Day 02 - EDPS Technology & Privacy unit.pdf

Support for Improvement in Governance and Management  SIGMA
Support for Improvement in Governance and Management SIGMA Senior Adviser, Strategy and Reform à Support for Improvement in Governance and Management SIGMA
EUROPEAN
DATA
PROTECTION
SUPERVISOR
The EU’s independent data
protection authority
Data-protection in the
Western Balkans and Eastern
Partnership Region
EDPS Technology &
Privacy unit
Massimo ATTORESI
Deputy Head of T&P unit
19 September 2023
2
A bit about the TP unit: our story
2012 2019 2023
Technology Sector
created
2 people
Our Composition and Expertise –Multidisciplinarystaff with focus on technologicaland
scientific research
Expertise in Telecommunications, Computer engineering, Computer science, Physics, Auditing,
Information security etc.
Technology sector
becomes Technology
and Privacy unit
8 people
Technology
unit grows
to 15 people
Technology & Privacy Unit
3
The Supervisor
Secretary/General
Cabinet
Supervision &
Enforcement
Policy &
Consultation
Technology
& Privacy
Governance
& Internal
Compliance
Information &
Communication
HR, Budget &
Administration
EDPB
Secretariat
4
What T&P Unit does?
Support functions
SupportPolicy and Consultation Unit
in technologicial matters (informal-formal Consultations, Opinions). Participation
in EDPB subgroups, international fora (GPA, Spring Conference, int. organisations)
Direct Attributions
SupportSupervision and EnforcementUnit
in technological matters (prior consultations, mainly in AFSJ, joint
Audits/Investigations, Complaints). In a few cases, with high technological focus,
TP is on the lead.
Supportour Director in Security Functions
LSO and LISO Functions.
Technology monitoring & foresight
Techsonar, TechDispatch, IPEN organisation, preparation guidelines specific topics, training
in PETS, collaboration with other organisations in technology matters ( in the EU, such as
ENISA, international, such as IWGDPT/Berlin Group), support Supervisor & Sec Gen
Technology and
Privacy Unit
IT function
EDPS own IT needs as an institution: IT Strategy, IT Governance, Local IT support. Own
systems, NextCloud, EuVideo-Voice, PKI infrastructure. Auditing tolos such as WEC,
mobile apps lab.
IT Audits
Mainly in the context of Large Scale IT Systems and Coordinated Supervision.
Data Breach Notification Handling
6
How are we organised?
Management
Luis Velasco (HoU)
Massimo Attoresi (DHoU)
Technology Monitoring and Foresight Sector
System Oversight and Technology Audits
Digital Transformation
• IRM – IT Governance
• ICDT
• IT Strategy, IT Feasibility Study
• SLA EP
• Local IT function
• Innovation Projects
• IT audits on Large Scale IT systems
• Other IT audits outside ASFJ area
• Data breach notifications, DBN
Guidelines and DBN system
• Expertise in AFSJ including support
the other two sectors and to P&C,
S&E and EDPB
• DPO meetings
• Technological expertise including support
the other two sectors and to PC and SE in
the rest of topics, Digital Euro, Cloud, AI,
Blockchain, Surveillance, Finance, Health,
eGovernment, Data Spaces....
• Guidelines on technology topics
• Foresight activities. TechSonar &
TechDispatch
• Contributions to EDPB in topics above
• IPEN Organisation
• Berlin Group, GPA....
7
Personal Data Breaches
• “a breach of security leading to the accidental unlawful
destruction, loss, alteration, unauthorised disclosure of, or access to,
personal data transmitted, stored or otherwise processed”
EUDPR Art. 3(16)
8
Personal Data Breaches
Root causes of
personal data breaches
2019-2022
9
Our topics of interest
10
Technology Monitoring & Foresight
11
Technology Monitoring: TechSonar
(Foresight dimension)
TechSonar aims to anticipate emerging
technology trends: the main aim of this
initiative is to better understand future
developments in the technology sector from a
data protection perspective.
12
Technology Monitoring: TechDispatch
Smart speakers Connected Cars Contact Tracing
with Apps
Quantum
Computing
Facial Emotion
Recognition
Card Based
Systems
Federated Social
Media Platforms
TechDispatch provides factual descriptions
of a new technology, preliminarily assesses
possible impacts on privacy and the
protection of personal data, as we
understand them now, and provides links to
further recommended reading.
13
Technology Monitoring: IPEN network
The purpose of exchange with Academia and
