Kathrin Gardhouse

Leia em português aqui The Lei Geral de Proteção de Dados (LGPD), Brazil’s answer to data privacy, determines the rules organizations that handle personal data have to follow, unless they anonymize the data. This article delves into data anonymization, pseudonymization and what that means for data processing activities, as well as the LGPD’s stringent response … Read more

The realm of generative AI, encompassing technologies that generate content like text, images, and videos, have seen a significant surge in usage and development. In response, the Office of the Privacy Commissioner of Canada (OPC) has introduced key privacy principles tailored to generative AI technologies on December 7, 2023. This framework is crucial for organizations … Read more

Data security and integrity are two critical concepts in the world of cybersecurity. While they are often discussed together, they have distinct definitions and implications. Data security encompasses the processes and technical safeguards established to preserve data integrity, as well as confidentiality and availability of data. In this article, we will dive into the details … Read more

In the era of digital transformation, Large Language Models (LLMs) have emerged as powerful tools for businesses, enabling them to automate tasks, generate insights, and improve decision-making. However, the use of these models also brings forth significant privacy challenges. Despite the inherent privacy protections in enterprise solutions like Microsoft Azure OpenAI Services, residual privacy issues … Read more

Quebec’s commitment to modernizing its data protection measures is evident in the provisions of Law25, the most important provisions of which came into effect on September 22, 2023. A significant component of this new legislation is the requirement for private companies to conduct Privacy Impact Assessments (PIAs). While already mandatory in certain circumstances for public … Read more

The Biden-Harris Administration recently enacted a sweeping Executive Order to forge America’s path in responsible AI development, encouraging both innovation and risk mitigation. The Executive Order spells out a multi-faceted plan touching upon AI safety and security, privacy, equity, civil rights, and more, with profound implications for organizations that are already embedded in the AI … Read more

The recently amended EU AI Act proposal we introduced in this blog post, would regulate “foundational models,” defined in Art. 3(1c) as “an AI model that is trained on broad data at scale, is designed for generality of output, and can be adapted to a wide range of distinctive tasks.” This blog post sets out … Read more

In the digital transformation era, Large Language Models (LLMs) like ChatGPT are increasingly being integrated into organizational workflows to boost efficiency and enrich customer experience. Self hosting these LLMs appears to be a viable solution to address privacy concerns, but it’s not entirely without its challenges. This article explores the residual privacy issues that persist … Read more

Explore the key differences and similarities between Quebec’s Law25 and the European Union’s GDPR in this in-depth comparison.

Explore the key differences and similarities between Quebec’s Law25 and the European Union’s GDPR in this in-depth comparison.