GDPR Now!

GDPR Now!

By Karen Heaton/Data Protection 4 BusinessBusinessNewsBusiness NewsManagement
Download on the App Store

GDPR Now! episodes

  • Episode 31: Challenging the Privacy narrative

    In this episode, we discuss, controversially, why data privacy, including regulations like GDPR, are counterproductive and why we would all be better off without the current notion of data privacy.

    Our special guest, Ben Malisow, is our 'privacy provocateur' on our show and talks about why he believes we are living an 'illusion of privacy'.

    Ben has over 30 years experience in information security and education and is currently a professional certification training lead for SGS Cybersecurity Services, a multinational corporation involved in a wide range of product and process certification/validation.

    Some of Ben’s roles have also included professor of English, a computer teacher for troubled teens as well as his extensive experience working with clients such as FedEx, US Special Forces Command, the United Nations, HSBC, and Barclays.

    Ben is the author of ''Exposed: How Revealing Your Data and Eliminating Privacy Increases Trust and Liberates Humanity.''

    GDPR Now! Is brought to you by Data Protection 4 Business.

    www.dpo4business.co.uk

    Guest

    Ben Malisow
    Professional Certification Training Lead for SGS
    Website: https://www.securityzed.com/
    Twitter: https://twitter.com/BenMalisow
    LinkedIn: https://www.linkedin.com/in/malisow

    Special Guest: Ben Malisow.

    42 min
  • Episode 30: The Future: Proving your Identity

    In this episode, we talk about the future of credential management – Self Sovereign Identity (SSI) also known as decentralised identity. SSI is an efficient, secure and privacy enhancing solution for identity verification. It puts individuals at the centre of the verification process and is the future of identity management.

    Our special guest, James Monaghan, talks about how Evernym provides solutions in the area of SSI for businesses today. We talk about what SSI means, how it works, the benefits for individuals and businesses and importantly, examples of how it is being used to great effect today.

    For any businesses interested in learning more about how they could benefit from building an SSI or decentralised identity solution, please contact James directly.

    As we enter what is arguably, the start of our journey into a new era of digital innovation with huge benefits to individuals and businesses, we are excited to follow developments around the growth of Self Soverign Identity.

    GDPR Now! Is brought to you by Data Protection 4 Business & This Is DPO.

    www.dpo4business.co.uk
    www.thisisdpo.co.uk

    Guest

    James Monaghan
    Vice President of Product Management at Evernym.

    Contact James on:

    Twitter: @james_monaghan
    https://www.linkedin.com/in/jamesmonaghan/

    World Web Consortium (W3C) specifications for existing SSI solutions:

    • Decentralised Identifiers https://www.w3.org/TR/did-core/
    • Verifiable Credentials https://www.w3.org/TR/vc-data-model/
    • Simple explainer about how this all works https://www.evernym.com/blog/gentle-introduction-verifiable-credentials/
    • Relevant industry bodies include:

      • The Decentralised Identity Foundation https://identity.foundation/
      • Trust over IP Foundation https://trustoverip.org/
      • Good Health Pass Collaborative https://www.goodhealthpass.org/
      • Special Guest: James Monaghan.

        43 min
      • Episode 29: Regulating the future of AI and ML

        In this episode, we are going to talk about the regulation of Artificial Intelligence and Machine Learning to understand what businesses need to think about from a regulatory perspective.

        Our special guest, Ben, talks about the global context of regulations around AI and the complexity of the parallel 'race to AI' and 'race to regulation' . In particular we look at the proposed Artificial Intelligence Act from the European Union and consider the impact on innovation.

        We explore what businesses and DPOs need to consider when building, using or deploying Machine learning or Artificial Intelligence systems.

        As we enter what is arguably, the start of our journey into a new era of innovation with huge benefits to humankind, this podcast will follow developments in and around the regulation of future Artificial Intelligence and Machine Learning.

        GDPR Now! Is brought to you by Data Protection 4 Business & This Is DPO.

        www.dpo4business.co.uk
        www.thisisdpo.co.uk

        Guest

        Benjamin Mueller
        Ben is a senior policy analyst at the Center for Data Innovation, focusing on AI and technology governance.

        Read Ben's note on: AI Act Explainer is here: https://datainnovation.org/2021/05/the-artificial-intelligence-act-a-quick-explainer/

        Special Guest: Benjamin Mueller.

        42 min
      • Episode 28: Digital Vaccine Passports and Certificates? What could possibly go wrong?

        In today’s episode, we are delving into the hot topic of Digital Vaccine Passports and Certificates. We outline the complex mix of technology, privacy and practical issues in a global context.

        As we did in Episodes 24 & 25, we look at the significant practical, technical and privacy issues surrounding how nation states and governments want to use technology to prove human beings can travel internationally, cross borders in the EU and get access to domestic venues, events, retail outlets and much more besides. Arguably a more complex problem to solve than tracking and tracing individuals.