Engineers in the IPEN Network is to bring
together developers and data protection experts
with a technical background from different
areas in order to launch and support projects
that build privacy into everyday tools and
develop new tools that can effectively protect
and enhance our privacy.
IPEN2023 – Explainable AI
IPEN2022 - CBDC
IPEN2022 - DigitalIdentity
IPEN2021 - Pseudonymisation
IPEN2021 SyntheticData Webinar
IPEN2020 - Contact Tracing Apps webinar
IPEN2020 - Encryption webinar
IPEN2020 - Online Workshop
IPEN2020 - Panel on Web Tracking
IPENWorkshop 2019 - Rome
IPENData Protection Day Workshop 2019
IPENWorkshop 2018 - Barcelona
IPENWorkshop 2017 - Vienna
IPENWorkshop 2016 - Frankfurt
IPENWorkshop 2015 - Leuven
IPENWorkshop 2014 – Berlin
• Guidelineson personal data and electronic communicationsin the EU institutions
(eCommunicationsguidelines)
• Guidelineson Personal Data BreachNotification
• IT governanceand IT management
• Guidelineson the use of cloud computing services by the Europeaninstitutions and
bodies
• Mobile Devices
• Mobile Applications
• Web Services
• Security Measures for Personal Data Processing
14
Technology & Privacy – EDPS Guidelines
15
The Web is watching you:
Watch back with the “WEC”
16
Various Compliance Tools for Website
Controllers
Cloud Solutions
• Qualys SSL Labs (HTTPS check)
• Cookiebot (Cookiecheck)
• PrivacyScore, Webbkoll
(Cookies, HTTPS, etc.)
• OneTrust (Cookiecheck)
Problems
• no scans in intranets
• confidentiality or compliance issues
• transparency, reproducibility of the cloud solution
On-Premise Solutions
• OpenWPM by Mozilla
• WebXray
• Developer Toolbar
(Firefox and Chrome)
• Website Evidence Collector
bytheEDPS
• Website Evidence Collector
by the EDPS
17
Website Evidence Collector (WEC)
from the EDPS
Features
• automated, reproducible evidence collection
• records screenshots, cookies, traffic,
potential web beacons, HTTPS security
• no legal judgements: data protectionlaw agnostic
Output
• machine- and human-readable output
• with many details to identify tracking issues
18
Digital Sovereignty – EDPS Fediverse
pilots
• EDPS launched on 28 April 2022 Fediverse pilot
and invites other EU institutions to participate.
• EU Voice powered by Mastodon with
35 accounts of EU institutions, bodies, agencies
https://social.network.europa.eu
• EU Video powered by Peertube with
about 6 accounts
https://tube.network.europa.eu(originally EU Tube)
...and an ongoing Pilot on a sovereign Cloud - NextCloud collaborationtools
T&P unit follows closely EU legislative developments with a significant technology
dimension. Files include:
• The ArtificialIntelligence Act (AIA)
• Digital Services Act (DSA), the Digital Markets Act (DMA), the Data
Governance Act (DGA) and the Data Act
• Regulation as regards establishing a framework for a European Digital Identity
• Digital Euro joint Opinion with the EDPB
• Regulation laying down rules to prevent and combat child sexual abuse
• Regulation on the digitalisationof the visa procedure
• Directiveon informationexchange between law enforcement authorities of
Member States
19
Legislative proposals followed by T&P
20
Collaboration with EDPB and EDPB
secretariat
• Interface with the European Parliament for the provisionof general basic services
to all the EDPS units including the EDPB Secretariat
• Collaborationwith EDPB Secretariat in the organisation of the Website Audit
BootCamp
• Participationin the EDPB “ChatGPT taskforce”
• Management of projects using EDPB Expert pool of experts in the field of
ArtificialIntelligence.
• Collaborationin TECH subgroup within the EDPB. Co-rapporteurs in multiple
documents such pseudo-anonymisation, blockchain, ....
• Supervision of Large Scale IT Systems and contributionto the Coordianted
Supervision Committee
21
Artificial Intelligence & AI Act
• EDPS has been identifying and assessing AI risks under
GDPR/EUDPR
• AI Act identifies the EDPS as the AI competent authority for
the EU institutions
• Preparations will start to understand our tasks, interaction
with MSs national competent and market authorities,
interaction with applicable data protectionlaw, the role of
« regulatory sandboxes »
@EU_EDPS
European Data
Protection Supervison
EDPS
The EU’s independent data
protection authority
EUROPEAN
DATA
PROTECTION
SUPERVISOR
Some icons from https://www.flaticon.com/
Word cloud created in https://wordart.com
1 sur 21

