Identified or identifiable natural person • Writes about privacy, data protection, AI, big tech shenanigans • Views 100% represent those of my employer (me)

Brighton, England
Joined June 2013
Facebook's new opt-out form is very hard to find. After a lot of digging and several preliminary clicks, I ended up here. I'm now going to live-tweet the process of objecting to Meta's ad-targeting. This is pretty niche stuff. So if you're interested, I like you. 🧵
8
100
20
316
77,538
I don't get it.
🚨Breaking news: My official portrait for the next European Commission term ⤵️
3
2
943
Whenever #databreach is trending, X usually just presents a huge list of posts about seemingly unrelated data breaches That's not due to a design flaw, it's because serious data breaches are happening everywhere, all the time I feel like we're officially past the tipping point
4
9
2
43
3,616
Having a bad morning? Apparently this is worth a try. Disclaimer: I have no clue whether this is a good idea, but some people I respect appear to approve of it.
This Post is from an account that no longer exists. Learn more
1
2
6
977
So there was no specific "AI bill" brought forward in the King's Speech, but it looks like some bits of the DPDIB will be resurrected. First, reforms to the ICO sound like they will remain largely intact. King's Speech background briefing (left) with part of the DPDIB (right).
1
4
11
2,122
Then we have this, which refers to a provision in the DPDIB amending the Online Safety Act to enable coroners to access information within social media accounts of children who have recently died.
1
1
5
280
Finally there is this reference to "Smart Data", which appears to refer to Part 3 of the DPDIB. Open banking, "customer data", "business data"—again, not really my area There's no sign of other bits—Senior Responsible Individuals and recognised legitimate interests—but who knows
1
5
269
CPPA proposes to finally fix this mistake in the CCPA Regulations, thus PROVING ME RIGHT when I said it was obviously a mistake. If you're disclosing personal information to a third party, then—by definition—you aren't doing so for business purposes. Take THAT, doubters.
2
13
656
The CJEU has ironed out a seriously obscure ambiguity around when civil society groups can bring litigation on behalf of data subjects curia.europa.eu/juris/docume… It reminded me of one of my best Twitter threads—from two years ago, when I still wrote those—about a very similar case
Quick thread on today's CJEU ruling against Facebook. It starts with one of those lame Facebook games and ends with some dry technical analysis about the interaction between the GDPR and Member State consumer law. It's worth it though I promise.
2
4
740
When listening to Tony Blair reel off dubious predictions about the revolutionary impact of AI, remember that this man reportedly only started using a computer in the final year of his third term as Prime Minister.
3
4
13
986
A glimpse inside the weird world of Community Notes.
1
3
468
Apple has not "killed" the various companies people are saying it has. Spotify exists despite Apple Music. Netflix persists despite Apple TV. Not to mention Android, Chrome, Linux, Firefox, Brave, etc. 1Password etc will remain a better option for many people and enterprises.
3
513
The ICO has updated its generative AI consultation based on my somewhat snarky tweet. If anyone know how to reconcile a controller's obligations under the GDPR's "right to rectification" and the inherent unreliabilty of Large Language Models, please respond to it (I don't).
Replying to @RobertJBateman
Hi Robert - Thanks for raising this. We've amended the consultation and now ask for thoughts on right to rectification in Part 4. We really value stakeholder contributions to our work at this early stage and so if you have any thoughts on the guidance please get in touch.
3
6
21
2,253
I'm sure the ICO had good reasons not to enforce against Snap, but I struggle to see its investigation as a "warning shot". Snap continued to offer its "My AI" feature throughout the investigation. There's no fine, reprimand, or actual warning afaik So what's the warning shot?
Replying to @BBCNews
We’re speaking with Microsoft to understand the safeguards in place to protect user privacy. AI is a priority for the ICO. And our separate investigation into Snap Inc’s My AI should be a warning shot for industry to consider data protection risks before launching new products.
1
1
14
1,191
The situation with OpenAI and Scarlett Johansson is someone asking ChatGPT to write a 2024 version of the 1988 Midler v Ford case. Spoiler alert: Midler won. en.wikipedia.org/wiki/Midler….
1
2
4
424
Good to know the regulator is tackling the "hard GDPR question" of accuracy in generative AI head-on. Part 4 of the generative AI consultation: We don't cover the right to rectification here, we did it in Part 3. Part 3: We don't cover rectification here, we'll do it in Part 4.
4
8
1
48
5,173
Interestingly (?), the new head of Germany's federal DPA is on the "consumer advisory board" of credit broker SCHUFA. SCHUFA was recently in the CJEU (twice) following GFDPR enforcement by Germany's Land Hessen DPA. I don't have an opinion on this, but let me know if you do.
3
5
19
2,471
I have an opinion now: I think it's probably appropriate to step down but I agree with others that it's likely a benign sort of role.
241