Le questioni legali, non le infrastrutture, ostacolano la ricerca nella rivoluzione dei dati sanitari

Secondo uno stakeholder finlandese, uno spazio europeo dei dati sanitari (EHDS) potrebbe avere un enorme impatto sulla ricerca sanitaria se riuscisse a superare le barriere all’uso secondario transfrontaliero dei dati sanitari e creare fiducia tra i cittadini. Queste barriere sono state analizzate dalla Joint Action Towards the European Health Data Space (TEHDAS) , coordinatore Markus Kalliola, project director per il progetto Health Data 2030 presso il Finnish Innovation Fund Sit EURACTIV in un’intervista.

Legal issues, not infrastructure hampers research in health data revolution

A European Health Data Space (EHDS) could enormously impact health research if it can overcome barriers to cross-border secondary use of health data and create trust amongst citizens, according to a Finnish health data stakeholder. These barriers have been carefully analysed by the Joint Action Towards the European Health Data Space (TEHDAS), coordinator Markus Kalliola, project director for the Health Data 2030 project at the Finnish Innovation Fund Sitra, told EURACTIV in an interview.

euractiv.com/section/health-co…

HDPA rilascia linee guida di conformità dei siti Web che utilizzano tracker

L’autorità ellenica per la protezione dei dati in Grecia ha pubblicato linee guida di conformità per i siti Web informativi che utilizzano tracker. L’autorità ha analizzato diversi siti Web e le loro modalità per ottenere il consenso all’uso dei tracker, in particolare i pop-up di cookie banner, osservando la non conformità in diversi punti del Regolamento generale sulla protezione dei dati dell’UE. L’HDPA ha affermato di aver condotto un audit di 30 siti Web, concedendo loro 15 giorni per essere conformi. Tutti i siti Web, con un’eccezione, lo hanno fatto entro la scadenza. L’autorità esorta tutti i siti web ad adeguarsi alle linee guida.

euractiv.com/section/health-co…

HDPA releases guidelines on website-tracking compliance

The Hellenic Data Protection Authority in Greece released compliance guidelines for informational websites using trackers. The authority observed several websites whose methods for obtaining consent to use trackers — specifically, cookie banner pop-ups — did not comply with several points of the EU General Data Protection Regulation. The HDPA said it conducted an audit of 30 informative websites, giving them 15 days to achieve compliance. All websites, with one exception, did so by the deadline. The authority urges all websites to adapt to the guidelines.

iapp.org/news/a/hdpa-releases-…

EDPB discute le sanzioni GDPR, l’uso del riconoscimento facciale da parte delle forze dell’ordine

Il Comitato europeo per la protezione dei dati ha annunciato che le linee guida per il calcolo delle sanzioni amministrative ai sensi del regolamento generale sulla protezione dei dati dell’UE saranno discusse durante la sessione plenaria del 12 maggio. L’EDPB discuterà anche le linee guida sull’uso della tecnologia di riconoscimento facciale da parte delle forze dell’ordine e la prossima conferenza di giugno “Il futuro della protezione dei dati: un’applicazione efficace nel mondo digitale”.

EDPB to discuss GDPR fines, law enforcement facial recognition use

The European Data Protection Board announced guidelines for calculating administrative fines under the EU General Data Protection Regulation will be discussed during its May 12 plenary session. The EDPB will also discuss guidelines around law enforcement’s use of facial recognition technology and the upcoming June conference “The Future of Data Protection — Effective enforcement in the digital world.”

iapp.org/news/a/edpb-to-discus…

guidoscorza.it/privacy-daily-1…

👉Your Chance to join the @noybeu Team as a #Trainee! 😊

We are looking for young lawyers that want to gain experience in #GDPR litigation and enforcement.

