://techreport.com/news/3494871/italian-watchdog-issues-a-list-of-to-dos-to-lift-chatgpt-ban/
OpenAI finally received a primary to-do list to get the ChatGPT ban lifted in Italy. The data protection watchdog of the country has updated OpenAI on what it needs to do to get over the suspension that ChatGPT received at the end of March. It’s being said that this AI language module breached the European Union’s General Data Protection Regulation (GDPR). Given this allegation, Italy’s data protection department banned OpenAI’s ChatGPT, preventing the tool from processing locals’ data.

OpenAI, however, took the order seriously and implemented geoblocking to prevent Italian users from accessing ChatGPT. The CEO of OpenAI, Sam Altman, posted a confirmation tweet after halting ChatGPT’s services in Italy. In the said tweet, the CEO mentioned that they are abiding by all privacy laws.

...
Privacy Community in the #Fediverse

ChatGPT, il Garante della privacy offre la possibilità di mettersi in regola

submitted by nicfab to privacy
1 points | 0 comments
https://www.macitynet.it/chatgpt-garante-privacy-mettersi-in-regola/
OpenAI avrà tempo fino al 30 aprile per adempiere alle prescrizioni imposte dal Garante per la protezione dei dati personali riguardo a informativa, diritti degli interessati, utenti e non utenti, base giuridica del trattamento dei dati personali per l’addestramento degli algoritmi con i dati degli utenti.

Solo allora, venendo meno le ragioni di urgenza, l’Autorità sospenderà il provvedimento di limitazione provvisoria del trattamento dei dati degli utenti italiani preso nei confronti della società statunitense e ChatGPT potrà tornare accessibile dall’Italia.

A riferirlo è l’Aurorità italiana spiegando che entro fine aprile la società dovrà dunque adottare una serie di misure concrete.

L’Autorità spiega che OpenAI dovrà “predisporre e rendere disponibile sul proprio sito un’informativa trasparente, in cui siano illustrate modalità e logica alla base del trattamento dei dati necessari al funzionamento di ChatGPT nonché i diritti attribuiti agli utenti e agli interessati non utenti”. L’informativa dovrà essere “facilmente accessibile e collocata in una posizione che ne consenta la lettura prima di procedere all’eventuale registrazione al servizio”.

...
Privacy Community in the #Fediverse

Opinion: AI and mental healthcare

submitted by nicfab to privacy
2 points | 0 comments
https://telanganatoday.com/opinion-ai-and-mental-healthcare
Artificial Intelligence (AI) has altered the area of mental health in several ways, most notably in the development of tailored treatment regimens for people with mental health disorders. One of the more recent areas of interest for AI is psychology, specifically mental health. As AI expands its reach, it is becoming increasingly important for psychologists, therapists and counsellors to comprehend the technology’s current capabilities and future promise to revolutionise mental healthcare.

...
Privacy Community in the #Fediverse

EDPB resolves dispute on transfers by Meta and creates task force on Chat GPT

submitted by nicfab to privacy
2 points | 0 comments
https://edpb.europa.eu/news/news/2023/edpb-resolves-dispute-transfers-meta-and-creates-task-force-chat-gpt_en
Brussels, 13 April - The EDPB adopted a dispute resolution decision on the basis of Art. 65 GDPR concerning a draft decision of the IE DPA on the legality of data transfers to the United States by Meta Platforms Ireland Limited (Meta IE) for its Facebook service. The binding decision addresses important legal questions arising from the draft decision of the Irish DPA as lead supervisory authority (LSA) regarding Meta IE. The EDPB binding decision plays a key role in ensuring the correct and consistent application of the GDPR by the national Data Protection Authorities.

As no consensus was reached on the objections lodged by several DPAs, the EDPB was called upon to settle the dispute between the DPAs within two months.

More specifically, in its binding decision, the EDPB settles the dispute on whether an administrative fine and/or an additional order to bring processing into compliance must be included in the Irish DPA’s final decision.

