Clearview AI, a privately owned company based in the US, has been involved in many suits in the last couple years that highlight the maturing of global data protection laws, as well as the advancement of biometric information identification technologies. Clearview has the largest known database of over 30 billion facial images. Its website [...]

The NCSC and their Role  The National Cyber Security Centre (NCSC) was founded in 2016 as part of the Government Communications Headquarters (GCHQ), the UK’s intelligence, security, and cyber agency. The NSCS is the result of a merger of several previous organisations including the Communications-Electronics Security Group (CESG). The NCSC manages major cybersecurity incidents [...]

It may come as a surprise that the one of the biggest-selling smart light bulbs worldwide has critical vulnerabilities that allow it to be turned off, made to flicker, and even be taken over remotely by someone outside your house. Another little-known fact is that the water network in San Fransisco was hacked last [...]

The UK data protection regulator, the Information Commissioner Office (‘ICO’) recently issued notice of intent to TikTok Inc and TikTok Information Technologies UK Limited (‘TikTok’) for alleged breaches of children's data. TikTok is alleged to have: Processed the data of children under the age of 13 without appropriate parental consent; Failed to provide proper [...]

On October 3, 2022, the former Minister of State for Digital, Culture, Media, and Sport (‘DCMS’) Michelle Donelan announced at the British Conservative Party’s yearly conference in Birmingham that Britain will replace the UK GDPR. The UK’s data protection community was plunged into uncertainty with this announcement that suggested UK plc would be starting [...]

Environmental, Social, and Governance (‘ESG’) criteria play a key role for businesses from different perspectives, such as investing and reputation. Stakeholders including consumers, investors and governments are increasingly informing their decisions based on businesses ESG credentials. Within this framework Diversity, Equity, and Inclusion (‘DE&I’) initiatives are critical aspects of the social component of the [...]

In July 2022, the Greek Data Protection Authority (DPA) imposed a mammoth fine of 20 million Euros on Clearview AI. According to the DPA Decision No 35/2022, this fine followed a complaint of the nonprofit organisation “Homo Digitalis”, regarding processing of biometric data. This is the highest fine ever imposed by the Greek DPA [...]

There is clear consensus among lawmakers and regulators of the need for increased regulation surrounding the processing of children’s data. Recent actions by the Federal Trade Commission (FTC) and state lawmakers signal that companies processing children’s data should expect to see increased scrutiny.  The California Age-Appropriate Design Code Act  On September 15, 2022, Governor [...]

In the wake of rising awareness for the importance of data protection and the concepts of the EU GDPR (General Data Protection Regulation), it is imperative not to forget the extra protection that should be and is required to be given to one of the most vulnerable groups in society: children. Article 1 of [...]