Daniel Purcell

LinkedIn Ireland #fined €310 million by the Irish Data Protection Commission (#DPC) 🚨 for #GDPR infringements. After a complaint from the French Data Protection Authority, an inquiry into LinkedIn’s use of personal data for behavioral analysis and targeted advertising found key issues: • Invalid consent for processing third-party data. • Legitimate interest and contractual necessity were not applicable. • Failure to comply with lawfulness and fairness principles. • Lack of transparency: incorrect legal basis information provided to data subjects. For more information, I have provided the link in a comment. #DataProtection #Privacy #GDPRCompliance

19

1 Comment

𝐗 𝐡𝐚𝐥𝐭𝐬 𝐝𝐚𝐭𝐚 𝐩𝐫𝐨𝐜𝐞𝐬𝐬𝐢𝐧𝐠 𝐟𝐨𝐫 𝐀𝐈 𝐦𝐨𝐝𝐞𝐥 𝐓𝐡𝐞 Data Protection Commission Ireland (DPC) 𝐡𝐚𝐬 𝐰𝐞𝐥𝐜𝐨𝐦𝐞𝐝 𝐚𝐧 𝐚𝐠𝐫𝐞𝐞𝐦𝐞𝐧𝐭 𝐫𝐞𝐚𝐜𝐡𝐞𝐝 𝐰𝐢𝐭𝐡 𝐭𝐡𝐞 𝐬𝐨𝐜𝐢𝐚𝐥-𝐦𝐞𝐝𝐢𝐚 𝐩𝐥𝐚𝐭𝐟𝐨𝐫𝐦 𝐗. 🤖 The platform, formerly known as Twitter, has agreed to suspend its processing of the personal data contained in the public posts of X’s users in the EU and the EEA for use in the training of its AI model, called ‘Grok’. ⏰ The suspension applies to data processed between 7 May 2024 and 1 August 2024. ‼️‘𝐔𝐫𝐠𝐞𝐧𝐭 𝐧𝐞𝐞𝐝’ 𝐓𝐡𝐞 𝐃𝐏𝐂 𝐡𝐚𝐝 𝐛𝐫𝐨𝐮𝐠𝐡𝐭 𝐚𝐧 𝐮𝐫𝐠𝐞𝐧𝐭 𝐇𝐢𝐠𝐡 𝐂𝐨𝐮𝐫𝐭 𝐚𝐩𝐩𝐥𝐢𝐜𝐚𝐭𝐢𝐨𝐧 𝐚𝐠𝐚𝐢𝐧𝐬𝐭 𝐗 𝐮𝐧𝐝𝐞𝐫 𝐬𝐞𝐜𝐭𝐢𝐨𝐧 134 𝐨𝐟 𝐭𝐡𝐞 𝐃𝐚𝐭𝐚 𝐏𝐫𝐨𝐭𝐞𝐜𝐭𝐢𝐨𝐧 𝐀𝐜𝐭 2018. ⚠️This section allows the DPC, where it considers that there is an urgent need to act to protect the rights and freedoms of data subjects, to make an application to the High Court for an order requiring the data controller to suspend, restrict, or prohibit the processing of personal data. ⚖️ The application was made before Ms Justice Reynolds, who indicated in her concluding remarks that the rights and freedoms of data subjects across the EU/EEA were at the core of the application. ⚠️This was the first time that the DPC had sought to use its powers under section 134. ⬇️See more here ⬇️ Law Society of Ireland

