They are active in whistleblowing, not privacy leak management…

Nha they publish metadata describing the leaked data. If you’re a data subject concerned by the incident you then request a copy of yr information which requires proper identification.

Why would they share the data itself….

At this point they are somewhat catching up on what traditional banks are doing it seems…

Typically llm are rather ressource intensive - you need beefy hardware to run those at speed. Especially if you intend to train them with your data to improve their relevance. I don’t think mobile phones or run to the mill laptops are going to be enough for any non-trivial implementations. I might be skewed by experiences on non-personal projects though.

How do you anonymise without supervision ? And obfuscation isn’t anonymisation…

They could try to pass it as a legitimate interest but likely it would be struck as being ultimately disfavouring the individual and favouring the business. Probably.

Well then explain me how you propose to apply data subject rights to a llm… you can’t currently un-train those as far as I know. And that’s not touching IP which isn’t exactly the same here and there.

I’m professionally watching what’s happening with this very topic and the current state of the law and related decisions makes everyone in the business cautious at the very least. Doesn’t prevent business to take risks but it’s risk taking indeed.

Yeah that’s not standing in europe… especially for PII…

Fair point…

With adequate lighting he certainly looks orange enough verging on brownish ;-)

Yeah you guys still execute traitors right ? That would be quite the signal xD

Is it only about protecting him or also avoiding him discussing unwanted topics with other inmates in that case? He’s still the recipient of privileged information…

That’s unrelated with the need of prevention over having comprehensive healthcare coverage… I mean it’s not a bad point, but it’s unrelated.

Let healthcare be free for the patient thanks to magic money it still sucks to experience tooth decay that would have been prevented by chemically treating water as it’s always been.

You know that eventually free healthcare is still paid by everyone ? Why add the cost of generally preventable tooth decay to the tab? It’s not mutually exclusive…

I can relate to the guy that had to put that number in. Prolly went along the lines of « can we get some budget to identify our various processing activities and what processors are involved ? »… to what management said « lol no just put the overall numbers in ». And the guy included the kitchen company in there because fuck it.

I haven’t mentioned IT security at all have I?

A lot of businesses (including my current employer) seem to enjoy the integrated ecosystem offered by ms from the office suite to sharepoints to mail indeed with a sprinkle of power bi and the form thingy.

You can replicate all that but it is absolutely not trivial. And the end user also typically will find it less easy to interact with all the pieces.

« Perfectly possible » but at what cost and with what compromises though ? Not specifically looking at Microsoft - the same would apply to similar products. Also a lot of the blame is on the commission itself and the lack of controls over its data - which also has nothing to do with where it’s being processed. Even if you do 100% in EU with open source software you can still fail many of the controls if you don’t track your data, have appropriate documentation to demonstrate it, did the required assessments… and those expectations are what bit them in the ass I think. And likely it will bit a lot of other actors that aren’t putting much effort in the same.

There goes my week and prolly the whole year… I look forward the internal assessment at my job but chances are local authorities will follow on this and the implications are crazy. At first read it puts the bars sooooo high on several principles that basically no existing IT intensive business will have a chance to survive similar audit.

I have too much of those assholes in the pond I manage here in europe… you have those back…

It’s absolutely not based on common law indeed but you can be sure that precedents are still a big thing especially for such regulations… we are watching like awks what’s happening everywhere because we know there will be a lot of consistency both on decisions but also on the topics being pursued.