Recommandé

EDF2014: Marta Nagy-Rothengass, Head of Unit Data Value Chain, Directorate Ge... par
EDF2014: Marta Nagy-Rothengass, Head of Unit Data Value Chain, Directorate Ge...EDF2014: Marta Nagy-Rothengass, Head of Unit Data Value Chain, Directorate Ge...
EDF2014: Marta Nagy-Rothengass, Head of Unit Data Value Chain, Directorate Ge...European Data Forum
4.4K vues18 diapositives
"Towards Value-Centric Big Data" e-SIDES Workshop - Slide-deck par
"Towards Value-Centric Big Data" e-SIDES Workshop - Slide-deck"Towards Value-Centric Big Data" e-SIDES Workshop - Slide-deck
"Towards Value-Centric Big Data" e-SIDES Workshop - Slide-decke-SIDES.eu
135 vues77 diapositives
The European cyber security cPPP strategic research & innovation agenda par
The European cyber security cPPP strategic research & innovation agendaThe European cyber security cPPP strategic research & innovation agenda
The European cyber security cPPP strategic research & innovation agendaEUBrasilCloudFORUM .
234 vues14 diapositives
20161201 witdom bdva summit par
20161201 witdom bdva summit20161201 witdom bdva summit
20161201 witdom bdva summitElsa Prieto
134 vues13 diapositives
Gérald Santucci par
Gérald SantucciGérald Santucci
Gérald Santucciglobalforum11
490 vues12 diapositives
Fintech Belgium_Webinar 3: Cybersecurity / Covid-19: Home Working Challenge ... par
 Fintech Belgium_Webinar 3: Cybersecurity / Covid-19: Home Working Challenge ... Fintech Belgium_Webinar 3: Cybersecurity / Covid-19: Home Working Challenge ...
Fintech Belgium_Webinar 3: Cybersecurity / Covid-19: Home Working Challenge ...FinTech Belgium
457 vues32 diapositives

