Providing a privacy notice to individuals about how their data is collected and processed is not a foreign concept to privacy professionals. We need to detail what information is collected, how it is used and shared, what rights subjects have, and provide them some way to ask questions or make comments and provide feedback to […]
AI criteria: Notice and Choice Read More »
Privacy is often considering whether or not a use of information is appropriate. What is or isn’t appropriate is based on regulations and rules, but as I had written elsewhere, your own feelings might play into that as well (Empathic Privacy). Being non-invasive is a matter of considering if the processing of data, in this
AI criteria: Non-invasiveness Read More »
Where necessity is all about whether AI-based processing would be possible, proportionality is all about the acceptability of the processing. Proportionality can also refer to the amount of information collected, as processing too much information can be directly disproportionate to the task at hand. However, the focus for me is whether the average person would
AI Criteria: Proportionality Read More »
In May I presented a privacy focused look into artificial intelligence. I went over 7 criteria to review prior to implementing any use of AI. The first of these was necessity, whether aspects of the proposed use of AI is needed or not. As part of a series of blogs, I will go over what
AI criteria: Measuring Necessity Read More »
I recently received an email that I knew was a fishing email after five seconds of inspection. It wasn’t anything flashy that gave it away, just a slew of telltale signs that it wasn’t an authentic message, but some malicious correspondence meant to take advantage of a less informed individual. It can be broken down
The terrible, horrible, no good, very bad phishing email Read More »
The use of artificial intelligence has become more common place and so I have begun reading and researching more about AI with regards to privacy. AI is a topic of interest for many not only because it allows for increased efficiency in many areas, but also because it opens up new ways to analyze and
A proposal for an AI Risk Framework Read More »
During this past week we celebrated Data Privacy Day. As we usually do, Privacy Ref offered a free two hour presentation to introduce privacy to anyone interested. With over a hundred attendees, there were some great questions. One that was of particular interest was surrounding emerging topics for privacy. I answered that right now, it
I had promised Bob that I would take the CIPP/US exam “before the end of 2022” and pushed that to the limit. On December 27th, I took the exam and passed. Lots of people ask for advice on how to study, what to study, or tips for taking the test itself. I cannot share actual
We want training to be something that our participants can enjoy. We also know it takes a surprising amount of energy to pay attention to something that may not be front of mind. How is someone supposed to pay attention to the updated data retention policy when they have an email campaign starting this week?
Should training be “fun”? Read More »
It has been no secret that I am a nerd. One place my inner nerd particularly surfaces is my love of board games. From your most basic game of Scrabble, in depth games of Catan, or diving deep into a euro-game with an encyclopedia sized rulebook, I am ready to go. There is a lot
Learning From Nerds: Please Read the Rules Read More »