⏩Find out more & apply now for May 2022 onward at noyb.eu/en/traineeship

mastodon.social/@noybeu/108277…

Yesterday, Member of the European Parliament and digital freedom fighter Patrick Breyer (Pirate Party) filed an action for an injunction against the so-called chat control against Facebook’s parent company Meta Platforms Ireland Limited at Kiel District Court. As a user of “Facebook Messenger”, Breyer is suing against the suspicionless automated search of private chat histories and photos. While the automated searches of personal messages and chats is so far only practised by major US providers, the EU Commission is to propose tomorrow to make this mandatory for all providers of e-mail, messenger and chat services.

Plaintiff Patrick Breyer comments:

“This Big Brother attack by unleashing error-prone algorithms on our cell phones, private messages and photos is a giant step toward a Chinese-style surveillance state. Chat control is like the post office opening and scanning all letters – ineffective and illegal. I will not stand by idly and watch the dismantelling of the fundamental right to digital privacy of correspondence. I will now involve the judiciary.

With chat control in place even the most intimate nude photos and sex chats can suddenly end up with company personnel or the police. Destroying the digital secrecy of correspondence is destroying trust. We all depend on the security and confidentiality of private communication: People in need, victims of abuse, children, the economy and also government authorities.

Organized child porn rings don’t use e-mail or messenger services, but rather secret self-operated forums. With its plans for chat control, the EU Commission is putting the general security of our private communications and public networks, business secrets and state secrets at risk out of short-term surveillance desires. What we need is removals instead of snooping!”

At Breyer’s request, Europol had previously admitted not to report known CSEM for deletion.

Breyer’s lawyer Prof. Dr. Ralph Wagner explains:

“While EU politicians on the one hand claim to protect us from assaults by Facebook, Google and Co., they are at the same time commissioning these same companies to screen and monitor all our communications. The fact that the European Court of Justice (and the courts of many EU member states) has already prohibited such total surveillance on several occasions is simply brushed aside. Then, unfortunately, the only option is to go back to the courts.

Whoever is serious about data protection, with the least bureaucratic burden possible, and wants to protect civil liberties, must not screen all of our communications and then also commission Facebook to do the same.”

Tomorrow, the EU Commission will publicly present its draft EU law on mandatory chat control. The law would require all providers of email, messenger and chat services to conduct mass chat checks and would undermine secure end-to-end encryption.

EDRi has criticised chat control as the “inevitable result of such technologies” and stresses these “would be unthinkable for those that are wrongly accused. The German Child Protection Association has also denounced the EU Commission’s plan to scan private communications via messenger or email without any reason as disproportionate and ineffective. Instead, it says, that the majority of child pornography material is shared via platforms and forums. What is needed “above all is the expansion of human and technical resources at law enforcement agencies, more visible police presence on the net, more state reporting offices, and the decriminalisation of the dissemination of self-generated material among young people.”

Breyer’s information page on chat control

patrick-breyer.de/en/destructi…

Limousine Beach \ Gengis Khan : Cosa direste se vi proponessero un gruppo musicale che riuscisse a fondere Thin Lizzy, Kiss, Van Halen e il glam rock anni settanta ?

iyezine.com/the-queen-is-dead-…

The Queen is Dead 49 - Limousine Beach Gengis Khan

Limousine Beach Gengis Khan : Cosa direste se vi proponessero un gruppo musicale che riuscisse a fondere Thin Lizzy, Kiss, Van Halen e il glam rock anni settanta ?

^{In Your Eyes ezine}

Washington va all’offensiva globale sulla privacy dei dati

Il Congresso USA è in stallo sulle regole federali sulla privacy. Gli Stati Uniti sono impegnati nel Forum mondiale delle norme sulla privacy transfrontaliere, un gruppo internazionale di paesi tra cui Stati Uniti, Singapore, Giappone e altri tra quelli della Cooperazione economica dell’Asia del Pacifico. Funzionari di 20 giurisdizioni – e non solo dell’APEC – si sono riuniti alle Hawaii la scorsa settimana per elaborare dettagli sulle potenziali norme sulla protezione dei dati a livello mondiale che consentirebbero alle informazioni personali (query di ricerca, informazioni sulle buste paga) di fluire senza soluzione di continuità attraverso i confini e le giurisdizioni.