Contenu connexe

Similaire à Day 02 - EDPS Technology & Privacy unit.pdf

SFScon19 - Eugenio Bettella Marco Reguzzoni - Internet of Things & cybersecur... par
SFScon19 - Eugenio Bettella Marco Reguzzoni - Internet of Things & cybersecur...SFScon19 - Eugenio Bettella Marco Reguzzoni - Internet of Things & cybersecur...
SFScon19 - Eugenio Bettella Marco Reguzzoni - Internet of Things & cybersecur...South Tyrol Free Software Conference
162 vues20 diapositives
Legal certainty as a tool for the spread of the internet of things par
Legal certainty as a tool for the spread of the internet of thingsLegal certainty as a tool for the spread of the internet of things
Legal certainty as a tool for the spread of the internet of thingsGuido Noto La Diega
550 vues37 diapositives
Cloud Services As An Enabler: the Strategic, Legal & Pragmatic Approach par
Cloud Services As An Enabler: the Strategic, Legal & Pragmatic ApproachCloud Services As An Enabler: the Strategic, Legal & Pragmatic Approach
Cloud Services As An Enabler: the Strategic, Legal & Pragmatic ApproachSLA-Ready Network
296 vues17 diapositives
Webinar: Why risk managers should look at Artificial Intelligence now? par
Webinar: Why risk managers should look at Artificial Intelligence now?Webinar: Why risk managers should look at Artificial Intelligence now?
Webinar: Why risk managers should look at Artificial Intelligence now?FERMA
783 vues33 diapositives
201704624- e-privacy 2017 - summer edition - 24000 dati par
201704624- e-privacy 2017 - summer edition  - 24000 dati201704624- e-privacy 2017 - summer edition  - 24000 dati
201704624- e-privacy 2017 - summer edition - 24000 datiyasoiler
292 vues16 diapositives

Similaire à Day 02 - EDPS Technology & Privacy unit.pdf(20)

Legal certainty as a tool for the spread of the internet of things par Guido Noto La Diega
Legal certainty as a tool for the spread of the internet of thingsLegal certainty as a tool for the spread of the internet of things
Legal certainty as a tool for the spread of the internet of things
Cloud Services As An Enabler: the Strategic, Legal & Pragmatic Approach par SLA-Ready Network
Cloud Services As An Enabler: the Strategic, Legal & Pragmatic ApproachCloud Services As An Enabler: the Strategic, Legal & Pragmatic Approach
Cloud Services As An Enabler: the Strategic, Legal & Pragmatic Approach
Webinar: Why risk managers should look at Artificial Intelligence now? par FERMA
Webinar: Why risk managers should look at Artificial Intelligence now?Webinar: Why risk managers should look at Artificial Intelligence now?
Webinar: Why risk managers should look at Artificial Intelligence now?
FERMA783 vues
201704624- e-privacy 2017 - summer edition - 24000 dati par yasoiler
201704624- e-privacy 2017 - summer edition  - 24000 dati201704624- e-privacy 2017 - summer edition  - 24000 dati
201704624- e-privacy 2017 - summer edition - 24000 dati
yasoiler292 vues
EU Investment Programs in AI and Blockchain par Soren Gigler
EU Investment Programs in AI and Blockchain EU Investment Programs in AI and Blockchain
EU Investment Programs in AI and Blockchain
Soren Gigler6.9K vues
Trends and Prospects in the Information Society: Hungary and the New Member S... par Filipe Mello
Trends and Prospects in the Information Society:Hungary and the New Member S...Trends and Prospects in the Information Society:Hungary and the New Member S...
Trends and Prospects in the Information Society: Hungary and the New Member S...
Filipe Mello902 vues
eGovernment for Citizen: Leveraging Open SOA Standards and Interoperability ... par Adomas Svirskas
eGovernment for Citizen:  Leveraging Open SOA Standards and Interoperability ...eGovernment for Citizen:  Leveraging Open SOA Standards and Interoperability ...
eGovernment for Citizen: Leveraging Open SOA Standards and Interoperability ...
Adomas Svirskas469 vues
L'economia europea dei dati. Politiche europee e opportunità di finanziamento... par Data Driven Innovation
L'economia europea dei dati. Politiche europee e opportunità di finanziamento...L'economia europea dei dati. Politiche europee e opportunità di finanziamento...
L'economia europea dei dati. Politiche europee e opportunità di finanziamento...
e-SIDES workshop at EBDVF 2018, Vienna 14/11/2018 par e-SIDES.eu
e-SIDES workshop at EBDVF 2018, Vienna 14/11/2018 e-SIDES workshop at EBDVF 2018, Vienna 14/11/2018
e-SIDES workshop at EBDVF 2018, Vienna 14/11/2018
e-SIDES.eu53 vues
PECB Webinar: The Internet of Things par PECB
PECB Webinar: The Internet of ThingsPECB Webinar: The Internet of Things
PECB Webinar: The Internet of Things
PECB 576 vues
North European Cybersecurity Cluster - an example of the regional trust platf... par DATA SECURITY SOLUTIONS
North European Cybersecurity Cluster - an example of the regional trust platf...North European Cybersecurity Cluster - an example of the regional trust platf...
North European Cybersecurity Cluster - an example of the regional trust platf...
Jan Langedijk, Siemens par Dutch Power
Jan Langedijk, SiemensJan Langedijk, Siemens
Jan Langedijk, Siemens
Dutch Power439 vues
From E-Government to Open Government par Johann Höchtl
From E-Government to Open GovernmentFrom E-Government to Open Government
From E-Government to Open Government
Johann Höchtl4.8K vues
Privacy Regulations and Your Digital Setup par Piwik PRO
Privacy Regulations and Your Digital SetupPrivacy Regulations and Your Digital Setup
Privacy Regulations and Your Digital Setup
Piwik PRO8.6K vues

