Z-Inspection®: A process to assess trustworthy AI
.. with research paper at
https://www.research-collection.ethz.ch/handle/20.500.11850/554283
Practice guide on Blockchain (2022)
The Blockchain 2022 guide features 20 jurisdictions. The guide provides the latest legal information on decentralised finance (DeFi), updates to tax systems to consider blockchain and cryptocurrencies, non-fungible tokens (NFTs), initial coin offerings (ICOs), smart contracts, data privacy and protection, and mining and staking.
https://practiceguides.chambers.com/practice-guides/blockchain-2022
David Vasella et al: Digital Healthcare in Switzerland (article)
https://practiceguides.chambers.com/practice-guides/digital-healthcare-2022/switzerland
other countries (with other authors) are at https://practiceguides.chambers.com/practice-guides/digital-healthcare-2022
Paper: Investigating GDPR Fines in the Light of Data Flows
Marlene Sämann, Marlene; Daniel Theis, Daniel; Tobias Urban; Martin Dägeling
June 2022, Conference: Privacy Enhancing Technologies Symposium (PETS)At: SydneyVolume: 4
“… Our analysis shows that it is a combination of technical and organizational issues that are involved when a fine is imposed. ”
“Moreover, data protection authorities more often react to data subjects’ complaints when data breaches become public and when health-related data is involved..”
“.. We further show that the root causes for fined data processing lie in the early data life cycle phases (e.g., data collection). Here, organizational problems are more prevalent (601 fines) than technical issues (314 fines), while technical issues are mentioned more often in later life cycle phases (e.g., retention, access and usage). Especially mistakes in the early phases of the data collection process (e.g., lacking a legal basis) and unauthorized disclosure in later phases are fined. ..”
Germany/Sachsen-Anhalt: Häufige Ursachen von Datenschutzverletzungen und Abwehrmaßnahmen
Frequent sources of data breaches and preventive controls (in German)
Germany: Hints to data subjects affected by a data breach (Netzwerk Datenschutzexpertise)
In German, explains options for follow-up actions to data subjects affected by a data breach.
“Betroffen von #Datenschutzverstößen – Was kann ich tun? Handlungsoptionen und Erfolgsaussichten”
12-Seiten-Dokument zum Thema veröffentlicht vom Netzwerk Datenschutzexpertise
https://www.netzwerk-datenschutzexpertise.de/sites/default/files/gut_2022betroffenenr.pdf
Germany: Tätigkeitsbericht LDI NRW (in German)
https://www.ldi.nrw.de/system/files/media/document/file/27_datenschutzbericht_2022_ldi_nrw.pdf
includes page 125ff the audit questionnaire used by them for energy companies:
GDPR – rights and freedoms – EU Charter of fundamental rights.
e.g. freedoms:
Chapter II: freedoms (the right to liberty and security, respect for private and family life, protection of personal data, the right to marry and found a family, freedom of thought, conscience and religion, freedom of expression and information, freedom of assembly and association, freedom of the arts and sciences, the right to education, freedom to choose an occupation and the right to engage in work, freedom to conduct a business, the right to property, the right to asylum, protection in the event of removal, expulsion or extradition).
Germany: BSI publishes technical guidelines for security of digital health apps
in German:
BSI TR-03161 Anforderungen an Anwendungen im Gesundheitswesen
https://www.bsi.bund.de/DE/Themen/Unternehmen-und-Organisationen/Standards-und-Zertifizierung/Technische-Richtlinien/TR-nach-Thema-sortiert/tr03161/tr03161_node.html
with
- Mobile applications: BSI TR-03161 Anforderungen an Anwendungen im Gesundheitswesen – Teil 1: Mobile Anwendungen
https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR03161/BSI-TR-03161-1.pdf?__blob=publicationFile&v=11 - Web applications: BSI TR-03161 Anforderungen an Anwendungen im Gesundheitswesen – Teil 2: Web-Anwendungen
https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR03161/BSI-TR-03161-2.pdf?__blob=publicationFile&v=8 - Backend systems: BSI TR-03161 Anforderungen an Anwendungen im Gesundheitswesen – Teil 3: Hintergrundsysteme
https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR03161/BSI-TR-03161-3.pdf?__blob=publicationFile&v=7