SecureRedact

View Original

Politics and Privacy!

No. 35: Bringing you the news that matters in video privacy and security

A note from our Editor

Hi all,

The recent war break-out between Russia and Ukraine has both saddened and shocked the world. It has become a catalyst for the inevitable fear of division between state surveillance and privacy - causing widespread concern in many sectors about the way in which personal data is monitored and used. Whilst privacy fears are heightened, regulation continues to crack down on unethical privacy strategies within companies, with many organisations starting to make important steps in putting the data rights of their customers and employees first.

In EU news, the European Commission looks to further protect the data of its citizens by treating non-personal data the same as personal data for any data access requests that come from cloud services outside the EU. This comes after the Schrems ruling and is a way to provide more protection for data transfers out of the EU.

Google has recently created a Checks system, that uses AI to scan codebases of new mobile apps to help give advice on how app privacy can be improved, and what's needed to meet compliance with UK and EU GDPR, US and Brazilian regulations.

The recent Post Office Scandal, where dozens were wrongfully imprisoned due to a software error that accused them of fraud and theft, has raised the need for stronger regulation of AI based employee surveillance.

Keeping and strengthening the privacy of business, employee and consumer data is key to securing an ethical and forward-thinking product, company and reputation.

As always, please let me know if you have any feedback on this newsletter or want to see any other topics covered.


Emma


News

NHS Scotland COVID app launched despite knowing that it breached data privacy laws

Even though the ICO warned the Scottish government last year that their NHS COVID app wasn't privacy compliant, some issues were not fixed before it was launched. This meant that between 555,000 and 615,000 people were affected by the error.

The Guardian: NHS Scotland Covid app rebuked for breaching data privacy laws

The Telegraph: SNP ‘ignored’ data privacy concerns to launch Scottish Covid passport app


Post Office scandal exposes the dangers of the rise in employee surveillance

The Post Office scandal, where dozens were wrongfully imprisoned due to a software error, has meant that the TUC has called for stronger regulations for tech-based employee surveillance. This comes after many do not understand the way in which AI is being used to survey them, with many companies seeming to take advantage of this when it comes to automated decision making.

IT Pro: Employee surveillance tech risks “spiralling out of control”, TUC warns

The Telegraph: Post Office scandal shows dangers of blind faith in technology, union warns


Conti ransomware gang suffers major data breach

After the Conti ransomware gang showed its support for Russia amid the current Russia-Ukraine crisis, a Ukranian cyber researcher has unveiled data belonging to them. A group of malware researchers have shared what was found publicly to verify it. Alex Holden, CTO of Hold Security, said that it is a must read for security professionals to understand how early ransomware really works.

IT Pro: Conti ransomware gang data leaked by Ukrainian cyber researcher

InfoSecurity Magazine: Conti Group Suffers Massive Data Breach


Google created checks that automate if mobile apps are GDPR compliant

Google's new system to be rolled out soon, Checks, helps mobile app developers make sure that their apps are GDPR compliant, by using AI to scan codebases to provide automated advice into how privacy can be improved. This is not just for the EU GDPR - but can be cross-referenced with regulations in the US and Brazil.

IT Pro: Google Checks automates GDPR compliance for mobile app developers

Tech Crunch: Google’s Area 120 debuts Checks, an AI-powered privacy compliance solution for mobile apps


Privacy fears over new UK digital number plates

As number plates change in the UK on March 1st, many are expressing privacy concerns for the UK introducing digital number plates - since the first UK one is being developed by iPlate, with a launch date for its product of 338 days.This is due to the fact that ANPR systems will be able to detect cars more easily, and many are fearful of this type of surveillance.  

The Express: Privacy fears as digital number plates set to launch in the UK next year


AI Snippet of the Week

Andy Warhol narrates his diaries - with a little help from AI

The new documentary on Netflix about Andy Warhol's life and art uses AI technology - with a text-to-speech algorithm that incorporated his Pittsburgh accent, to make it seem like the artist is really talking. 

NME: Andy Warhol “narrates” his diaries through AI in new documentary trailer


Policy Updates

EU moves to limit foreign access to cloud data

In the wide ranging draft of the new EU Data Act, the EU is seeking to treat EU non-personal data similarly to personal data when it comes to cloud data solutions. They also want to require cloud providers to “take all reasonable technical, legal and organisational measures, including contractual arrangements” to prevent the transfer of non-personal data outside of the EU where the transfer “would create a conflict with Union law or the national law of the relevant member state”.

Pinsent Masons: EU moves to limit foreign access to cloud data


To subscribe to our fortnightly newsletter, please click here

Thanks for reading, if you have any suggestions for topics or content that you want to see covered in future please drop a note to: info@secureredact.co.uk