Plus de Support for Improvement in Governance and Management SIGMA

Omnichannel management, by Willem Pieterson - SIGMA Webinars on service desig... par
Omnichannel management, by Willem Pieterson - SIGMA Webinars on service desig...Omnichannel management, by Willem Pieterson - SIGMA Webinars on service desig...
Omnichannel management, by Willem Pieterson - SIGMA Webinars on service desig...Support for Improvement in Governance and Management SIGMA
5 vues61 diapositives
eZdravlje, by Vladimir Raickovic - SIGMA Webinars on service design and deliv... par
eZdravlje, by Vladimir Raickovic - SIGMA Webinars on service design and deliv...eZdravlje, by Vladimir Raickovic - SIGMA Webinars on service design and deliv...
eZdravlje, by Vladimir Raickovic - SIGMA Webinars on service design and deliv...Support for Improvement in Governance and Management SIGMA
3 vues17 diapositives
E-Gov, by Emir Ramadanovic (bih) - SIGMA Webinars on service design and deliv... par
E-Gov, by Emir Ramadanovic (bih) - SIGMA Webinars on service design and deliv...E-Gov, by Emir Ramadanovic (bih) - SIGMA Webinars on service design and deliv...
E-Gov, by Emir Ramadanovic (bih) - SIGMA Webinars on service design and deliv...Support for Improvement in Governance and Management SIGMA
5 vues11 diapositives
PPT - SIGMA-GIZ Academies - Topic 4 - 1.1 - Germany Life Events Survey - EXT.pdf par
PPT - SIGMA-GIZ Academies - Topic 4 - 1.1 - Germany Life Events Survey - EXT.pdfPPT - SIGMA-GIZ Academies - Topic 4 - 1.1 - Germany Life Events Survey - EXT.pdf
PPT - SIGMA-GIZ Academies - Topic 4 - 1.1 - Germany Life Events Survey - EXT.pdfSupport for Improvement in Governance and Management SIGMA
6 vues24 diapositives
PPT - SIGMA-GIZ Academies - Topic 4 - Amenia - Citizen Feedback Platform.pdf par
PPT - SIGMA-GIZ Academies - Topic 4 - Amenia - Citizen Feedback Platform.pdfPPT - SIGMA-GIZ Academies - Topic 4 - Amenia - Citizen Feedback Platform.pdf
PPT - SIGMA-GIZ Academies - Topic 4 - Amenia - Citizen Feedback Platform.pdfSupport for Improvement in Governance and Management SIGMA
48 vues8 diapositives
PPT - SIGMA-GIZ Academies - Topic 4 - Azerbaijan - Public Service Design.pdf par
PPT - SIGMA-GIZ Academies - Topic 4 - Azerbaijan - Public Service Design.pdfPPT - SIGMA-GIZ Academies - Topic 4 - Azerbaijan - Public Service Design.pdf
PPT - SIGMA-GIZ Academies - Topic 4 - Azerbaijan - Public Service Design.pdfSupport for Improvement in Governance and Management SIGMA
49 vues37 diapositives

