Episode 28: Digital Vaccine Passports and Certificates? What could possibly go wrong?

In this episode we are delighted to have Andrew Alston, founding director at Breach Aware and Business Intelligence Theoroms.  Andrew brings us up to date on the current cyber security issues affecting businesses and offers a range of easy to action steps businesses can take to protect their systems and data. He reminds us that the basic security steps, done well, can go a long way to preventing security issues. As always, we present affordable solutions that can be used for SME's and individuals as well as large organisations.GDPR Now! Is brought to you by Data Protection 4 Business**www.dpo4business.co.uk****Guest**Andrew AlstonFounding DirectorBreach [email protected]

Online Content - how to protect and secure your digital rights In today's world of content creation, sharing, posting and blogging, it is more important than ever to be able to protect and control your online content. Whether you are a musician, artist, parent, small business or large organisation, your digital content is who you are as an individual, family, group or company. This episode is a fantastic insight into the world of managing and controlling your online content with our guest, Adam Rumanek, Founder and CEO of Aux Mode, global specialists in digital rights management and revenue reporting. We discuss: digital rights management - what is it? - how can you protect your online content; video privacy protection; audio privacy protection and understanding your rights on YouTube. Anyone with an online presence will learn from listening to this episode, so we are grateful to Adam for his advice. Guest Adam Rumanek, CEO Aux Mode https://auxmode.com/about-us or contact Adam Rumanek on [email protected] GDPR Now! Is brought to you by Data Protection 4 Business www.dpo4business.co.ukSpecial Guest: Adam Rumanek.

In this episode, we talk about the first officially approved certification schemes under Art.42 of UK GDPR by the ICO: the Data Protection and Privacy for ID & Age Assurance Services, and the Age Appropriate Design Certification. Our special guest, Tony Allen CEO of The Age Check Certification Scheme (ACCS) talks about the scope and applicability of the certification schemes and what technology companies need to consider. Tony also explains more about the ACCS which is a UKAS-accredited conformity assessment body, comprised of auditors, certification specialists, and data protection experts and how they independently test and certify online and offline systems that check age and identity, such as passport scanners, biometric technology, and age verification software. GDPR Now! Is brought to you by Data Protection 4 Business & This Is DPO. www.dpo4business.co.uk www.thisisdpo.co.uk Guest Tony Allen CEO of The Age Check Certification Scheme Contact Tony Allen on: Email: [email protected] Twitter: @agecheckcert Linkedin: Tony Allen | LinkedInSpecial Guest: Tony Allen.

In this episode, we talk about Making AI Regulation Strategic for businesses and discuss what businesses can do to keep abreast of regulations, compliance solutions and protect their developments in AI. Our special guest is Ayisha Piotti, Co-Founder & Managing Partner of RegHorizons, a business decidated to helping build trust in emerging technologies through promoting policy solutions and by facilitating dialogue be-tween governments, academia, businesses and civil society. To learn about the work that RegHorizon do, check out this link to their latest AI Policy event https://reghorizon.com/events/ GDPR Now! Is brought to you by Data Protection 4 Business. www.dpo4business.co.uk Guest Ayisha Piotti Contact Ayisha Piotti on: Email: [email protected] Twitter: @PiottiAyishaSpecial Guest: Ayisha Piotti.

In this episode, we continue our discussions about the digital ID solution of decentralised identity, and how more and more organisations are starting to take notice of of this technology as a means to verify the identity of people in a secure, efficient, cost effective and privacy enhancing way. Our special guests, Khalid Maliki and Jimmy Snoek talk about decentralised identity, also known as Self Sovereign Identity (SSI), how it can be implemented, the benefits and in particular, how they created the awarding winning digital ID company Tykn. We talk about the growth of SSI and how they believe it will positively impact billions of peoples lives. As we enter what is arguably, the start of our journey into a new era of digital innovation with huge benefits to individuals and businesses, we are excited to follow developments around the growth of digitial ID solutions such as decentralised identity. GDPR Now! Is brought to you by Data Protection 4 Business www.dpo4business.co.uk Guest Khalid Maliki & Jimmy Snoek Co-Founders of Tykn Contact Khalid on: Email: [email protected] Twitter: @Khalidworks Contact Jimmy on: Email: [email protected] Twitter: @idforgood Website: https://tykn.tech/Special Guests: Jimmy Snoek and Khalid Maliki.

In this episode, we discuss, controversially, why data privacy, including regulations like GDPR, are counterproductive and why we would all be better off without the current notion of data privacy. Our special guest, Ben Malisow, is our 'privacy provocateur' on our show and talks about why he believes we are living an 'illusion of privacy'. Ben has over 30 years experience in information security and education and is currently a professional certification training lead for SGS Cybersecurity Services, a multinational corporation involved in a wide range of product and process certification/validation. Some of Ben’s roles have also included professor of English, a computer teacher for troubled teens as well as his extensive experience working with clients such as FedEx, US Special Forces Command, the United Nations, HSBC, and Barclays. Ben is the author of ''Exposed: How Revealing Your Data and Eliminating Privacy Increases Trust and Liberates Humanity.'' GDPR Now! Is brought to you by Data Protection 4 Business. www.dpo4business.co.uk Guest Ben Malisow Professional Certification Training Lead for SGS Website: https://www.securityzed.com/ Twitter: https://twitter.com/BenMalisow LinkedIn: https://www.linkedin.com/in/malisowSpecial Guest: Ben Malisow.

In this episode, we talk about the future of credential management – Self Sovereign Identity (SSI) also known as decentralised identity. SSI is an efficient, secure and privacy enhancing solution for identity verification. It puts individuals at the centre of the verification process and is the future of identity management. Our special guest, James Monaghan, talks about how Evernym provides solutions in the area of SSI for businesses today. We talk about what SSI means, how it works, the benefits for individuals and businesses and importantly, examples of how it is being used to great effect today. For any businesses interested in learning more about how they could benefit from building an SSI or decentralised identity solution, please contact James directly. As we enter what is arguably, the start of our journey into a new era of digital innovation with huge benefits to individuals and businesses, we are excited to follow developments around the growth of Self Soverign Identity. GDPR Now! Is brought to you by Data Protection 4 Business & This Is DPO. www.dpo4business.co.uk www.thisisdpo.co.uk Guest James Monaghan Vice President of Product Management at Evernym. Contact James on: Email: [email protected] Twitter: @james_monaghan https://www.linkedin.com/in/jamesmonaghan/ World Web Consortium (W3C) specifications for existing SSI solutions: Decentralised Identifiers https://www.w3.org/TR/did-core/ Verifiable Credentials https://www.w3.org/TR/vc-data-model/ Simple explainer about how this all works https://www.evernym.com/blog/gentle-introduction-verifiable-credentials/ Relevant industry bodies include: The Decentralised Identity Foundation https://identity.foundation/ Trust over IP Foundation https://trustoverip.org/ Good Health Pass Collaborative https://www.goodhealthpass.org/ Special Guest: James Monaghan.

In this episode, we are going to talk about the regulation of Artificial Intelligence and Machine Learning to understand what businesses need to think about from a regulatory perspective. Our special guest, Ben, talks about the global context of regulations around AI and the complexity of the parallel 'race to AI' and 'race to regulation' . In particular we look at the proposed Artificial Intelligence Act from the European Union and consider the impact on innovation. We explore what businesses and DPOs need to consider when building, using or deploying Machine learning or Artificial Intelligence systems. As we enter what is arguably, the start of our journey into a new era of innovation with huge benefits to humankind, this podcast will follow developments in and around the regulation of future Artificial Intelligence and Machine Learning. GDPR Now! Is brought to you by Data Protection 4 Business & This Is DPO. www.dpo4business.co.uk www.thisisdpo.co.uk Guest Benjamin Mueller Ben is a senior policy analyst at the Center for Data Innovation, focusing on AI and technology governance. Read Ben's note on: AI Act Explainer is here: https://datainnovation.org/2021/05/the-artificial-intelligence-act-a-quick-explainer/Special Guest: Benjamin Mueller.

In today’s episode, we are delving into the hot topic of Digital Vaccine Passports and Certificates. We outline the complex mix of technology, privacy and practical issues in a global context. As we did in Episodes 24 & 25, we look at the significant practical, technical and privacy issues surrounding how nation states and governments want to use technology to prove human beings can travel internationally, cross borders in the EU and get access to domestic venues, events, retail outlets and much more besides. Arguably a more complex problem to solve than tracking and tracing individuals. We consider the lack of effectiveness of the Track and Trace apps in the UK & EU and wonder how acceptable solutions can be found for Vaccine Passports and Certificates - a wider problem involving citizens, businesses, medical records and often new and emerging technology. Again, we find ourselves asking the same question: how do we find a rapid and effective way to discuss and agree the extended use of our data to manage this pandemic and halt the damage from lockdowns? We urgently need a forum to be able to have these discussions. As Privacy, Legal and Techology professionals we must contribute to solutions to help support governments to enable better pandemic management. There are far more questions than answers, so this episode will be the start of our journey to keep up to date with developments. GDPR Now! Is brought to you by Data Protection 4 Business & This Is DPO. www.dpo4business.co.uk www.thisisdpo.co.uk. Guests Roger Marlow Roger has worked in software for over 30 years with experience in building software for the finance, retail, automative and government sectors. He has been involved in the creation of several companies including a healthcare technology company that works for the NHS.Special Guest: Roger Marlow.

The decision by the ECJ on 16th July 2020, to invalidate the EU - US Privacy Shield sent shockwaves across organisations in the EU and US. We are now in January 2021 and there have been some solutions offered by the European Commission. But how workable are they for businesses in practise?? Join me, Karen Heaton and guest Mark Sherwood-Edwards, lawyer, data protection specialist and founder of Clearview Legal to discuss the latest pronouncements from the EC, on a revision of the Standard Contractual Clauses, Safeguards for transfers to the US (and other third countries) and of course, the impact of Brexit and what this will mean if the EC does not grant adequacy status to the UK. GDPR Now! Is brought to you by Data Protection 4 Business & This Is DPO. www.dpo4business.co.uk www.thisisdpo.co.uk. Guest Mark Sherwood-Edwards Founder www.clearviewlegal.co.uk Check out some great resources: FieldFisher Lawyer - Phil Lee on the revised SCCs https://www.fieldfisher.com/en/services/privacy-security-and-information/privacy-security-and-information-law-blog/first-impressions-new-eu-standard-contractual-clauses Tools to help with assessing data transfers Proteus-Cyber https://proteuscyber.com/Schrems-II-Automatic-SCC-contractsSpecial Guest: Mark Sherwood-Edwards.