Category: News

https://www.datenschutz-bayern.de/datenschutzreform2018/OH_Loeschung.pdf

https://www.cisa.gov/sites/default/files/publications/Cloud%20Security%20Technical%20Reference%20Architecture.pdf

https://rsw.beck.de/cms/?toc=ZD.120

(Deutschland, DSGVO)

Übersicht zum Auskunftsanspruch nach Art. 15 DS-GVO:

• eine Übersicht über den Inhalt des Auskunftsanspruchs nach Art. 15 DS-GVO (unter 1.),
• eine Übersicht über die Vorlagefragen zu Art. 15 DS-GVO (unter 2.) und
• eine Übersicht über die Streitwerte beim Auskunftsanspruch nach Art. 15 DS-GVO.

Des Weiteren finden sich hier drei Übersichten des Autors zum Schadensersatz nach Art. 82 DS-GVO:

• eine Übersicht über den Schadensersatzanspruch nach Art. 82 DS-GVO;
• eine Übersicht über die Vorlagefragen zu Art. 82 DS-GVO und
• eine Übersicht über die Höhe des (zugesprochenen) Schadensersatzes nach Art. 82 DS-GVO

sowie einschlägige EuGH-Vorlagen.

https://iapp.org/media/pdf/resource_center/recent_eu_data_initiatives_in_context_infographic.pdf

The Office of the National Coordinator for Health Information Technology (ONC) and Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) have released version 3.3 of the HHS Security Risk Assessment (SRA) Tool. (HIPAA context)

https://www.healthit.gov/topic/privacy-security-and-hipaa/security-risk-assessment-tool

Companies, administrations, associations and other bodies established in Luxembourg now have the possibility of demonstrating that their personal data processing operations comply with the GDPR. GDPR-CARPA thus offers data controllers and subcontractors a high level of GDPR compliance for their processing operations subject to certification.

The establishment of certification mechanisms can promote transparency and compliance with the GDPR and allow data subjects to better assess the level of data protection offered by the products, services, processes or systems of organizations that process their personal data. A GDPR certification does not certify an organization but the processing operations covered by the certification.

The CNPD is to date the only European supervisory authority to have itself developed a certification scheme under the GDPR. As the entity that developed the certification criteria, the CNPD also owns the certification scheme.

https://cnpd.public.lu/fr/actualites/national/2022/06/adpoption-gdpr-carpa.html

“. Developers will soon be required to tell us about their apps’ privacy and security practices by completing a form in Play Console. Starting late April, 2022, this information will be shown on your app’s store listing to help Google Play users understand how your app collects and shares user data before they download.

This article provides an overview of the new requirements, what you need to do to complete the form, and a timeline of upcoming events.”

“By July 20, 2022, all developers must declare how they collect and handle user data for the apps they publish on Google Play, and provide details about how they protect this data through security practices like encryption. ”

https://support.google.com/googleplay/android-developer/answer/10787469

(Android)

DPIA overview page with forms etc..
https://www.datenschutz-bayern.de/dsfa/

Risikoanalyse und DatenschutzFolgenabschätzung – Systematik, Anforderungen, Beispiele
https://www.datenschutz-bayern.de/dsfa/OH_Risiko.pdf

Aktuelle Kurz-Information 43: Auftragsverarbeitung bei bayerischen öffentlichen Krankenhäusern
https://www.datenschutz-bayern.de/datenschutzreform2018/aki43.html

“To allow for a comprehensive inventory of the auditability of AI systems in different use cases and to allow for tracking its progress
over time, we here propose to employ a newly developed “Certification Readiness Matrix” (CRM) and present the initial concept. By using the CRM concept as a frame to summarize the
results of a one day workshop on auditing AI systems with talks covering basic research, applied AI auditing efforts and standardisation activities we demonstrate that audit methods
for some aspects are already well developed while other aspects still require more research into and development of new audit technologies and tools.”

https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/KI/Towards_Auditable_AI_Systems_2022.pdf

The Infocomm Media Development Authority (IMDA) and the PDPC launched A.I. Verify – the world’s first AI Governance Testing Framework and Toolkit for companies that wish to demonstrate responsible AI in an objective and verifiable manner. A.I. Verify – currently a Minimum Viable Product (MVP), aims to promote transparency between companies and their stakeholders.

https://www.pdpc.gov.sg/news-and-events/announcements/2022/05/launch-of-ai-verify—an-ai-governance-testing-framework-and-toolkit

• Primer: https://file.go.gov.sg/aiverify-primer.pdf
• Overview/invitation: https://file.go.gov.sg/aiverify.pdf
• Press release: https://www.imda.gov.sg/news-and-events/Media-Room/Media-Releases/2022/Singapore-launches-worlds-first-AI-testing-framework-and-toolkit-to-promote-transparency-Invites-companies-to-pilot-and-contribute-to-international-standards-development