Plus de Support for Improvement in Governance and Management SIGMA (20)

Dernier

University of Cambridge: COP28 briefing par
University of Cambridge: COP28 briefingUniversity of Cambridge: COP28 briefing
University of Cambridge: COP28 briefingEnergy for One World
14 vues33 diapositives
Mitchells_Burning_issue_.pptx par
Mitchells_Burning_issue_.pptxMitchells_Burning_issue_.pptx
Mitchells_Burning_issue_.pptxmryoung5
15 vues13 diapositives
Support Girl students with Education par
Support Girl students with EducationSupport Girl students with Education
Support Girl students with EducationSERUDS INDIA
7 vues6 diapositives
Research - Asrayan Project of BD par
Research  - Asrayan Project of BDResearch  - Asrayan Project of BD
Research - Asrayan Project of BDMd. Masudur Rahman, PMP
15 vues25 diapositives
East godavari_art63.pdf par
East godavari_art63.pdfEast godavari_art63.pdf
East godavari_art63.pdfnarsireddynannuri1
6 vues2 diapositives
World Soil Day 2023 Key messages. par
 World Soil Day 2023 Key messages. World Soil Day 2023 Key messages.
World Soil Day 2023 Key messages.Christina Parmionova
8 vues2 diapositives

Dernier(20)

Mitchells_Burning_issue_.pptx par mryoung5
Mitchells_Burning_issue_.pptxMitchells_Burning_issue_.pptx
Mitchells_Burning_issue_.pptx
mryoung515 vues
Support Girl students with Education par SERUDS INDIA
Support Girl students with EducationSupport Girl students with Education
Support Girl students with Education
SERUDS INDIA7 vues
Job Posting - Fire Inspector, PT.pdf par NorthwestBOCA
Job Posting - Fire Inspector, PT.pdfJob Posting - Fire Inspector, PT.pdf
Job Posting - Fire Inspector, PT.pdf
NorthwestBOCA28 vues
Cover Letter for Canada VISITOR visa.pdf par Ariful Saimon
Cover Letter for Canada VISITOR visa.pdfCover Letter for Canada VISITOR visa.pdf
Cover Letter for Canada VISITOR visa.pdf
Ariful Saimon8 vues
Time Management PowerPoint.pptx par aschalew40
Time Management PowerPoint.pptxTime Management PowerPoint.pptx
Time Management PowerPoint.pptx
aschalew405 vues
Assets of Community Value: From a Local Council Perspective par Scribe
 Assets of Community Value: From a Local Council Perspective Assets of Community Value: From a Local Council Perspective
Assets of Community Value: From a Local Council Perspective
Scribe 21 vues
Mapping location and co-location of industries at the neighborhood level - A... par OECD CFE
Mapping location and co-location of industries at the neighborhood level  - A...Mapping location and co-location of industries at the neighborhood level  - A...
Mapping location and co-location of industries at the neighborhood level - A...
OECD CFE7 vues
MMF Newsletter Februar 2022.pdf par mmpcofficial
MMF Newsletter Februar 2022.pdfMMF Newsletter Februar 2022.pdf
MMF Newsletter Februar 2022.pdf
mmpcofficial7 vues

