Phil Garner

Following today's election, the data and marketing industry will have many questions for the new government, in particular its approach to AI and reforming data protection legislation. Join the DMA's CEO, Chris Combemale next week Thursday 11 July, for an insightful online session the new government's plans and how the DMA will ensure the data protection regime promotes productivity, growth and innovation. Experian Marketing Services will explore how the UTT ruling in favour of Experian established powerful case law in support of legitimate interests as a lawful bases for third party data in direct marketing and the importance of proportionality to transparency requirements. You can read more about the Experian case here: https://ow.ly/oXmP50SvvpR. This week the DMA also published an open letter in which we appeal the new Government’s commitment to prioritise a new Data Reform Bill. We will be launching a major engagement campaign with incoming ministerial team and government officials team at the Department of Science, Innovation and Technology starting on Friday morning as soon as the election result is known. You can read Campaign Live's coverage on the Letter on here: https://ow.ly/yG5k50SvvpP Join Chris next week at the Virtual Legal Update as they discuss all this and more by registering here: https://ow.ly/vml950SvvpQ

4

News Article: How companies using e-assessment can prepare for the introduction of the EU AI Act  For companies involved in e-assessment, particularly those using AI for online proctoring, content creation and test creation, the EU AI Act has several implications. We asked eAA Chief Executive, Pat Coates, to shed light on the key implications for those using AI in education and training assessments including the impact on online proctoring, content and test creation, and compliance and monitoring. We also look at some practical steps companies can take now. 👇 📖 Read the full article here: https://lnkd.in/emJPvnuy #EAssessment #AIEducation #EUAIACT #AICompliance #EdTech #eAA #ArtificialIntelligence #Regulations #eAssess

16

We are delighted to start working with a UK independent regulator! We will be helping them improve their records management with clear and compliant recommendations to effectively retain and manage the disposal of their vast quantity of records. https://buff.ly/3ZmZqQv #recordsmanagement #publicsector

8

💡 How will the EU AI Act affect Life Sciences organisations? ✉️ Sign up for our monthly Life Sciences newsletter for expert tips from David Smith, DPO and AI Sector Lead at The DPO Centre, on how organisations can stay ahead of the EU AI Act: https://hubs.ly/Q02_4FL-0 #LifeSciences #DataProtection #Newsletter

14

Following the news that the Data Protection and Digital Information Bill will not be passed before the dissolution of parliament, the DMA is calling on the UK government to make data, technology, and AI the foundation for innovation, growth, and improved productivity. We have produced a 10-point manifesto, which outlines the key reforms needed: 1. Maintain high standards of data protection to build trust and confidence in the future of the economy and government services 2. Provide certainty to legitimate interests as a lawful basis for data processing to ensure the right to conduct a business is balanced with the right to privacy 3. Take a principles-based, ethical approach to AI regulation 4. Give legal certainty to the recitals in GDPR to ensure the legislation is correctly interpreted by the ICO, lawyers and data protection officers 5. Maintain adequacy with the EU to ensure free flow of trade 6. Promote scientific research in academic and commercial settings 7. Enhance the role of the Department of Science innovation and technology, making it faster to respond to the opportunities and challenges of emerging technology 8. Reform the organisation structure and governance of the ICO 9. Develop skills in data, AI and digital marketing that are essential to growth and productivity 10. Transfer responsibility for in-career re-skilling, lifelong learning and apprenticeships from the DfE to the Department for Business and Trade The DPDI Bill was an important evolution of the UK’s data protection framework and held a wide range of opportunities for our members. Regardless of the election outcome, the next government should build upon the general principles of DPDI and introduce a new bill to continue advancing this essential work. You can read more about our call to the government here - https://lnkd.in/exA98wpA #DMA #DPDI #Election #Marketing

13

The Local Government Association has called for creation of a Local Government Centre for Digital Technology as part of a series of measures for the UK Government after the general election - It has published a white paper on the issues, saying there is a need for a reset in the relationship between central and local government. Reflecting re-emergence in recent months of the debate on creation of a Local Government Digital Service, the paper includes a number of recommendations such as creation of the centre to support technological innovation for local authorities, and promote inclusive economic growth. #localgov #digital #data #technology #innovation #leadership More... https://lnkd.in/eepRXPXS

