Kathrin Gardhouse

Ontario’s Bill 194, formally known as the Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024, represents a crucial legislative shift, aiming to fortify digital security and elevate trust within public sector entities. This act is significant not only for its broad coverage, which includes institutions under the Freedom of Information and … Read more

In the rapidly evolving landscape of generative AI, distinct regulatory and ethical approaches have emerged, reflecting the values, ambitions, and constraints of various global players. We previously delved into the contrasting strategies of the United States and the European Union, two titans in the realm of artificial intelligence. Today, we broaden our lens to encompass … Read more

On May 3, 2024, the OECD released updated AI Principles that build upon the 2019 version with some notable differences that respond to risks emerging from latest technological developments such as general purpose and generative AI systems. This article contains a summary of the changes as well as a line-by-line comparison of the old and … Read more

Under the General Data Protection Regulation (GDPR), consent is only one of the legal bases that can be used to process personal data, including when using Large Language Models (LLMs) to boost the efficiency of processing personal information. While obtaining consent has its advantages, for example the possibility of a clear audit trail if consent … Read more

The healthcare sector has witnessed a remarkable evolution in data privacy legislation from the 1970s to the present, mirroring the technological innovations of the time. The journey we trace here using Germany as an example illustrates how laws have struggled to adapt to protect and make usable sensitive health information against the backdrop of digital … Read more

The healthcare sector in the United States has seen a profound transformation in its approach to data privacy, paralleling significant technological advancements, in particular the electronic health record (EHR). This article explores the trajectory of health data protection legislation in the U.S., highlighting key developments in EHR development and adoption and ongoing challenges in balancing … Read more

There are lots of risks involved with implementing AI systems into an organization’s environment, some of which are not even known or knowable at this time. Privacy is one of the ones we have a better shot at getting a handle on right away, though, but we first need to understand the issues associated with … Read more