David Manek, CPA, CIPP, CIPM, AIGP’s Post

🌐 Explore the latest insights on data privacy and AI compliance in our May newsletter! https://ankura.co/3xcL2jJ Highlights from this month's curated must-reads include:   📌 AI Regulatory Compliance: Learn how to apply the "Measure" function in part three of our four-part series on using the NIST AI Risk Management Framework for compliance readiness.    📌 New Webinar on AI Compliance and Privacy Impact Assessments: Join our CLE-eligible session featuring experts from Ankura and Squire Patton Boggs for a deep dive into U.S. state regulatory requirements and scalable compliance strategies.   📌 State Privacy and AI Law Updates: Get ahead with what you need to know about Colorado’s new AI Law, Utah’s Consumer Protection Bill, Maryland’s Privacy Law, and more.   📌 Cyber & Privacy Insights: From the latest threat intelligence briefings to managing enforcement risks with tracking technologies, we've got you covered.   📌 Global Privacy Updates: Stay informed with the upcoming Australia Privacy Act reforms and UK’s new guidance on ransom payments. 🔗 Catch the full edition for in-depth insights into these developments and how they impact your organization: https://ankura.co/3xcL2jJ Not receiving our emails regularly? Join our community of data privacy, cybersecurity and AI professionals today 👉 https://ankura.co/4aKKVtH David Manek, CPA, CIPP, CIPM, AIGP #DataPrivacy #AIGovernance #Compliance #newsletter

11-Sep-2024: Excited to announce completion of a DPO training & seminar focusing on the new Privacy laws amendment 13 in Israel & AI Data Privacy. the knowledge I've accired and DPO diploma will be put to good use in my role as CISO/Director of security and DPO. The evolving landscape of data privacy laws, regulations and AI regulations is a key focus as global concerns heighten. Recent critical legislative updates worldwide include Israel's Privacy Act amendment 13 and the introduction of AI safety laws in California, Europe, and Israel. Stay informed as these legislation changes will requier organizations to address them in the most profound & responsible manner. - Israel's Privacy Act amendment 13: https://lnkd.in/dSdHsBtt - California's SB-1047: https://lnkd.in/dAR4pKEj - European Union's EU AI Act: https://lnkd.in/dBqjerk6 State of Israel joins the EU treaty of AI safty: Israel's commitment to safe AI use under the "Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law": https://lnkd.in/dUVvDd7M https://lnkd.in/dggtZ77a The importance of AI & ML data privacy concerns as AI cyber security challanges evolve worldwide is paramount, especially in preventing AI endpoints from divulging sensitive data when manipulated by hostile entities. Let's stay vigilant and informed amidst these evolving regulations and advancements. #AIDataPrivacy #DPO #CISO #CIO #CCPA #GDPR #PrivacyLaws #AIRegulations

The European Data Protection Supervisor is the latest regulator to publish its thoughts on genAI. Given the EDPS's remit is limited to regulating the EU institutions' privacy compliance, you would be forgiven for thinking that its recent guidelines have limited application and are not relevant to businesses. I would however beg to differ as the EDPS is influential, not least because of its role on the European Data Protection Board. The guidelines are therefore well worth a read if you want to understand the approach in the EU on how to comply with data privacy in the context of genAI. Alternatively, if you want a quick summary, just read our blog 😊 #AI #dataprivacy #EDPS

Day 8 of the 12 Days of Data Privacy is here and covers frameworks for AI in the U.S. While the EU AI Act passed earlier this month, many other governments have also been introducing AI amendments or sections to privacy laws. We cover the draft automated technology regulations under CPRA and the NIST AI Risk Management Framework in our article today. Mir Ali Smita Nalluri https://lnkd.in/eAAbS6CY

For the eighth day of Ropes & Gray LLP’s 12 Days of Data series (posted on the ninth day, due to me being laid up with COVID…), I look at three EU digital laws that should be on your to-do list in 2024. Spoiler: the AI Act is not one of them, on the basis that artificial intelligence requires a list — maybe multiple lists — all of its own. Two of these laws will take effect within the next 12 months(ish), and require boards of directors to have the ultimate responsibility — and liability— for their organisation’s risk, security and compliance standards. Including an overview of your [insert law’s] compliance programme in the board’s papers isn’t going to cut it. Instead, the next 12 months should be used to (1) engage and educate senior management on the steps that the business needs to take to get compliant, and (2) leverage your existing compliance programme to meet the new and enhanced requirements of these laws. That can wait until after the holiday period, but it really should begin in earnest as early as possible in 2024. Do get in touch if you’d like to learn more about how to ensure that the next 12 months are spent productively. #ai #artificialintelligence #dora #nis2 #cra #cyber #dataprotection