10

With recent developments surrounding data privacy laws in the European Union, the popular social media platform, X, finds itself amidst quite a stir. In line with a compelling decision by an Irish court, X has committed to suspending the use of data belonging to EU citizens, which was hitherto leveraged for AI chatbot training. Now, ascending above the immediate turmoil, let's dive into extrapolating what these shifts could possibly mean for the future landscape of Artificial Intelligence and Data Privacy: • Preservation of privacy will become non-negotiable: As reflected by this precedent, tech giants will likely strengthen their commitment to safeguarding individual privacy. This, in turn, may yield improved trust between consumers and platforms, fostering beneficial relationships in the digital realm. • Fostering a responsible AI culture: This is a likely reality where users' data will be responsibly handled. We could foresee an influx of ‘privacy by design’ models, where AI technologies would be architected with a user’s privacy as the foundation. • Draws legislation likely: In tandem with resolving individual cases, a broader legislation process addressing data digitization might be in the pipeline. This could ensure future scenarios are navigated per established directive, thereby bringing in greater stability and predictability. • Innovation amidst constraints: Despite a potential diminution in available data, there persists an optimistic chance for harboring innovation. Companies would be likely to develop novel techniques to make AI systems Broad, robust, and resilient even with less data availability. As professionals in the digital and AI spaces, we are well-aware of the intricate balance that must be maintained between leveraging user data and respecting individual privacy. This recent development with X emphasizes the need for us to remain adaptive and proactively reassess our approach to the utilization of data. In a nutshell, privacy-focused turns in data utilization policy, like X's, corroborate the growing receptivity towards data rights. None of this suggests an end to AI process innovation but rather opens up space for them to exist more responsibly. What’s unquestionable is that the reminded focus on this blend of corporate responsibility and innovation sets the stage for exciting future developments in the AI realm. So, let’s roll up our sleeves and brace ourselves for the changing terrain ahead! #DataPrivacy #AIInnovation #AIEthics

2

🇮🇪 The Irish Data Protection Commission has hit LinkedIn Ireland with a €310M fine for GDPR violations, following an investigation into how LinkedIn handles personal data for behavioral analysis and advertising. ➡️The DPC’s decision includes a mandate for LinkedIn to overhaul its data practices—emphasizing transparency, fairness, and valid consent as key pillars of GDPR compliance. ⚠️ This case is a powerful reminder for all organizations: compliance isn’t optional, and the cost of neglecting data privacy is rising. What is the state of your company's compliance readiness? #GDPR #DataPrivacy #GDPRFine #DPC https://hubs.ly/Q02WMDMW0

16

https://lnkd.in/d6SXzjA2 surprised this is not being raised as a bigger deal, plaintext password storage ? Why break ALL secure coding practices like that? Well I suppose its makes it easier to produce a model for AI password crackers. Anyone who has used Meta products should be advised to not only change all their passwords, everywhere, but do so with different generation schemes on different sites!

9

1 Comment

Meta Fined $102 Million For Storing 600 Million Passwords In Plain Text: Meta has been fined $101.5 million by the Irish Data Protection Commission (DPC) for storing over half a billion user passwords in plain text for years, with some engineers having access to this data for over a decade. The issue, discovered in 2019, predominantly affected non-US users, especially those using Facebook Lite. AppleInsider reports: Meta Ireland was found guilty of infringing four parts of GDPR, including how it "failed to notify the DPC of a personal data breach concerning storage of user passwords in plain text." Meta Ireland did report the failure, but only some months after it was discovered. "It is widely accepted that user passwords should not be stored in plaintext, considering the risks of abuse that arise from persons accessing such data," said Graham Doyle, Deputy Commissioner at the DPC, in a statement about the fine. "It must be borne in mind, that the passwords the subject of consideration in this case, are particularly sensitive, as they would enable access to users' social media accounts." Other than the fine and an official reprimand, the full extent of the DPC's ruling is yet to be released publicly. The details published so far do not reveal whether the passwords included any of US users as well as ones in Ireland or across the rest of the European Union. It's most likely that the issue concerns only non-US users, however. That's because in 2019, Facebook told CNN that the majority of the plain text passwords were for a service called Facebook Lite, which it described as being a cut-down service for areas of the world with slower connectivity. Read more of this story at Slashdot.

