[{"description":"By Erin Clupp, Research Librarian in Norton Rose Fulbright’s Vancouver office. Congratulations! You’ve successfully completed library school and are a freshly minted information professional. What is an exciting time in your life can also be overshadowed by what comes next: the dreaded job hunt, heightened by the fact that we are still struggling through the COVID-19 pandemic. Despite this being a challenging and unprecedented time to enter the workforce, there are still many exciting opportunities that await you. Here are some tips and words of advice that I hope are helpful and comforting as you navigate through this next phase of your career: 1) Manage your expectations but be kind to yourself First and foremost, job hunting can really suck. It’s important to acknowledge this and understand there will be periods of frustration, self-doubt, and worry (especially when we have bills to pay). This is normal! Rejection can be painful, and sending applications into that black hole where resumes seem to go can be demoralizing but don’t give up! When job hunting, be mindful of the following: As a new grad, you are probably eager and excited to land that first job and start working! Have some patience, the process may take longer than you would like it to be (before and during the interview process). It is also great to have goals, but realize you may not get your “dream job” right outside the gate. That is fine! Along the way, you may find you don’t have one dream job after all, and that you enjoy doing many types of work. Resist the urge to compare yourself to others. Some people may seem to have better “luck” or have more apparent success early on. We don’t always know their stories, what their past experiences are or who they may know. Just remember, we are all operating on different timelines and your opportunity will come. It doesn’t make you a failure or unworthy if it takes you a bit longer or if you end up in an area completely different than you originally thought. While job hunting can become a full time job, don’t forget to take breaks and don’t let it become all-consuming. Focus some energy on your hobbies, personal relationships, and most importantly rest! 2) Beyond the library – be flexible and think outside the box The information profession is evolving, and while there are still plenty of “traditional” LIS jobs in academic and public library settings, there are increasingly more jobs in special libraries and in larger “information teams” in government, private corporations, and non-profits. When searching for job postings, don’t just focus on the job title, be sure to also read the descriptions and position requirements. Look for buzz words like “information analyst”, “knowledge management”, “content creation”, “competitive intelligence”, “prospect research”, “information architecture”, or “data curation”, all of which use the skills of an LIS professional and are increasingly in demand as businesses recognize the need for improved information governance and user experience. I know people with LIS backgrounds who work in academic institutions, museums, archives, law firms, government, telecommunications companies, non-profit organizations, healthcare, and international organizations doing a variety of work including research, privacy, information security, instruction, technical writing, and management. Basically any organization that deals with information and people (read: all of them) may have a position that you can apply for. Now is the time to experiment and try new opportunities. Don’t worry about pigeonholing yourself, because you can always leverage your transferable skills and move within industries and organizations. 3) Take a leap – consider a move! While not possible (or desirable) for some, consider moving to a new city (or country!), especially if you are in a very competitive market","id":3241437,"source":"Canadian Association of Law Libraries / L'Association canadienne des bibliothèques de droit CALL/ACBD Blog","titre":"New Professionals SIG Article: Library School and Beyond – Job Hunting Tips for New Grads","url":"https://www.callacbd.ca/CALL-Blog/10326333","pubDate":"Mon, 26 Oct 2026 07:55:45 +0100"},{"pubDate":"Wed, 21 Oct 2026 14:33:39 +0200","titre":"The Old Québec (Vieux-Québec) historic district: Heritage, tourism and real-estate developers since the post-war years","url":"https://www.cahiers-espi2r.fr/2305","id":3232003,"description":"Introduction There are several ways of conceiving heritage conservation. For the purpose of this paper, we need to start from the premise that what we call “heritage” is a dynamic, evolving reality, and that a historic district such as “Old Québec” can undergo structuring transformations rooted in a process of heritage conservation. In Old Québec, the process of conservation —also referred to “patrimonialization”—has not received the attention it deserves. This paper aims to shed light on the process of functional requalification has undergone by Old Québec since the 1950s, within the broader context of its transformation into a historic district. It is based on discourse analysis (Berthold, 2013), supported by a diversifie body of documentation, including primary sources, such as archival documents, press reviews, geospatial and land-use data, and official reports. It is complemented by a body of scholarly literature devoted to Old Québec since the 1970s. First, we