Site is undergoing maintenance! Please check back shortly

Leveraging Private AI to Meet the EDPB’s AI Audit Checklist for GDPR-Compliant AI Systems

As the European Union continues to strengthen its data protection and artificial intelligence (AI) regulations, organizations are seeking innovative ways to ensure compliance. Private AI, a cutting-edge approach to machine learning that prioritizes data privacy, has emerged as a powerful tool in this landscape. This article explores how Private AI can help organizations adhere to … Read more

Handling Personal Information by Financial Institutions in Japan – The Strict Requirements of the FSA Guidelines

Under the APPI, businesses must adhere to strict rules regarding the processing of personal information, in particular when it comes to the disclosure or transfer of such information. However, in the financial services industry, there are additional rules, the Comprehensive Guidelines for Supervision of Financial Instruments Business operators, etc. (the “Guidelines”),  that increase the bar … Read more

Who is Responsible for Protecting PII?

Protetcing PII

Personally identifiable information (PII) is any data that can be used to identify an individual directly or indirectly, such as their name, social security number, date of birth, gender, ZIP code, and more. If this information falls into the wrong hands, it can lead to identity theft, financial fraud, and other forms of harm to … Read more

How Private AI can help the Public Sector to Comply with the Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024

Ontario’s Bill 194, formally known as the Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024, represents a crucial legislative shift, aiming to fortify digital security and elevate trust within public sector entities. This act is significant not only for its broad coverage, which includes institutions under the Freedom of Information and … Read more

A Comparison of the Approaches to Generative AI in Japan and China

In the rapidly evolving landscape of generative AI, distinct regulatory and ethical approaches have emerged, reflecting the values, ambitions, and constraints of various global players. We previously delved into the contrasting strategies of the United States and the European Union, two titans in the realm of artificial intelligence. Today, we broaden our lens to encompass … Read more

Updated OECD AI Principles to keep up with novel and increased risks from general purpose and generative AI

On May 3, 2024, the OECD released updated AI Principles that build upon the 2019 version with some notable differences that respond to risks emerging from latest technological developments such as general purpose and generative AI systems. This article contains a summary of the changes as well as a line-by-line comparison of the old and … Read more

Is Consent Required for Processing Personal Data via LLMs?

Under the General Data Protection Regulation (GDPR), consent is only one of the legal bases that can be used to process personal data, including when using Large Language Models (LLMs) to boost the efficiency of processing personal information. While obtaining consent has its advantages, for example the possibility of a clear audit trail if consent … Read more

The evolving landscape of data privacy legislation in healthcare in Germany

The healthcare sector has witnessed a remarkable evolution in data privacy legislation from the 1970s to the present, mirroring the technological innovations of the time. The journey we trace here using Germany as an example illustrates how laws have struggled to adapt to protect and make usable sensitive health information against the backdrop of digital … Read more

The CIO’s and CISO’s Guide for Proactive Reporting and DLP with Private AI and Elastic

Being able to manage the data and information within a company’s infrastructure is critical for properly assessing when sensitive information is either being mismanaged or to report an “all clear” when company policies are being followed as intended. As you may be already aware, Private AI provides PII detection and redaction services to enable companies … Read more

The Evolving Landscape of Health Data Protection Laws in the United States

The healthcare sector in the United States has seen a profound transformation in its approach to data privacy, paralleling significant technological advancements, in particular the electronic health record (EHR). This article explores the trajectory of health data protection legislation in the U.S., highlighting key developments in EHR development and adoption and ongoing challenges in balancing … Read more