Data
CJEU: judicial review of ground, evidence of supervisory authority’s data processing
Today, 16 November 2023, the Court of Justice of the EU (CJEU) released its judgement in case C-333/22 Ligue des droits humains. According to the Court, the decision of the result of the assessment by a national supervisory authority regarding the lawfulness of the data processing is susceptible to judicial review. It will enable the…
NIST: public consultation of data classification and concepts to improve its protection
Yesterday, 15 November 2023, the U.S. National Cybersecurity Center of Excellence (NCCoE) published the initial version of the U.S. National Institute of Standards and Technology (NIST) Internal Report on Data Classification Concepts and Considerations for Improving Data Protection. The public consultation is open until 9 January 2024. The report introduced the notion of data classification…
France: Data processing system in harassment investigation
On 7 November, the Ministry of Education and Youth released the Decree 2023-1027 on implementation of the data processing system of the harassment investigation in elementary, middle and high schools. It provides the processing purposes, including bullying incidents information, detecting, preventing and resolving measures. Furthermore, the Decree enumerates the persons who may access responses to…
Quebec: Privacy policies of public agencies collecting personal data
Today, 8 November 2023, Quebec government published Decree 1544-2023 dated 25 October 2023 on the privacy policies of public bodies collecting personal data by technological measure. It provides the compulsory content of privacy policy required under art. 63.4 chapter A-2.1 Law on access of public bodies’ documents and personal data protection. The policy must define…
Government of Canada on the AI and Data Act (AIDA)
On 13 March 2023, Trudeau’s government released the Companion document, introducing the AI and Data Act (AIDA).