Edition

This is a permanent edition. It carries the briefing exactly as published on this date and does not change.

EU Data Protection Authorities Address Anonymization and Data Scraping for Generative AI

The European Data Protection Board (EDPB) has released new guidance focusing on the crucial areas of anonymization and web scraping in the context of generative artificial intelligence development. This initiative aims to provide clarity for organizations leveraging large datasets for AI model training, particularly regarding the lawful processing of personal data. The guidelines also finalize the EDPB's position on blockchain technology, offering further regulatory insights into emerging digital innovations.

Today's question

A regulation differs from a directive in EU law because:

  1. Regulations are merely advisory and not binding on Member States
  2. There is no practical difference between regulations and directives at all
  3. Directives are stronger than regulations in practice and enforcement
  4. Regulations are directly applicable in all Member States without transposition

Answer this question on the site

Worth knowing

  1. UK Fashion Retailer Miinto Discloses Data Breach, Warns Customers of Phishing Risks

    Online fashion marketplace Miinto has admitted to a data breach, revealing that customer information was compromised. The company has since issued an advisory, urging its shoppers to remain vigilant against potential phishing attempts. This incident underscores the persistent threat of cyberattacks targeting consumer data.

  2. Scottish NHS Trust Probes Maternity Patient Data Email Error

    A Scottish NHS Trust is investigating an email misdelivery that exposed sensitive data belonging to maternity patients. This incident highlights the critical importance of secure communication channels and robust data handling practices within healthcare organizations, particularly when dealing with highly sensitive personal health information.

  3. Florida Ransomware Negotiator Convicted for Aiding Cybercrime Extortion

    A Florida based ransomware negotiator has been convicted for actively assisting a ransomware gang in extorting US companies. This case marks a significant legal action against individuals who, under the guise of consultancy, facilitate cybercriminal activity, emphasizing the legal risks associated with engaging with illicit actors.

Compiled that morning from regulator, court and authority sources. Primary sources are linked on every story.