Day 02 - EDPS Technology & Privacy unit.pdf

  • 1. EUROPEAN DATA PROTECTION SUPERVISOR The EU’s independent data protection authority Data-protection in the Western Balkans and Eastern Partnership Region EDPS Technology & Privacy unit Massimo ATTORESI Deputy Head of T&P unit 19 September 2023
  • 2. 2 A bit about the TP unit: our story 2012 2019 2023 Technology Sector created 2 people Our Composition and Expertise –Multidisciplinarystaff with focus on technologicaland scientific research Expertise in Telecommunications, Computer engineering, Computer science, Physics, Auditing, Information security etc. Technology sector becomes Technology and Privacy unit 8 people Technology unit grows to 15 people
  • 3. Technology & Privacy Unit 3 The Supervisor Secretary/General Cabinet Supervision & Enforcement Policy & Consultation Technology & Privacy Governance & Internal Compliance Information & Communication HR, Budget & Administration EDPB Secretariat
  • 4. 4 What T&P Unit does? Support functions SupportPolicy and Consultation Unit in technologicial matters (informal-formal Consultations, Opinions). Participation in EDPB subgroups, international fora (GPA, Spring Conference, int. organisations) Direct Attributions SupportSupervision and EnforcementUnit in technological matters (prior consultations, mainly in AFSJ, joint Audits/Investigations, Complaints). In a few cases, with high technological focus, TP is on the lead. Supportour Director in Security Functions LSO and LISO Functions. Technology monitoring & foresight Techsonar, TechDispatch, IPEN organisation, preparation guidelines specific topics, training in PETS, collaboration with other organisations in technology matters ( in the EU, such as ENISA, international, such as IWGDPT/Berlin Group), support Supervisor & Sec Gen Technology and Privacy Unit IT function EDPS own IT needs as an institution: IT Strategy, IT Governance, Local IT support. Own systems, NextCloud, EuVideo-Voice, PKI infrastructure. Auditing tolos such as WEC, mobile apps lab. IT Audits Mainly in the context of Large Scale IT Systems and Coordinated Supervision. Data Breach Notification Handling
  • 5. 6 How are we organised? Management Luis Velasco (HoU) Massimo Attoresi (DHoU) Technology Monitoring and Foresight Sector System Oversight and Technology Audits Digital Transformation • IRM – IT Governance • ICDT • IT Strategy, IT Feasibility Study • SLA EP • Local IT function • Innovation Projects • IT audits on Large Scale IT systems • Other IT audits outside ASFJ area • Data breach notifications, DBN Guidelines and DBN system • Expertise in AFSJ including support the other two sectors and to P&C, S&E and EDPB • DPO meetings • Technological expertise including support the other two sectors and to PC and SE in the rest of topics, Digital Euro, Cloud, AI, Blockchain, Surveillance, Finance, Health, eGovernment, Data Spaces.... • Guidelines on technology topics • Foresight activities. TechSonar & TechDispatch • Contributions to EDPB in topics above • IPEN Organisation • Berlin Group, GPA....
  • 6. 7 Personal Data Breaches • “a breach of security leading to the accidental unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed” EUDPR Art. 3(16)
  • 7. 8 Personal Data Breaches Root causes of personal data breaches 2019-2022
  • 8. 9 Our topics of interest
  • 10. 11 Technology Monitoring: TechSonar (Foresight dimension) TechSonar aims to anticipate emerging technology trends: the main aim of this initiative is to better understand future developments in the technology sector from a data protection perspective.
  • 11. 12 Technology Monitoring: TechDispatch Smart speakers Connected Cars Contact Tracing with Apps Quantum Computing Facial Emotion Recognition Card Based Systems Federated Social Media Platforms TechDispatch provides factual descriptions of a new technology, preliminarily assesses possible impacts on privacy and the protection of personal data, as we understand them now, and provides links to further recommended reading.