1

Meta strategically announced this late last Friday, possibly to minimize media coverage and impact on its stock price. 𝗛𝗲𝗿𝗲 𝗶𝘀 𝘄𝗵𝗮𝘁 𝘆𝗼𝘂 𝗻𝗲𝗲𝗱 𝘁𝗼 𝗸𝗻𝗼𝘄. 👇 Meta has paused #AI plans in the EU following heavy pressure from privacy watchdogs, including noyb.eu and Data Protection Commission Ireland. 𝗪𝗵𝘆 𝘁𝗵𝗶𝘀 𝗶𝘀 𝗶𝗺𝗽𝗼𝗿𝘁𝗮𝗻𝘁: 💪 The collective action from noyb and other organizations like the Forbrukerrådet/Norwegian Consumer Council has proven effective in regulating tech giant practices. 🛑 Following complaints, Meta pledged to the DPC not to process EU/EEA user data with AI without clear definitions. 🔄 Initially approving Meta's AI, the DPC made a U-turn after other EU regulators and watchdogs raised concerns. ⚠️ Despite the #GDPR allowing data processing with valid consent, Meta hasn't sought opt-in consent, showing reluctance in transparent user engagement. 📏 The change in Meta’s privacy policy isn’t legally binding yet, as pointed out by Max Schrems of noyb.  --- This is a crucial moment for #dataprivacy - stay tuned as we watch how this unfolds and what it means for AI and privacy globally. Official noyb.eu statement and Eliza Gkritsi's coverage to Euractiv in the comments below! If you've missed the background story, here my previous posts on the case: https://lnkd.in/eHZnaXGz https://lnkd.in/ejFcSP9z

11

3 Comments

The Irish DPC took a proactive approach regarding LinkedIn’s collection of data for behavioural analysis and targeted advertising before posts went viral on LinkedIn. This led to a significant fine as we all can see now. Similarly, the UK ICO raised concerns about LinkedIn’s use of personal data from UK users, resulting in LinkedIn suspending its model training pending further engagement with the ICO. This emphasizes the critical importance for businesses to be fully aware of how they collect and use user data, and, most importantly, how transparent, fair & lawful they are in their practices. #DataPrivacy #UserData #Transparency #DataProtection #linkedIn #DPCIReland #ukico #privacyrights #dataprivacylaws

20

The demand for more information within advanced technologies, such as AI, is aggressively on the rise. 📈 And by information, we’re talking about much more than just names, emails, or phone numbers. This includes biometric data, location data, financial details, private communications, audio recordings, genetic data, behavioral patterns, transactions, device-level information, and so much more. 🔐 As AI’s capabilities expand, so does its appetite for data. With this increased demand for information comes heightened security and privacy risks. AI feels like the new Wild West—everyone is still trying to figure out how it works, and just when you think you understand it, it evolves. 🤖⚠️ Even though regulators will continue to enforce rules and penalties—like what Clearview AI is facing—regulation alone won’t solve the core issues or fully mitigate the downstream impact of these developments. 🚨 The complexity and speed of AI's advancement make it difficult to control and keep up with. As the landscape changes, the need for stronger security and privacy measures will only grow. And with that, we will see the development of new ways to protect individuals, families, and organizations. 🛡️ #freeze #cybersecurity #security #privacy #data #information #dataprotection #dataprivacy #ai #infosec #securityawareness #risk https://lnkd.in/deSQfxYb

7

1 Comment

💶 LinkedIn fined €310 million The Irish Data Protection Commission (DPC) has issued a final decision in its investigation into LinkedIn Ireland's use of user data for behavioural analysis and targeted advertising. The investigation was triggered by a complaint from the French Data Protection Authority and was led by the DPC as LinkedIn's principal supervisory authority. The DPC found that LinkedIn's processing of user data violated the GDPR's requirements regarding consent, legitimate interests and contractual necessity. The company failed to secure lawful consent, and did not adequately prioritise users' rights over its own interests. As a result, LinkedIn was cautioned, ordered to correct its data practices and fined €310 million. The DPC will publish the full decision at a later date. Read more 👇 --- #SypherPrivacyTalks Stay tuned for more:📌 follow the Sypher Solutions company page. We'll keep you updated on #dataprotection, #privacy, #privacymanagement, #GDPR, #GDPRcompliance, #DPO, #cookies, #consent.