explain the sociohistorical process that led to the creation of Old Québec, starting in the 1950s. Then, we highlight the role played by tourism and the real-estate economy —includingdevelopers—in this process. Turning the Champlain District into a historic district At the turn of the 1950s, the area now known as “Old Québec” was referred to as the Champlain District. Named after the city’s main colonial founder, Champlain was one of the first areas to be settled, beginning in the early 17th century. It covers","source":"ESPI2R"},{"id":3218421,"description":"This article belongs to the debate » Thinking Machines, Thinking Lawyers14 October 2026The (Currently) Uneven Intelligence of AI in Comparative Constitutional Law From Years of Research to a Single Prompt? Artificial intelligence (AI) has the potential to accelerate and improve the quality of research. This potential has inspired numerous projects exploring how AI could help scholarship on constitutional law. For example, there is research using AI to interpret constitutions,1) apply constitutional principles,2) and predict court rulings.3) Even the question of whether AI could improve the process of constitution-making has been studied.4) AI’s potential is particularly significant for comparative constitutional research. Systematically comparing legal systems requires locating sources from different jurisdictions, which are often difficult to access and only available in local languages. The creation of comparative legal datasets has thus involved considerable personnel, time, and financial resources. AI can overcome many of these obstacles. AI models can search for and translate foreign-language sources, filter them, and convert the filtered information into a dataset. In doing so, AI offers the prospect of datasets — which previously required years of research and the efforts of numerous experts and research assistants to compile — being just a prompt away. However, whether AI models can generate comparative law datasets that are qualitatively comparable to human-coded datasets has not yet been addressed (although Guha et al provide an example for a broader legal benchmarking exercise).5) We therefore conducted our own benchmarking study.6) We found evidence suggesting that recent AI models may be able to code simple factual data, but they are likely unreliable substitutes for expert human coders when conceptual or interpretive judgment is required. The Benchmarking Project: Seven Coding Tasks, Four Datasets, Two LLMs In our project, we tested the ability of two large language models (LLMs) to code different types of information relevant to comparative constitutional law. We specifically assessed whether LLMs can reproduce information from four existing comparative constitutional law datasets, all of which were compiled through human coding and which served as a ‘ground truth’ for our exercise. From these datasets, we asked the LLMs to code seven variables, which can be thought of as seven tasks relevant to the creation of comparative constitutional law datasets. Each of these tasks is either a test of fact-finding or reasoning abilities. First, from the Executive Term Limit Evasion Dataset,7) we drew information on whether presidents in 106 presidential systems have evaded constitutionally mandated term limits between 2000 and 2019. The dataset includes one variable on whether presidents attempt to overstay past the end of their term. The second variable captures what strategies executives use for doing so, such as amending the constitution, replacing it with a new one, or asking the court to interpret term limits out of the constitution. While determining whether a president overstayed is a fact-finding task, assessing the strategy used to do so requires reasoning. Second, from the Comparative Constitution Making Dataset,8) we drew information on the process by which constitutions were adopted in democracies between 1900 and 2015. This dataset also includes fact-finding variables such as (1) whether citizens were involved in the formulation, discussion, or submission of reform proposals, and (2) whether citizens participated in popular referendums at any stage in the process. The dataset’s most important variable (3) captures whether constitutions reflect ‘plural elite agreement,’ that is, whether all relevant elite factions in society were involved and represented during the process. The recreation of this variable requires reasoning. Third, from the Characteristics of National Constitutions Dataset9), we drew on its coding of 43 first-generation constitutional","source":"Scoop.it - Documentation juridique (Stéphan Cottin)","pubDate":"Thu, 15 Oct 2026 08:26:22 +0200","titre":"The (Currently) Uneven Intelligence of AI in Comparative Constitutional Law","url":"https://verfassungsblog.de/the-currently-uneven-intelligence-of-ai-in-comparative-constitutional-law/"},{"description":"Stick with Security: Require secure passwords and authentication lfair August 11, 2017 | 10:47AM Stick with Security: Require secure passwords and authentication By Thomas B. Pahl, Acting Director, FTC Bureau of Consumer Protection To make it harder for hackers to bluff their way onto a computer network, careful companies follow the advice of Start with Security and require strong authentication practices . We’ve considered FTC settlements, closed investigations, and the questions we get from businesses about