Washington goes on the global data privacy offensive

Washington’s deadlocked Congress isn’t going to pass federal privacy rules any time soon. But on the global stage, the United States wants to show its allies that it means business — even if that means butting heads with the European Union. Central to the United States’ pitch is the newly created Global Cross-Border Privacy Rules Forum, an international group of countries including the U.S., Singapore, Japan and others from the Asia Pacific Economic Cooperation, a regional trade group. Officials from 20 jurisdictions — and not just from APEC — gathered in Hawaii last week to hammer out details on potential worldwide data protection rules that would allow people’s personal information like search queries and payroll information to flow seamlessly across borders.

politico.eu/article/washington…

Il Parlamento europeo critica la mancanza di iniziativa sull’uso di spyware da parte degli Stati

I membri del Parlamento europeo hanno criticato la mancanza di azione da parte della Commissione europea sull’uso da parte degli Stati membri dello spyware Pegasus del gruppo NSO, riferisce Euractiv. Le rivelazioni dell’anno scorso hanno scoperto che il gruppo NSO ha fornito ai governi lo spyware, consentendo agli utenti l’accesso inosservato a tutti i contenuti e gli scambi e tracciando la geolocalizzazione dei cellulari. Secondo quanto riferito, lo spyware è stato utilizzato per sorvegliare i dispositivi di politici, giornalisti e attivisti di tutto il mondo. Il Parlamento europeo ha incaricato una commissione di indagare sull’uso di Pegasus da parte degli Stati membri dell’UE a marzo.

Pegasus: MEPs lash out at EU Commission for inaction

Members of European Parliament criticized the lack of action by the European Commission over member states’ use of NSO Group’s Pegasus spyware, Euractiv reports. Revelations last year uncovered that NSO Group provided governments with the spyware, allowing users undetected access to all content and exchanges, and track the geolocation of cellphones. Reportedly, the spyware was used to surveil the devices of politicians, journalists and activists around the world. The European Parliament tasked a committee to investigate into EU member states’ use of Pegasus in March.

euractiv.com/section/digital/n…

L’ultima decisione di Google Analytics non ha alcuna influenza sui trasferimenti di dati

Lynn Goldstein, CIPP/USA, Senior Foundation Strategist della Information Accountability Foundation, ha scritto un editoriale spiegando come una seconda decisione dell’Autorità austriaca per la protezione dei dati in merito ai trasferimenti di dati effettuati tramite Google Analytics “non dovrebbe ostacolare i trasferimenti di dati odierni”. A seguito di una sentenza iniziale sui trasferimenti illegali tramite gli strumenti web di Google Analytics, l’Autorità di protezione dei dati si è recentemente pronunciata contro un approccio ai trasferimenti basato sul rischio. Goldstein ha osservato che l’ultima decisione “è mal motivata” e basata su “due ‘fatti’ obsoleti” relativi all’interpretazione del regolamento generale sulla protezione dei dati dell’UE e alle procedure relative alle clausole contrattuali standard.

Op-ed: Latest Google Analytics decision has no bearing on data transfers

Information Accountability Foundation Senior Foundation Strategist Lynn Goldstein, CIPP/US, wrote an op-ed explaining how a second decision by the Austrian Data Protection Authority regarding data transfers carried out through Google Analytics “should not hinder today’s data transfers.” Following an initial ruling on illegal transfers using Google Analytics web tools, the DPA recently ruled against a risk-based approach to transfers. Goldstein noted the latest decision “is poorly reasoned” and based on “two outdated ‘facts'” related to interpretation of the EU General Data Protection Regulation and procedures around standard contractual clauses.

informationaccountability.org/…

guidoscorza.it/privacy-daily-1…