tag:blogger.com,1999:blog-4503292949532760618.post7072390463790539815..comments2024-03-16T18:42:21.178-07:00Comments on DSHR's Blog: Might Need Some WorkDavid.http://www.blogger.com/profile/14498131502038331594noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-4503292949532760618.post-31846256827346213072018-06-20T14:44:52.342-07:002018-06-20T14:44:52.342-07:00"The recent debate over the right to explanat..."The recent debate over the right to explanation (a right to information about individual decisions made by algorithms) has obscured the significant algorithmic accountability regime established by the GDPR. The GDPR’s provisions on algorithmic accountability, which include a right to explanation, have the potential to be broader, stronger, and deeper than the preceding requirements of the Data Protection Directive." from the abstract of Margot E. Kaminski's <a href="https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3196985" rel="nofollow"><i>The Right to Explanation, Explained</i></a>.David.https://www.blogger.com/profile/14498131502038331594noreply@blogger.comtag:blogger.com,1999:blog-4503292949532760618.post-4415083238718771012018-06-20T09:37:28.841-07:002018-06-20T09:37:28.841-07:00The GDPR and Browser Fingerprinting: How It Change...<a href="XXX" rel="nofollow"><i>The GDPR and Browser Fingerprinting: How It Changes the Game for the Sneakiest Web Trackers</i></a> by the EFF's Katarzyna Szymielewicz and Bill Budington describes another effect of the GDPR:<br /><br />"The whole point of fingerprinting is the ability of the tracking company (data controller) to be able to indirectly identify unique users among the sea of Internet users in order to track them, create their behavioural profiles and, finally, present them with targeted advertising. If the fingerprinting company has identification as its purpose, the Article 29 Working Party (an advisory board comprised of European data protection authorities) decided over ten years ago, regulators should assume that “the controller … will have the means ‘likely reasonably to be used’ to identify the people because “the processing of that information only makes sense if it allows identification of specific individuals.” As the Article 29 Working Party noted, “In fact, to argue that individuals are not identifiable, where the purpose of the processing is precisely to identify them, would be a sheer contradiction in terms.”<br /><br />Thus, when several information elements are combined (especially unique identifiers such as your set of system fonts) across websites (e.g. for the purposes of behavioral advertising), fingerprinting constitutes the processing of personal data and must comply with GDPR."David.https://www.blogger.com/profile/14498131502038331594noreply@blogger.com