implementing good authentication “hygiene.” Here are some tips on using effective authentication procedures to help safeguard your network. Insist on long, complex, and unique passwords. A password’s very reason for being is to be easy for a user to remember, but hard for a fraudster to figure out. Obvious choices like ABCABC, 121212, or qwerty are the digital equivalent of a “hack me” sign. Furthermore, experts have determined that passphrases or longer passwords are generally harder to crack. The smarter strategy is for companies to think through their standards, implement minimum requirements, and educate users about how to create stronger passwords. Also, when you install software, applications, or hardware on your network, computers, or devices, change the default password immediately. And if you design products that require consumers to use a password, configure the initial set-up so they have to change the default password. Example: A staff member attempts to select payroll as the password for the database that includes employee payroll information. The company sets up its system to reject an obvious choice like that. Example: To access the corporate network, a business allows employees to type in their username and a shared password common to everyone who works there. Employees are also allowed to use that shared password to access other services on the system, some of which contain sensitive personal information. The more prudent policy would be to require strong, unique passwords for each employee and to insist that they use different passwords to access different applications. Example: At a staff meeting, a company’s IT manager offers tips for employees about good password hygiene. She explains that passphrases or longer passwords are better than short passwords based on standard dictionary words or well-known information (for example, a child’s name, a pet, a birthday, or a favorite sports team). By establishing a more secure corporate password standard and educating employees about implementing it, the IT manager is taking a step to help her company reduce the risk of unauthorized access. Store passwords securely. A company’s first line of defense against data thieves is a workforce trained to keep passwords secret. But even the strongest password is ineffective if an employee writes it on a sticky note on her desk or shares it with someone else. Train your staff not to disclose passwords in response to phone calls or emails, including ones that may appear to be coming from a colleague. Con artists have been known to impersonate corporate officials by spoofing phone numbers or email addresses. A compromised password poses a particular risk if it can be used to open the door to even more sensitive information – for example, a database of other user credentials maintained on the network in plain, readable text. Make it difficult for data thieves to turn a lucky password guess into a catastrophic breach of your company’s most sensitive data by implementing policies and procedures to store credentials securely. Example: A new employee gets a call from someone who claims to be the company’s system administrator. The caller asks him to verify his network password. Because the new staffer learned about impersonation scams at an in-house security orientation, he refuses to disclose his password and instead reports the incident to the appropriate person in the company. Example: A company keeps user credentials and other passwords in plain","id":3197409,"source":"FTC USA Business Blog Posts","titre":"Stick with Security: Require secure passwords and authentication","url":"https://www.ftc.gov/business-guidance/blog/2017/08/stick-security-require-secure-passwords-authentication","pubDate":"Mon, 05 Oct 2026 08:07:08 +0200"},{"source":"FTC USA Business Blog Posts","description":"Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement with Practice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prospective enrollees could search for doctors geographically or by specialty, read patient reviews of providers, and request appointments. But Practice Fusion had to ask itself a question familiar to many online companies: How do we get the content – in this case, patient reviews? That’s the focus of the FTC’s lawsuit. According to the complaint , Practice Fusion solicited data in a misleading way that led some patients to believe they were sending follow-up messages directly to their doctors about their diagnosis, medical treatment, prescriptions, etc. – and not contributing content to a public website. Practice Fusion, however, populated its new site with the information those people provided, some of which was highly sensitive. Here’s what happened. After appointments with their doctors, patients received emails titled “How was your visit?” The message continued, “To help improve your service in the future, please let us know how your visit went” and included a link with rating stars. The message ended this way: Thank you, Dr. [Name] In a footer, the message said “This email was sent to you by Patient Fusion®, a tool Doctor [Name] uses to deliver the highest quality of care to patients.” Below that in smaller print it said “Sent on behalf of Doctor [Name]’s office by: Practice Fusion.” If patients clicked the link, they were taken to a page that asked for feedback about things like how long they had to wait for their appointment, the doctor’s bedside