In this paper, authors aim to help overcome a perceived paradox (and attendant tensions) between the two objectives of innovation and privacy/data protection, in particular in relation to data scenarios where organisations are open to personal data they control to be reused (internally within their corporate group, or externally via a third party) for innovative purposes. They argue that to do this requires better defining key notions in data protection law, acknowledging the interdependence of data protection requirements or principles, and relying upon ongoing data management processes in order to control complex data environments. These are the pillars of a dynamic approach to data protection law.
Norway DPA publishes statement on X’s use of data for AI training
X has resumed processing EU/EEA users' posts for AI training, requiring users to opt out to protect their personal data.