29

7 Comments

Does your business want to better understand Standard Essential Patents (SEPs)? Our new SEPs Resource Hub is designed to help UK businesses, particularly SMEs, navigate the complex SEPs ecosystem. View the hub (link): https://lnkd.in/egaCaEZD

24

Did you miss our most popular webinar to-date? Download your copy of 'Intro to Data Rights and Noteworthy Government Contract Provisions' to learn the intricacies of data rights within the context of gov contracts. https://hubs.la/Q02PpRsY0 #datarights #governmentcontracts

2

The deadline for NHS Data Security and Protection Toolkit (DSPT) submissions is officially next month. ⌛ Final DSPT submissions are expected no later than 30th June 2024. This year's toolkit is a little different to last year's, with a number of changes having been made that organisations need to be aware of. If your organisation is required to provide this, have you done so yet? Our latest blog post covers the updates you need to know about, goes over what the DSPT actually is, and delivers comprehensive advice on completing it. We also provide you with a handy downloadable resource that covers the 10 data security standards that the DSPT is built around. ✅ Read it here: https://lnkd.in/gzYbRDRy Do you need reassurance about your DSPT submission? Do you want to be certain that it covers everything it needs to, and that it effectively demonstrates your organisation's compliance? If that's the case, take a look at our DSPT review and audit service. https://lnkd.in/g-ctQEYz We'll take a thorough look at your submission and identify any gaps or oversights - this way, your organisation can rest assured that this year's submission will meet the required standards. 🔍 Nigel Gooding LLM, PGDip, PGCHE,PGCert, FBCS, FCMI Natalie Bennett Emma Martins Nicola Saunders ACIM #data #privacy #dataprivacy #dataprotection #dspt #dsptoolkit #nhs #nhsdspt

19

"The healthcare industry must prioritise investments in cybersecurity to address the escalating threats to medical devices, interconnected systems, and overall infrastructure." GlobalData Plc's thematic report 'Cybersecurity in Healthcare: Thematic Intelligence was released this time last week. Below are a few takeaways that lead us to the opening quote above. - Healthcare organisations are at a greater risk of cyber attack than ever before largely due to the Covid-19 pandemic and a push towards virtual care and remote monitoring. - There was a two-fold increase in the number of individuals affected by data breaches from 2022 to 2023. - A single vulnerability can provide multiple entry points for cybercriminals, potentially leading to widespread disruptions across healthcare systems. (See this week's CrowdStrike example where a faulty software update lead to one of the biggest global outages of all time.) - GlobalData projects that by 2025, 68% of medical devices will be connected to a network. While this increased connectivity will improve efficiency and patient care, it will also expand the risk landscape. - It is expected that there will be a significant increase in the amount of investment in cybersecurity, growing by 12.9% annually from $631.2m in 2022 to $1.2bn in 2027. -The healthcare sector must prioritise cybersecurity investments to address the escalating threats to medical devices, interconnected systems, and the broader healthcare infrastructure. https://lnkd.in/gQufrp-p

8

In August 2024, the Artificial Intelligence (AI) Act came into force across the European Union (EU).   But what, if anything, does mean for the UK?  In our new blog, Arbor Law’s Founding Director Ed Rea looks at the regulatory landscape for AI in the UK. #ArtificialIntelligence #AIRegulation #EUAIAct #AILaw #AIUKLaw #CorporateLawyers https://lnkd.in/e_RAEiWV

10

🔒 The Information Commissioner's Office just released a new privacy notice generator to simplify GDPR compliance for UK SMEs. Is your organisation ready to leverage this tool effectively? Our latest article from Deeya Barik covers the questions you need to answer before using the ICO's generator: 👉 What should your data inventory include to build a solid foundation? 👉 How can you effectively map and document your third-party data sharing? 👉 Which security measures must you review prior to drafting? 👉 Who are the key stakeholders to involve in creating an accurate notice? Ensure your privacy notice meets GDPR requirements and reflects your business practices. Read our detailed guide here: https://lnkd.in/eu3ueiQF #ICO #GDPR #DataProtection #SMEGuidance #PrivacyCompliance