3

Ireland’s Data Protection Commission has fined LinkedIn €310 million for serious privacy violations related to its tracking ads. The DPC found LinkedIn lacked valid legal bases for processing user data, breaching GDPR. This hefty penalty marks one of the largest fines for a tech company under EU law, highlighting the importance of transparency and user consent in data handling. For the latest updates, stay tuned to Founding Startups. #LinkedIn #GDPR #DataPrivacy #PrivacyViolation #BigTech #EURegulations

1

LinkedIn fined €310m by Irish DPC. For inappropriately targeted ads and other stuff with EU users (you). Have you felt your account was being manipulated? Anyway, it brings the total in fines on Big Tech by the Irish watchdog to €3.4bn in the last 3 years. That all goes to the *Irish Exchequer* (us), though under 1% paid so far due to appeals. One side point: it’s kind of amazing that Ireland — a) attracts big tech / multinationals in (favourable terms) and gets all those billions in corp taxes AND THEN ALSO b) gets & keeps even more billions from fines for big tech lapses affecting all of EU, from Irish operations Quite a feat? https://lnkd.in/e8hDTBsA

18

4 Comments

🌍 Ireland Lags on NIS2 Implementation, but the EU Pushes Ahead 🌍 The European Commission has taken action against 23 member states, including Ireland, for missing the deadline to transpose the NIS2 Directive into national law. This underscores the urgency for Ireland and others to align with the EU's vision for a stronger cybersecurity framework. Adopted in December 2022, the NIS2 Directive expands protections to critical sectors like energy, healthcare, transport, banking, and digital infrastructure. It also introduces key requirements, including: ✅ 24-hour incident reporting ✅ Risk-based cybersecurity measures ✅ Improved supply chain security ✅ Establishing national cybersecurity authorities While Ireland and other member states may lag behind, the EU’s infringement proceedings demonstrate a commitment to safeguarding the digital economy and protecting citizens against evolving cyber threats. This is a critical moment for Irish organisations to proactively address NIS2 requirements. Waiting until the last minute will only increase costs and complexity. At Atoro, we help businesses navigate this evolving landscape with tailored solutions for compliance, from risk assessments to robust cybersecurity programs. Let’s ensure your business is resilient and ready—before the deadlines hit. #NIS2 #Cybersecurity #Ireland #EU #Compliance #RiskManagement #Atoro

9

3 Comments

3 days until the AI act comes into force. In this article, we take a look at recent guidance from the European Data Protection Board and the Irish Data Protection Commission on the interplay between data protection and AI on both a European and a domestic level. Read more here - https://lnkd.in/emF2mNNC

29

1 Comment

🌟 Featured Domain of the Day 🌟 🔒 Unlock Your Digital Security Potential with CyberTrust.ie! 🔒 Hello to all #techenthusiasts and #businessleaders in #Ireland! Looking for the perfect #domain that conveys trust and security in the digital age? 🔐💼 Introducing CyberTrust.ie – a premium domain name that embodies trust, security, and digital excellence. Whether you’re in #cybersecurity, tech consulting, or any digital field, CyberTrust.ie is the ideal foundation for building a secure and reputable online presence. 🚀 Here’s Why CyberTrust.ie is Your Ultimate Security Choice: - Impeccable Trust: The name Cyber Trust speaks volumes, instilling confidence and reliability in your digital security services. - Memorable and Marketable: Easy to remember and spell, CyberTrust.ie is perfect for establishing a strong and trustworthy brand. - Versatile Uses: Ideal for businesses specializing in cybersecurity, data protection, IT consulting, or any digital security services. - Local Expertise: With a .ie domain, it’s tailored for the Irish market, giving your business a local edge. Imagine your business as a leader in digital security with CyberTrust.ie as your domain. Ready to enhance your cybersecurity posture? 🛡️ "Cyber Trust" not only reflects a commitment to digital security but also builds an instant connection with clients looking for trustworthy services. Whether you're in finance, healthcare, or ecommerce, CyberTrust.ie is the domain that guarantees security and peace of mind. 🔒 Why Wait? Secure CyberTrust.ie and Protect Your Digital Assets Today! 🔒 With CyberTrust.ie, you’ll have your competitors wondering how they missed out on such a secure opportunity. This domain is ripe for the picking and ready to help your brand build a formidable presence in the digital world. 💼 Get in Touch: Don't let this crucial domain slip away. Contact us today and take a proactive step towards securing your digital future with CyberTrust.ie! Stay Secure and Happy #Branding! 🎉 Feel free to check out our portfolio of premium .ie domains on the Atom marketplace: https://lnkd.in/eGPZ7_DE

1