Data Protection and Privacy: Data Protection and Artificial Intelligence

Description

This book brings together papers that offer conceptual analyses, highlight issues, propose solutions, and discuss practices regarding privacy, data protection and Artificial Intelligence. It is one of the results of the thirteenth annual International Conference on Computers, Privacy and Data Protection (CPDP) held in Brussels in January 2020. The development and deployment of Artificial Intelligence promises significant breakthroughs in how humans use data and information to understand and interact with the world. The technology, however, also raises significant concerns. In particular, concerns are raised as to how Artificial Intelligence will impact fundamental rights. This interdisciplinary book has been written at a time when the scale and impact of data processing on society – on individuals as well as on social systems – is becoming ever starker. It discusses open issues as well as daring and prospective approaches and is an insightful resource for readers with an interest in computers, privacy and data protection. Preface Contents List of Contributors 1. Don't accept candy from strangers: an analysis of third-Party mobile SDKs I. Introduction II. Background III. Methods for Detecting the Presence of Third-Party Services IV. Comparison of Sdk Analysis Tools V. Mitigating the Privacy Risks of SDKs VI. Conclusion Acknowledgements References 2. AI and the Right to Explanation: Three Legal Bases under the GDPR I. Introduction II. References within the GDPR III. Finding a legal basis for the right to explanation under the GDPR IV. Conclusion Acknowledgements References 3. A Comparison of Data Protection Regulations for Automotive Systems I. Introduction II. The System Model III. Data Protection Frameworks in Major Markets IV. Comparison and Synthesis V. Summary and Recommendations VI. Further Consideration VII. Conclusion Acknowledgements References 4. Misaligned Union laws? A comparative analysis of certification in the Cybersecurity Act and the General Data Protection Regulation I. Introduction II. The European Cybersecurity certification framework in the Cybersecurity Act III. The Data Protection Certification Mechanisms in the General Data Protection Regulation IV. Divergence V. Convergence VI. Discussion VII. Conclusion Acknowledgments References 5. Aggregation, synthesisation and anonymisation: a call for a risk-based assessment of anonymisation approaches I. Introduction II. How to unpack the inference model III. How to conceptualise aggregation and synthesisation IV. How to assess aggregation outputs V. How to compare anonymisation controls VI. How to Inform Legal Interpretation VII. Conclusion Acknowledgements References 6. The Role of the EU Fundamental Right to Data Protection in an Algorithmic and Big Data World I. Introduction II. Data Protection as a Distinct Fundamental Right under The Eu Legal Order and the Cjeu Case Law III. Re-conceptualising the substance and the 'Essence' of the Right to Data Protection as a Power Control and Precautionary Instrumental Right IV. Conclusion Acknowledgements References 7. Implementing AI in Healthcare: An Ethical and Legal Analysis Based on Case Studies I. Introduction II. Emerging AI technologies in Healthcare III. Ethical, Legal, and Societal Issues IV. A Proactive Forward Look V. Conclusion Acknowledgements References 8. Technological Experimentation Without Adequate Safeguards? Interoperable EU Databases and Access to the Multiple Identity Detector by SIRENE Bureaux I. Introduction II. The MID in a Nutshell: Rationale, Types of Links and Access Conditions III. Access to the MID by SIRENE Bureaux: Necessity and Proportionality Aspects IV. Conclusion Acknowledgements References Closing Remarks Index