The LSA shall adopt its final decision, addressed to the controller, on the basis of the EDPB binding decision taking into account the EDPB's legal assessment, at the latest one month after the EDPB has notified its decision. The EDPB will publish its decision on its website after the LSA has notified its national decision to the controller.

The EDPB members discussed the recent enforcement action undertaken by the Italian data protection authority against Open AI about the Chat GPT service.

The EDPB decided to launch a dedicated task force to foster cooperation and to exchange information on possible enforcement actions conducted by data protection authorities.
Privacy Community in the #Fediverse

Trustworthy AI made in the EU: how common values can be a competitive edge

submitted by nicfab to privacy
1 points | 0 comments
As the ethics of AI seem to have become an afterthought superseded by a lack of time for discussion and concerns about anti-competitive effects, it is on the European Parliament to put the trustworthiness of all AI systems developed in the EU back in the centre of the AI Act negotiations.

Inês de Matos Pinto is a legal and digital affairs advisor for the Socialists and Democrats group, and Kai Zenner is head of office and digital policy advisor for MEP Axel Voss.

The views expressed in this article are strictly personal and do represent neither the position of the European Parliament nor that of the S&D or EPP Group.

Ever since the European Parliament began the conversation around AI in 2016, there has been an underlying narrative across all EU Institutions about how regulating this key technology means having a distinctively European approach. A balanced regulatory intervention that effectively protects fundamental rights and promotes citizens’ trust in the uptake of AI while creating legal certainty for businesses and giving them enough leeway to innovate.

...
Privacy Community in the #Fediverse

MIT CSAIL researchers discuss frontiers of generative AI

submitted by nicfab to privacy
1 points | 0 comments
https://news.mit.edu/2023/mit-csail-researchers-discuss-frontiers-generative-ai-0412
The emergence of generative artificial intelligence has ignited a deep philosophical exploration into the nature of consciousness, creativity, and authorship. As we bear witness to new advances in the field, it’s increasingly apparent that these synthetic agents possess a remarkable capacity to create, iterate, and challenge our traditional notions of intelligence. But what does it really mean for an AI system to be “generative,” with newfound blurred boundaries of creative expression between humans and machines?

For those who feel as if “generative artificial intelligence” — a type of AI that can cook up new and original data or content similar to what it's been trained on — cascaded into existence like an overnight sensation, while indeed the new capabilities have surprised many, the underlying technology has been in the making for some time.

But understanding true capacity can be as indistinct as some of the generative content these models produce. To that end, researchers from MIT’s Computer Science and Artificial Intelligence Laboratory (CSAIL) convened in discussions around the capabilities and limitations of generative AI, as well as its potential impacts on society and industries, with regard to language, images, and code.

...
Privacy Community in the #Fediverse

EU plan for international border data-sharing system “should not proceed”

submitted by nicfab to privacy
2 points | 0 comments
https://www.statewatch.org/news/2023/march/eu-plan-for-international-border-data-sharing-system-should-not-proceed/
The aim of the plan is to allow reciprocal police and border guard access to data for EU member states and non-member states alike. “At present, there is no EU mechanism in place to systematically make critical and actionable partner-country sourced information available directly and in real time to frontline border guards or police officers in the Member States,” says a document published by the Commission (pdf).

Thus, despite a wealth of existing information-sharing schemes – many of which, as the submission points out, have yet to be put into use – the Commission is seeking yet another system, which it says will “ensure increased security in the EU as frontline officers will have direct access to security-related information from partner countries, enabling them to take instant action in case someone representing a threat is located.”

...
Privacy Community in the #Fediverse

EU-USA cooperation on biometric data, breaking encryption, radicalisation

submitted by nicfab to privacy
1 points | 0 comments
https://www.statewatch.org/news/2023/march/eu-usa-cooperation-on-biometric-data-breaking-encryption-radicalisation/
The meeting was held in "a constructive, unscripted atmosphere" and the summary document (pdf) covers the following (all emphasis in quotes added):

Joint response to Russia’s war of aggression against Ukraine

"...the EU delegation expressed appreciation for the close cooperation with US partners through the Solidarity Platform, including on humanitarian assistance and flows projections"

Counter-terrorism and information-sharing

...