Imagine a world where your personal data is the ultimate power. It might sound like a sci-fi story, but this is actually our reality today. After watching CTRL, I couldn’t help but notice how much the movie reflects what’s happening in our digital world. In the film, AI takes over, with personal data being the source of its strength. In our real lives, though, it’s not AI that’s the issue—it’s how our data is being used against us. Tech companies and social media platforms are constantly collecting, processing, and using our personal information, often in ways that don’t align with our values or benefit us. It's like giving away control over our lives. Data breaches leave us exposed, AI can reinforce existing biases, and we start to lose our freedom as others make decisions for us. What can we do? We can start by learning more about data privacy laws and the risks involved with AI systems. We should push for companies to be more open about how they use our data and support stronger laws that protect our personal information. Let’s stand up, speak out, and regain control. https://lnkd.in/g2r_Khkf #dataprivacy #ai #ctrlmovie #techforgood #personaldata #dataprotection #udemy #udemycourse

Luis' Privacy Reads and Activities! 1. Work to Live 2. Read OPC's exploratory consultation on age assurance with Vance Lockton 3. Read the supporting Memorandum for the Attorney General’s Designation of Switzerland with Catherine Lennman 4. Read the Clearview's proposed settlement agreement with Cobun Zweifel-Keegan, J.D., 5. Read the French DPA's recommendations on the re-use of data published on the Internet 6. Read Capitano Mario Guglielmetti thoughts, at https://lnkd.in/e3i64Niu 7. Read Keir Lamont's report on U.S. State Privacy Lawshttps://lnkd.in/eNwGMjUQ 8. Read the French DPA's draft recommendations on developers and data protection, including AI Models 9. Read the “Artificial Intelligence: Model Personal Data Protection Framework” 10. Read the preliminary reference on transparency requirements under Article 13 and 14 of GDPR to the Court of Justice of European Court with David Törngren 11. Read Cobun Zweifel-Keegan, J.D., CIPP/US, CIPM's, "A view from DC: Why is a raven like a wiretap?", at https://lnkd.in/eH5tDWqc. 12. Have a wine with Dr. Laura Caroli 13. Read the complaint against Google

Regulatory compliance is a growing challenge for businesses worldwide, as they face an ever-increasing array of regulations and standards across various industries and geographies. For instance, EU parliament just today adopted the world’s first major AI regulation, while privacy regulations continue to emerge in several US states. Currently, businesses rely primarily on manual tasks to meet compliance requirements, which is a cumbersome, error-prone, and expensive process. Our team at IBM Research and William & Mary Computer Science has been working on developing AI-driven methods, leveraging GenAI, to automate the compliance pipeline. Recently, my colleague Sunil Manandhar presented our research work at the premier Network and Distributed System Security Symposium (NDSS) conference, which focused on privacy regulations. Our research identified several limitations and gaps in the privacy policies of S&P 500 companies, providing a glimpse of how AI can be a key enabler for automating regulatory compliance. We are just getting started, and there is much more to come. https://lnkd.in/gEvJXg3f https://lnkd.in/g_GCg-UM https://lnkd.in/gA6RXJeZ #euaiact #privacyregulations #securitycompliance #aicompliance #ndss2024 Adwait Nadkarni

On the EU AI Act, Lanx Goh makes a very valid point and question. We usually have seen from GDPR that it’s a north star type of law, so with the EU AI Act, are we going to have what’s called a brussels effect? In APAC-ASEAN, EU laws don’t necessarily work as well in these regions. All regulators agree that it’s a great conversation starter but the AI regulations that these regions need to be either slotted into data protection laws or need to be crafted very uniquely to each region. #PDPWeek2024 #APF24 __________________________________________ Hi! My name is Maverick! #TheDataLawyer I’m the Founder & Managing Attorney for Avant-Garde Legal, PC I post about pretty much anything related to Data and why you should consider a legal/risk management approach first or in tandem to upping your tech stack. More so, I just like making content on how this applies in real life so follow share and engage with my posts! #data #dataprivacy #dataprotection #dataprotectionlaw #artificialintelligence #ai #databreach #privacy #privacylaw #privacypro #cybersecurity Check out my last post here: https://lnkd.in/eURgHWcf

Three Strategies for Mastering AI and Data Privacy Compliance.