Big news this morning: @DPCIreland has fined TikTok €345 million for violating child privacy laws under #GPDR in Europe.
SECURITY
-

Hugging Face Launches Enterprise Hub with SSO and Storage Options
By
–
Are you an organization using Hugging Face? Then you would be glad to know that we have just launched Enterprise Hub! With Enterprise Hub, you get:
• SSO (OIDC or SAML) and more security options • Storage Regions: choose where your data is stored (currently US and EU) -
Privacy Risks from Spyware and Data Leakage Exposed
By
–
Huge scoop revealing some of the risks privacy experts have warned about for years related to spyware, adtech, data leakage. This important thread is worth reading:
-

Groq at Applied Live: AI Hardware Innovation and Security Demo
By
–
Meet us at booth #620 at @AppliedEvents
. Don't miss Igor Arsovski speaking at 1:55 on a panel about Accelerating Hardware Innovation in the Age of AI-Driven Software Development, and our public demo at 2:50 on the Security Stage on Sept 20. #AppliedLive #LPU #GenAI -
GDPR Data Protection Enforcement for EU Nationals Worldwide
By
–
Yeah, technically though GDPR protects EU nationals wherever they are in the world. I am not sure how the policy is enforced in practice though
-

Biometric boarding consent concerns at airport gates
By
–
It says they only use the biometric boarding process with your express consent. Does stepping into the boarding gate imply consent? There was no sign to inform passengers what was going on until their picture was taken.
-
JetBlue Biometric Data Retention and GDPR Compliance Issues
By
–
Alright, reading up it looks like JetBlue sends the photo to US Customs and Border control and then the US government never deletes the photo. The process is opt-out (note that GDPR requires opt-in, afaik)
-
Airport facial recognition raises data retention and privacy concerns
By
–
They stored my photo between the time I scanned it into the kiosk and I boarded the flight, because I didn't present my passport at the gate, just my face. And did they delete my photo? Who knows?
-

JetBlue facial recognition raises GDPR compliance concerns
By
–
It is not using proximity, it took a picture of my face which is identifiable biometric data. I doubt only JetBlue has my data as it must have been sent to a 3rd party provider for the service. There may be a GDPR compliance issue for EU nationals @JetBlue https://
gdpr.eu/compliance-che
cklist-us-companies/
… -
Photo Privacy: Non-consensual Data Ingestion by AI Companies
By
–
Obviously, I am a person online and my face is on the internet. But what about people who want to keep their photo from being ingested by who knows what tech company providing the system? They can't even opt out because they weren't informed?