        We consider the lack of effectiveness of the Track and Trace apps in the UK & EU and wonder how acceptable solutions can be found for Vaccine Passports and Certificates - a wider problem involving citizens, businesses, medical records and often new and emerging technology.

        Again, we find ourselves asking the same question: how do we find a rapid and effective way to discuss and agree the extended use of our data to manage this pandemic and halt the damage from lockdowns? We urgently need a forum to be able to have these discussions. As Privacy, Legal and Techology professionals we must contribute to solutions to help support governments to enable better pandemic management.

        There are far more questions than answers, so this episode will be the start of our journey to keep up to date with developments.

        GDPR Now! Is brought to you by Data Protection 4 Business & This Is DPO.

        www.dpo4business.co.uk
        www.thisisdpo.co.uk.

        Guests

        Roger Marlow
        Roger has worked in software for over 30 years with experience in building software for the finance, retail, automative and government sectors. He has been involved in the creation of several companies including a healthcare technology company that works for the NHS.

        Special Guest: Roger Marlow.

        48 min
      • Episode 26: What next for EU-US data transfers post-Privacy Shield? Keep hiding in that herd!

        The decision by the ECJ on 16th July 2020, to invalidate the EU - US Privacy Shield sent shockwaves across organisations in the EU and US. We are now in January 2021 and there have been some solutions offered by the European Commission.

        But how workable are they for businesses in practise??

        Join me, Karen Heaton and guest Mark Sherwood-Edwards, lawyer, data protection specialist and founder of Clearview Legal to discuss the latest pronouncements from the EC, on a revision of the Standard Contractual Clauses, Safeguards for transfers to the US (and other third countries) and of course, the impact of Brexit and what this will mean if the EC does not grant adequacy status to the UK.

        GDPR Now! Is brought to you by Data Protection 4 Business & This Is DPO.

        www.dpo4business.co.uk
        www.thisisdpo.co.uk.

        Guest

        Mark Sherwood-Edwards
        Founder
        www.clearviewlegal.co.uk

        Check out some great resources:

        FieldFisher Lawyer - Phil Lee on the revised SCCs
        https://www.fieldfisher.com/en/services/privacy-security-and-information/privacy-security-and-information-law-blog/first-impressions-new-eu-standard-contractual-clauses

        Tools to help with assessing data transfers

        Proteus-Cyber
        https://proteuscyber.com/Schrems-II-Automatic-SCC-contracts

        Special Guest: Mark Sherwood-Edwards.

        39 min
      • Episode 25: Track and Trace apps: What price for data privacy? We need to find better solutions.

        In today’s episode, we are delving into the issues we discussed in our previous episode #24 on the NHS Track and Trace app and considering in more detail the legal, privacy and practicality barriers to many track and trace apps in Europe.

        We discuss the take up of Track and Trace apps in the EU and find it is mostly 30% of the population and lower. Data privacy when using apps has been protected due to EU GDPR, however, other basic freedoms have been taken from us and our way of life severely impacted over the course of 2020. Track and trace apps have not had the hoped-for beneficial impact in the EU. Had we taken a different approach to using more data and made the apps mandatory, could the outcomes have been different?

        What does this mean in practise for track and trace apps as future solutions to help governments manage pandemics? Compare and contrast to other Asian countries.

        If 70 - 80% app usage is realistically needed to be effective, then why did we not make track and trace apps mandatory? What are we to learn from countries in Asia?

        How do we find a rapid and effective way to discuss and agree the extended use of our data to improve outcomes, rapidly, either during pandemics or outside of them? As Privacy, Legal and Tech professionals we must continue this conversation and find a framework for agreeing the greater use of data in a mandatory way to support better pandemic and health outcomes.

        The economic costs of lockdowns are extremely high and have a direct effect on a nation's ability to provide future healthcare. Our short term fix to today's problem could cause many more problems for the future.

        GDPR Now! Is brought to you by Data Protection 4 Business & This Is DPO.

        www.dpo4business.co.uk
        www.thisisdpo.co.uk.

        Guests

        Roger Marlow
        Roger has worked in software for over 30 years with experience in building software for the finance, retail, automative and government sectors. He has been involved in the creation of several companies including a healthcare technology company that works for the NHS.

        Guests

        Mark Sherwood-Edwards
        Mark helps CEOs negotiate smarter, more profitable, contracts. During his time spent working in law firms and also as in-house counsel he specialised in contracts as well as sales-contracting transformation, in organisations across the fintech, adtech, tech and outsourcing sectors.

        Founder

        Clearview Legal
        https://clearviewlegal.co.uk/

        Special Guests: Mark Sherwood-Edwards and Roger Marlow.

        1 hr 3 min
      • Episode 24: NHS Track and Trace App: are privacy and practicality issues a barrier to success?

        This episode is part of our series of updated podcasts addressing security & privacy concerns resulting from the coronavirus pandemic and the shift in working practises for millions of businesses across the UK and the world.

        In our discussion we first talk about the NHS Track and Trace app and ask "how did we get here?" with app #2 being released five months after app #1.