9

1 Comment

💡Navigating Data Privacy in a Changing Landscape? ViCA has the Answers! 📊 As data privacy regulations evolve, especially with the UK’s post-Brexit GDPR reforms and new EU regulations like the Digital Services Act and Data Act on the horizon, staying compliant can feel like hitting a moving target. 🌍📜 💻ViCA is here to make it simple. Our smart, intuitive tool has reliable insights and guidance on data protection across regions, so you’re always prepared for the latest changes—no guesswork required. Got questions? Ask ViCA and get clear, compliant answers you can trust! Register today and receive 20 FREE queries—no payment details required! 🚀Just Ask ViCA👉 https://lnkd.in/ebnQtN6Y #DataPrivacy #Compliance #AskViCA #ComplianceAssistant #VirtualAssistant #Regulations #Compliance #Complyport #FinancialServices #AI #ArtificialIntelligence

11

Catch our September #PETed discussion featuring expert Claire Quinn discussing the recent spotlight on #ageassurance and #ageverification and increasing requirements for parent consent and controls. Over the past few years there has been a tsunami of new privacy legislation driven by the EU, UK and US to address user #dataprivacy and online harms and risks to users including children. 📆 September 26th, 2024 @ 12:00 PM EDT / 6:00 PM CEST at https://lnkd.in/gJr5fii3 #privacydiscussion #privacyengineering #privacybydesign #childrensprivacy

5

Catch our September #PETed discussion featuring expert Claire Quinn discussing the recent spotlight on #ageassurance and #ageverification and increasing requirements for parent consent and controls. Over the past few years there has been a tsunami of new privacy legislation driven by the EU, UK and US to address user #dataprivacy and online harms and risks to users including children. 📆 September 26th, 2024 @ 12:00 PM EDT / 6:00 PM CEST at https://lnkd.in/gJr5fii3 #privacydiscussion #privacyengineering #privacybydesign #childrensprivacy

5

🚨 ICO Publishes Final Response to Consultation on Generative AI and Data Protection 🚨 The UK’s Information Commissioner’s Office (ICO) has released its final response to the public consultation on the application of UK data protection law to generative AI. This marks a significant step in addressing key challenges faced by developers and organizations working with AI systems. 📌 Key highlights include: Clarification on the lawful basis for web scraping, emphasizing "legitimate interests" while encouraging alternative, more transparent data collection methods. Reinforcement of purpose limitation, ensuring data collected for one purpose isn’t repurposed without compatibility checks. Focus on data accuracy to mitigate risks of biased or inaccurate outputs. Guidelines for designing AI systems to uphold individual rights, including data access, rectification, and erasure. Stressing clear allocation of responsibilities across the AI supply chain. The ICO’s recommendations are a call to action for greater transparency, accountability, and data protection by designin AI innovation. The ICO also plans to continue engaging with stakeholders and monitoring AI developments, ensuring compliance evolves alongside technological advancements. 🔗 Read key details on our website: https://lnkd.in/eKQdwckm This guidance underscores the growing importance of robust AI governance to balance innovation and privacy. What are your thoughts on the implications for the AI industry? Let’s discuss below! 👇

8

“Generative AI offers great potential to the UK and the opportunity must be realised in a responsible way that appropriately considers data protection law.” Stephen Almond, Executive Director Regulatory Risk. Last year we ran a five- part consultation series on how data protection law should apply to the development and use of generative AI models. We recently launched our outcomes report which details our policy positions on generative AI and sets out what further work is still needed by industry. The results from our consultation series led to us refining our positions in two areas: • The lawful basis for web scraped data to train generative AI models. • The engineering of individual rights into generative AI models. Read our outcomes report to learn more about our policy positions: https://lnkd.in/gjY3bN4A We engaged openly to develop our positions and continue to work with government, other digital regulators and our international counterparts to play our part in safeguarding people and enabling responsible innovation. The European Data Protection Board (EDPB) have also released their opinion on generative AI. This important report adds to the growing conversation on how industry can balance this innovation with data protection. Read the EDPB opinion on their website: https://lnkd.in/eAxrubAC

61

5 Comments