Wednesday, October 06, 2021

Privacy Foundation ( https://www.law.du.edu/privacy-foundation ) news: Please note we have moved the fall Privacy Seminar to Friday November 12th--- 10 to 1 p.m. Topic is HIPAA/Privacy

I will provide more detail as it becomes available.



The hacking business prospers.

https://www.databreaches.net/identity-theft-resource-center-to-share-latest-data-breach-analysis-with-u-s-senate-commerce-committee-number-of-data-breaches-in-2021-surpasses-all-of-2020/

Identity Theft Resource Center to Share Latest Data Breach Analysis With U.S. Senate Commerce Committee; Number of Data Breaches in 2021 Surpasses all of 2020

SAN DIEGO, Oct. 6, 2021 /PRNewswire-PRWeb/ — Today, the Identity Theft Resource Center® (ITRC), a nationally recognized nonprofit organization established to support victims of identity crime, released its U.S. data breach findings for the third quarter (Q3) of 2021. According to the data breach analysis, the number of data breaches publicly-reported in the U.S. decreased nine (9) percent in Q3 2021 (446 breaches) compared to Q2 2021 (491 breaches). However, the number of data breaches through September 30, 2021 has exceeded the total number of events in Full-Year (FY) 2020 by 17 percent (1,291 breaches in 2021 compared to 1,108 breaches in 2020). The trendline continues to point to a record-breaking year for data compromises (the all-time high of 1,529 breaches was set in 2017).

For Q3 2021, the number of data compromise victims (160 million) is higher than Q1 and Q2 2021 combined (121 million). The dramatic rise in victims is primarily due to a series of unsecured cloud databases, not data breaches. Also, the total number of cyberattack-related data compromises year-to-date (YTD) is up 27 percent compared to FY 2020. Phishing and Ransomware continue to be, far and away, the primary attack vectors.

Download the ITRC’s 2021 Q3 Data Breach Analysis and Key Takeaways



Much more narrow than a geofence request, still too broad?

https://www.pogowasright.org/government-secretly-orders-google-to-identify-anyone-who-searched-a-sexual-assault-victims-name-address-and-telephone-number/

Government Secretly Orders Google To Identify Anyone Who Searched A Sexual Assault Victim’s Name, Address And Telephone Number

Thomas Brewster reports:

In 2019, federal investigators in Wisconsin were hunting men they believed had participated in the trafficking and sexual abuse of a minor. She had gone missing that year but had emerged claiming to have been kidnapped and sexually assaulted, according to a search warrant reviewed by Forbes. In an attempt to chase down the perpetrators, investigators turned to Google, asking the tech giant to provide information on anyone who had searched for the victim’s name, two spellings of her mother’s name and her address over 16 days across the year. After being asked to provide all relevant Google accounts and IP addresses of those who made the searches, Google responded with data in mid-2020, though the court documents do not reveal how many users had their data sent to the government.

Read more on Forbes.



Wake up and smell the customer?

https://www.cpomagazine.com/data-privacy/how-product-leads-should-be-thinking-about-educating-users-on-data-collection/

How Product Leads Should Be Thinking About Educating Users on Data Collection

According to a McKinsey survey, three in 10 US internet users utilize ad-blocking software to prevent companies from tracking their online behavior. Furthermore, 87 percent of survey participants said they wouldn’t do business with an organization if they were worried about the company’s security practices, and 71 percent said they would stop working with a company altogether if they found out the company had given away their private data without their express permission.

The numbers speak for themselves—data privacy isn’t optional anymore, and if companies treat customers’ privacy lightly, they’re going to lose them. Instead, by prioritizing security, organizations can build brand trust and improve relationships with valued consumers, a business proposition that’s good for everyone.



Too far? Is this a signal that they don’t believe they can control the use of this technology?

https://www.politico.eu/article/european-parliament-ban-facial-recognition-brussels/

European Parliament calls for a ban on facial recognition

The European Parliament today called for a ban on police use of facial recognition technology in public places, and on predictive policing, a controversial practice that involves using AI tools in hopes of profiling potential criminals before a crime is even committed.

In a resolution adopted overwhelmingly in favor, MEPs also asked for a ban on private facial recognition databases, like the ones used by the controversial company Clearview AI.



This presumes that intelligence operatives (open source or other) have not already captured and filed the data being deleted. (Or at least capture the data someone is requesting be deleted.)

https://www.bespacific.com/the-right-to-be-forgotten-and-its-unintended-consequences-to-intelligence-gathering/

The Right to be Forgotten and its Unintended Consequences to Intelligence Gathering

Goldfield, Charlene, ‘The Right to be Forgotten’ and its Unintended Consequences to Intelligence Gathering (July 1, 2020). Volume 32, Issue 2, Winter 2020, Available at SSRN: https://ssrn.com/abstract=3898887

Social media has dramatically changed how we interact and communicate with one another. The reliance on social media has also sparked many international debates revolving around privacy. We have seen the enactment of the comprehensive privacy law in the European Union, the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) in the United States—both enacted in 2018. In the GDPR, Article 17 known as the “Right to Be Forgotten” (RTBF) principle allows for data subjects to request that their information be removed from online service providers like social media companies. In recent years, cases from the Court of Justice for the European Union have expanded these RTBF principles through three major cases: Google LLC v. Commission nationale de l’informatique et des libertés (CNIL), GC v. Commission nationale de l’informatique et des libertés (CNIL), and Glawischnig-Piesczek v. Facebook. This Article argues that the RTBF model will present unintended consequences to Open Source Intelligence (OSINT) by mandating online service providers to delete more data than necessary based on the pressures placed on these online service providers by the recent Court of Justice for the European Union (CJEU) cases. This will lead to problems in the Intelligence Community when obtaining open source intelligence especially when scrubbing social media information. This RTBF system will make it easier for terrorist groups, terrorist sympathizers or any other associated individuals to hide behind a process by which they can easily delete data that was not so easily removable before RTBF. Lastly, this Article proposes legal, procedural, and oversight solutions to address the issues caused by RTBF and OSINT.”



Sic ‘em, Terminator!”

https://www.natlawreview.com/article/artificial-intelligence-and-antitrust-activity

Artificial Intelligence and Antitrust Activity

In a recently published paper, a pair of academics propose that the application of artificial intelligence can offer a potent weapon against antitrust behavior in the Big Tech sector. This is the very industry that has advanced this technology, noted one of those academics, Giovana Massarotto, a Center for Technology, Innovation and Competition academic fellow at the University of Pennsylvania Carey Law School and an adjunct professor at the University of Iowa. She underscored this fact in an article for Bloomberg Law, in which she maintains that “the present economic democracy propaganda against Big Tech is not the solution to increase competition in fast-moving technology markets.” In fact, she says, the industry’s ingenuity is needed to achieve our nation’s pro-competition goals.

In an article they wrote for Stanford Computational Antitrust about AML, they say that “a relatively simple algorithm can, in an autonomous manner, discover underlying patterns from past antitrust cases by computing the similarity between these cases based on their measurable characteristics.”



Freebies – Always worth the price?

https://www.marktechpost.com/introduction-to-machine-learning-with-python-course-free/

Introduction To Machine Learning With Python Course (FREE)


(Also priceless…)

https://finance.yahoo.com/news/truera-launches-free-ai-quality-070000966.html

TruEra launches free AI Quality course for Data Scientists, led by Professor at Carnegie Mellon University

TruEra, a global provider of AI Quality solutions, has today announced the launch of its first free course for data science practitioners. The live, online course ‘AI Quality: Driving ML Performance and Trustworthiness,’ will run over four consecutive weeks from October 27 to November 17, 2021.


No comments: