News: 1633021025

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

EU and US seek 'common principles' for data governance and AI

(2021/09/30)


The EU and the United States of America plan to work together to build a common approach to data governance and policies around technology platforms, according to a joint statement.

Information and communications technology security and competitiveness, as well as the misuse of technology threatening security and human rights are also in scope of the Inaugural Trade and Technology Council Meeting between the global superpower and the world’s largest economic and political bloc.

Launched by president Joe Biden, European Commission president Ursula von der Leyen, and European Council president Charles Michel at the U.S.-EU Summit in June 2021, the Council held its first meeting yesterday.

[1]

At the meeting, the United States and European Union decided to closely coordinate on an expansive set of critical economic and technology issues over the coming months and achieve concrete outcomes by the next meeting. These include joint work on the semi-conductor supply chain and Artificial Intelligence, as well as data governance, [2]the joint statement said .

[3]

[4]

"The United States and European Union will develop and implement AI systems that are innovative and trustworthy and that respect universal human rights and shared democratic values, explore cooperation on AI technologies designed to enhance privacy protections, and undertake an economic study examining the impact of AI on the future of our workforces," it said.

Management of data sharing between the two jurisdictions has hit a rocky patch since [5]EU Court of Justice struck down the so-called Privacy Shield data protection arrangements between the political bloc and the US, triggering a fresh wave of legal confusion over the transfer of EU subjects' data to America.

[6]Privacy Shield binned after EU court rules transatlantic data protection arrangements 'inadequate'

[7]Final guidance on Schrems II ruling: Data from EU could be held up if a third country lets authorities access it

[8]European recommendations following Schrems II Privacy Shield ruling cast doubt on cloud encryption practices

[9]Eclipse Data Connector arrives for GAIA-X, Europe's plan to protect its cloud data from foreign tech firms

The 2020 Schrems II ruling stemmed from a complaint that Ireland's data protection agency wasn't preventing Facebook Ireland Ltd (as EU representative of the Zuckerberg empire) from beaming his data to the US.

In its [10]final guidance on the Schrems II ruling , European Data Protection Board (EDPB) said the transfer of data could be impinged on if legislation in a third country allows authorities to access data transferred from the EU, even without the importer's intervention.

[11]

The guidance also [12]allows for data sharing with encryption only if the "keys are retained solely under the control of the data exporter, or by an entity trusted by the exporter in the European Economic Area or under a jurisdiction offering an essentially equivalent level of protection to that guaranteed within the EEA." ®

Get our [13]Tech Resources



[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YVYzsgD4PDe4HPugaDAlRwAAAIM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[2] https://www.whitehouse.gov/briefing-room/statements-releases/2021/09/29/fact-sheet-u-s-eu-establish-common-principles-to-update-the-rules-for-the-21st-century-economy-at-inaugural-trade-and-technology-council-meeting/

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YVYzsgD4PDe4HPugaDAlRwAAAIM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YVYzsgD4PDe4HPugaDAlRwAAAIM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[5] https://www.theregister.com/2020/07/16/privacy_shield_struck_down/

[6] https://www.theregister.com/2020/07/16/privacy_shield_struck_down/

[7] https://www.theregister.com/2021/06/21/final_guidance_on_schrems_ii/

[8] https://www.theregister.com/2020/11/23/european_recommendations_on_schrems_ii/

[9] https://www.theregister.com/2021/09/23/gaia_x_edc/

[10] https://www.theregister.com/2021/06/21/final_guidance_on_schrems_ii/

[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YVYzsgD4PDe4HPugaDAlRwAAAIM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[12] https://www.theregister.com/2020/11/23/european_recommendations_on_schrems_ii/

[13] https://whitepapers.theregister.com/



A bit of a muddle?

Mike 137

" The guidance also allows for data sharing with encryption only if the "keys are retained solely under the control of the data exporter "

[1] if the keys are only retained by the exporter, how will the importer make use of the data?

[2] There seems to be some confusion between sharing and transfers here. Exporter and importer are parties to transfers, the legality of which depends on such things as being within the EEA, binding corporate rules, standard contractual terms or adequacy decisions, all of which are regulatory or statutory. The legality of sharing depends on sharing agreements which are merely contractual between the parties concerned.

Re: A bit of a muddle?

Version 1.0

It sounds like the current guidance is currently written by politicians, I would hope that eventually they get someone like Bruce Schneier to rework the proposal. An agreement between the US and the EU would be a nice factor for both sides and plenty of other countries would probably jump in if it seems reasonable.

Opposite

elsergiovolador

Well, these kind of press releases are aimed at ignorant pleb and usually to get a true message, you have to assume it means the very opposite of what it says.

Here is the decoded, real message:

"The United States and European Union will develop and implement AI systems that are copied from scientific papers and seem to give answers we want and that respect our right to know everything about you and shared Marxist values, explore cooperation on AI technologies designed to enhance protections against privacy tools, and undertake an economic study examining the impact of AI on the future of our big corporations harvesting the output of human infrastructure,"

A company is known by the men it keeps.