        We then explore whether track and trace apps are prevented from being successful due to privacy and practicality issues and whether this is a worldwide problem.

        During our discussion, I recommend a very important film "The Social Dilemma" which is available on Netflix. This is an must-watch film for everyone, especially parents with teenagers, pre-teens and young adults.

        Given some of the important issues raised in this episode, we will be recording Part 2, where we bring in a panel of specialists to start the discussions on how to address the practicality and privacy issues which can prevent track and trace apps from being effective during a pandemic.

        GDPR Now! Is brought to you by Data Protection 4 Business & This Is DPO.

        www.dpo4business.co.uk
        www.thisisdpo.co.uk.

        Guest

        This episode features a software professional with 30 years experience in software projects across a multitude of industries including retail, banking, defence and automotive and for the last 10 years, the NHS. David founded a successful IT company which provides services to the NHS and writes for https://lockdownsceptics.org/ a blog founded by Toby Young, where a range of pandemic related data is analysed and presented.

        52 min
      • Episode 23: The end of the EU-US Privacy Shield. Now what?

        Today we depart from the corornavirus related stories to bring you an update on the landmark ruling from the European Court of Justice on the EU - US Privacy Shield.

        The decision by the ECJ on 16th July 2020, to invalidate the EU - US Privacy Shield has sent shockwaves across organisations in the EU and US.

        We are joined by fellow host, Mark Sherwood-Edwards, lawyer, data protection specialist and founder of ThisisDPO. Mark has read the judgement and is going to talk to us today about what it means for data protection, for businesses and for DPO’s.

        GDPR Now! Is brought to you by Data Protection 4 Business & This Is DPO.

        www.dpo4business.co.uk
        www.thisisdpo.co.uk.

        Guest

        Mark Sherwood-Edwards
        Founder
        ThisisDPO
        www.thisisdpo.co.uk

        38 min
      • Episode 22: How do you know if your data has been compromised?

        This episode is part of our series of updated podcasts addressing security & privacy concerns resulting from the coronavirus pandemic and the shift in working practises for millions of businesses across the UK and the world.

        In this episode we are delighted to have Andrew Alston, founding director at Breach Aware and Business intelligence Theoroms.

        Andrew talks to us about Breach Aware which is a data breach monitoring and reporting application designed to help organisations detect and prevent crime, as part of their system of risk management. The solution can be used for SME's and individuals as well as large organisations. Andrew and his team pride themselves in offering this solution at affordable rates for SME's.

        GDPR Now! Is brought to you by Data Protection 4 Business & This Is DPO.

        www.dpo4business.co.uk
        www.thisisdpo.co.uk.

        Guest

        Andrew Alston
        Founding Director
        Breach Aware
        [email protected]

        Special Guest: Andrew Alston.

        22 min
      • Episode 21: Whose data is it anyway? Impact on track and track apps

        This episode is part of our series of updated podcasts addressing security & privacy concerns resulting from the coronavirus pandemic and the shift in working practises for millions of businesses across the UK and the world.

        In this episode, we are going discuss personal data in detail and explore the question of: whose data is it anyway? And what are we prepared to tolerate regarding track and trace programmes as governments around the world implement track and track apps. To discuss this we are delighted to have Phil Brown, The Norfolk Data Protection Mardler, who advices clients in Norfolk on data protection.

        _Please note: Phil makes reference to the need for self reporting but would like to clarify that in the NHS Test and Trace scheme, an NHS Tracker will only contact individuals who have tested positive for Covid19. Whether someone should be tested at all is heavily dependent on self reporting. Furthermore, responses to a possible request to us to identify those with whom we may have had recent close contact is based on our ‘civic duty’ rather than a legal requirement - so it’s very much down to our willingness or judgment to do so.

        GDPR Now! Is brought to you by Data Protection 4 Business & This Is DPO.

        www.dpo4business.co.uk
        www.thisisdpo.co.uk.

        Guest/s

        Phil Brown
        Data Protection Consultant

        Phil is an independent data protection consultant based in North Norfolk and has provided data protection advice and support to a wide variety of industries across Norfolk and beyond, mostly to small businesses. Prior to that, Phil had a 20 year career as a military communications officer which was then followed by 12 years in the world of mobile phone standardisation, mostly consulting for a Japanese mobile phone operator.

        During the latter phase, he chaired an international working group that developed mobile phone conformance tests and also chaired the Global Certification Forum when is became a legal entity in 2008. Such work has seen him travel widely and has, at various times, studied French, German, Japanese and Mandarin Chinese none of which prepared him for life in Norfolk when he moved there in 2016!

        He has a Masters degree in Design of Information Systems and his currently trading as Norfolk’s Data Protection Mardler.

        Special Guest: Phil Brown.

        25 min

      About GDPR Now!

      From the publisher's feed

      GDPR Now! is brought to you by Data Protection 4 Business and focuses on Data Protection regulations and all issues related to data security and privacy. Our goal is to discuss important topics which help businesses comply with data protection regulations while protecting their business interests in a practical and pragmatic way.