The European Data Protection Commission (DPC) has launched an investigation into Google over its compliance with General Data Protection Regulation (GDPR) in relation to its AI model, Pathways Language Model 2 (PaLM 2). The focus is on whether Google conducted a required Data Protection Impact Assessment (DPIA) before processing EU citizens’ personal data to develop this AI model. DPIAs help protect against the dangers associated with high-risk data processing activities.
This inquiry is part of a broader regulatory effort in the EU to ensure generative AI adheres to privacy regulations, adding to Google’s ongoing legal challenges. Google is also facing a US antitrust trial and scrutiny over its advertising practices.
What’s the lesson here?
With regulations like GDPR and other data protection laws becoming stricter, companies need to prioritize regulatory compliance—especially those working with AI models. Take a proactive approach to ensure you’re aware of your obligations, like the EU’s upcoming Digital Operational Resilience Act (DORA), which allows financial entities to handle digital disruptions, better manage their ICT risks, report on incidents, and more.
What other topics are trending?
- HP’s new remote support service can even resurrect unbootable PCs: Launching Nov. 1st, the industry’s first out-of-band diagnostics and remediation capability will enable remote technicians to connect, diagnose, and fix problems, even if the PC won’t boot—with permission from the user, of course.
- Meta fined €91 million for storing millions of Facebook and Instagram passwords in plaintext: The fine is a result of an inquiry into the social media giant’s 2019 GDPR violation, which led to the exposure of a subset of users’ passwords in plaintext (i.e., without cryptographic protection or encryption).
- Delphix launches 2024 State of Data Compliance and Security Report: In the must-read report for data security leaders, it’s revealed that 54% of organizations have already experienced a data breach or theft involving sensitive data in non-production environments, even though 91% are concerned about the expanded exposure footprint in non-production. To top it off, 68% perceive a lack of solutions to tackle data privacy in AI environments.
The Soapbox: Online conversations you don’t want to miss
Featuring insights from our Co-Founder & CTO, James Ciesielski.
What are the biggest cybersecurity mistakes many people make but are easily fixed?
James’ take? A healthy dose of paranoia will go a long way to keeping those cybersecurity mistakes at bay. When it comes to operating online, it’s best to pause and think before proceeding: “Did I expect to receive this email from an unknown sender? Does that person need access to this particular data or system? I should check to see if this service supports MFA before I log out!” This frame of thought can mitigate many data security risks and prevent problems before they arise.
Join the conversation on Reddit.
Why are you NOT interested in automation?
James’ take? I love setting it and forgetting it as much as the next person, especially when it comes to securing your SaaS data with automatic backups. But in other scenarios, sometimes it is just faster to do it yourself. Just keep in mind that often, the ongoing maintenance that comes with the DIY method just isn’t worth it—and it might not save you time in the long run if it doesn’t work when you need it to!
Join the conversation on Reddit.
Subscribe to Retro for more!
Like what you read? Subscribe to Retro so you don’t miss any of our industry’s top stories and conversations.
Miriam Saslove">