  • 12. 13 Technology Monitoring: IPEN network The purpose of exchange with Academia and Engineers in the IPEN Network is to bring together developers and data protection experts with a technical background from different areas in order to launch and support projects that build privacy into everyday tools and develop new tools that can effectively protect and enhance our privacy. IPEN2023 – Explainable AI IPEN2022 - CBDC IPEN2022 - DigitalIdentity IPEN2021 - Pseudonymisation IPEN2021 SyntheticData Webinar IPEN2020 - Contact Tracing Apps webinar IPEN2020 - Encryption webinar IPEN2020 - Online Workshop IPEN2020 - Panel on Web Tracking IPENWorkshop 2019 - Rome IPENData Protection Day Workshop 2019 IPENWorkshop 2018 - Barcelona IPENWorkshop 2017 - Vienna IPENWorkshop 2016 - Frankfurt IPENWorkshop 2015 - Leuven IPENWorkshop 2014 – Berlin
  • 13. • Guidelineson personal data and electronic communicationsin the EU institutions (eCommunicationsguidelines) • Guidelineson Personal Data BreachNotification • IT governanceand IT management • Guidelineson the use of cloud computing services by the Europeaninstitutions and bodies • Mobile Devices • Mobile Applications • Web Services • Security Measures for Personal Data Processing 14 Technology & Privacy – EDPS Guidelines
  • 14. 15 The Web is watching you: Watch back with the “WEC”
  • 15. 16 Various Compliance Tools for Website Controllers Cloud Solutions • Qualys SSL Labs (HTTPS check) • Cookiebot (Cookiecheck) • PrivacyScore, Webbkoll (Cookies, HTTPS, etc.) • OneTrust (Cookiecheck) Problems • no scans in intranets • confidentiality or compliance issues • transparency, reproducibility of the cloud solution On-Premise Solutions • OpenWPM by Mozilla • WebXray • Developer Toolbar (Firefox and Chrome) • Website Evidence Collector bytheEDPS • Website Evidence Collector by the EDPS
  • 16. 17 Website Evidence Collector (WEC) from the EDPS Features • automated, reproducible evidence collection • records screenshots, cookies, traffic, potential web beacons, HTTPS security • no legal judgements: data protectionlaw agnostic Output • machine- and human-readable output • with many details to identify tracking issues
  • 17. 18 Digital Sovereignty – EDPS Fediverse pilots • EDPS launched on 28 April 2022 Fediverse pilot and invites other EU institutions to participate. • EU Voice powered by Mastodon with 35 accounts of EU institutions, bodies, agencies https://social.network.europa.eu • EU Video powered by Peertube with about 6 accounts https://tube.network.europa.eu(originally EU Tube) ...and an ongoing Pilot on a sovereign Cloud - NextCloud collaborationtools
  • 18. T&P unit follows closely EU legislative developments with a significant technology dimension. Files include: • The ArtificialIntelligence Act (AIA) • Digital Services Act (DSA), the Digital Markets Act (DMA), the Data Governance Act (DGA) and the Data Act • Regulation as regards establishing a framework for a European Digital Identity • Digital Euro joint Opinion with the EDPB • Regulation laying down rules to prevent and combat child sexual abuse • Regulation on the digitalisationof the visa procedure • Directiveon informationexchange between law enforcement authorities of Member States 19 Legislative proposals followed by T&P
  • 19. 20 Collaboration with EDPB and EDPB secretariat • Interface with the European Parliament for the provisionof general basic services to all the EDPS units including the EDPB Secretariat • Collaborationwith EDPB Secretariat in the organisation of the Website Audit BootCamp • Participationin the EDPB “ChatGPT taskforce” • Management of projects using EDPB Expert pool of experts in the field of ArtificialIntelligence. • Collaborationin TECH subgroup within the EDPB. Co-rapporteurs in multiple documents such pseudo-anonymisation, blockchain, .... • Supervision of Large Scale IT Systems and contributionto the Coordianted Supervision Committee
  • 20. 21 Artificial Intelligence & AI Act • EDPS has been identifying and assessing AI risks under GDPR/EUDPR • AI Act identifies the EDPS as the AI competent authority for the EU institutions • Preparations will start to understand our tasks, interaction with MSs national competent and market authorities, interaction with applicable data protectionlaw, the role of « regulatory sandboxes »
  • 21. @EU_EDPS European Data Protection Supervison EDPS The EU’s independent data protection authority EUROPEAN DATA PROTECTION SUPERVISOR Some icons from https://www.flaticon.com/ Word cloud created in https://wordart.com