manner, and whether their medical concern was addressed. There also was a text box where patients were invited to “leave a review for your provider.” Below that was a pre-checked box with the phrase “Keep this review anonymous.” What did some people put in that box? Highly sensitive information directly addressed to their doctors, not evaluations meant to be shared publicly. Here are just a few examples: “Dr [name], My Xanax prescription that I received on Monday was for 1 tablet a day but usually it’s for 2 tablets a day. I have not taken it to the pharmacy yet. Can I pick up a new one, or can I get a prescription called into a pharmacy? Thanks, [patient’s full name] “I called today and left a message regarding my daughter and no one has returned my call. I think she is depressed and has stated several times this week that she wishes she was dead. Could someone please call me [phone number]?” “The cefuroxime axetil does not seem to be doing anything for me. I did a little research and I think I have a yeast infection called candida. Not sure what to do about it yet. I guess I will first try to change my diet. Medication? [patient’s full name] “I would like to make an appointment for my back pain and possible shingles. Can you please call me @ [phone number]? Thank you! [patient's full name]” “I HAVE NO INFECTION [healthcare provider name].  EVERYTHING WENT","id":3194910,"titre":"Practice Fusion case suggests 6 health privacy pointers","url":"https://www.ftc.gov/business-guidance/blog/2016/06/practice-fusion-case-suggests-6-health-privacy-pointers","pubDate":"Sat, 03 Oct 2026 08:09:37 +0200"},{"description":"Brussels, 06 May - During its latest plenary, the European Data Protection Board (EDPB) adopted an opinion on the European Commission’s draft adequacy decision under the GDPR concerning the European Patent Organisation (EPO) . In addition, the Board adopted an opinion on the European Commission’s proposal to extend the validity of the UK adequacy decisions under the GDPR and the Law Enforcement Directive (LED) . Finally, the EDPB agreed to grant the status of observer to the Personal Data Protection Agency of Bosnia and Herzegovina.   Adequate protection of personal data by the EPO At the European Commission’s request, the Board adopted an opinion on the Commission’s draft adequacy decision regarding the European Patent Organisation (EPO). Once formally adopted by the Commission, this will be the first adequacy decision concerning an international organisation and not a country or a region. An adequacy decision is a key-mechanism in EU data protection legislation which allows the European Commission to determine whether a third country or an international organisation offers an adequate level of data protection. The effect of such a decision is that personal data can flow freely from Europe to that third country or international organisation. EDPB Chair, Anu Talus, said: “The EDPB welcomes the Commission’s initiative to work on the first adequacy decision concerning an international organisation. This decision shows how the legal framework of such organisations can be recognised as ensuring an adequate level of protection on the basis of Art.45 GDPR. The EDPB underlines the importance of ongoing dialogue between the Commission and international organisations, with a view to developing this category of adequacy decisions in addition to those relating to third countries.” In its opinion, the Board positively notes that the EPO data protection framework is largely aligned with the European Union data protection framework, including on data protection rights and principles. This shows that the GDPR and, in particular, its transfer provisions, can facilitate safe data flows from Europe to international organisations, while taking into account their status.   Six-month extension of the UK adequacy decisions The EDPB opinion, requested by the European Commission, addresses the proposed extension of the two UK adequacy decisions under the GDPR and the LED, which are set to expire on 27 June 2025. The opinion only concerns the proposed 6-month extension of these adequacy decisions and does not address the level of protection for personal data afforded in the UK, which will be examined by the EDPB following the Commission’s assessment, and if the renewal of the UK adequacy decisions is proposed. Since the UK‘s data protection reform is still pending in the UK parliament, the EDPB recognises the need for a technical and time-limited extension of the adequacy decisions until 27 December 2025.This will give the European Commission sufficient time to evaluate the updated UK legal framework once it has been adopted.   The EDPB stresses that this extension is exceptional and is due to the ongoing legislative developments in the UK. It should not, in principle, be further prolonged. The Board recalls the validity of its opinions 14/2021 and 15/2021 on the two UK adequacy decisions, adopted in April 2021, and invites the European Commission to take them into account in its future assessments.  The Board also recalls the Commission’s obligation to monitor all relevant developments in the UK during the extension period.   New observer to the EDPB’s activities Finally, EDPB members agreed to grant observer status to the EDPB’s activities to the Bosnia and Herzegovina Data Protection Authority, in line with Art. 8 EDPB Rules of Procedure .","id":2099053,"source":"EDPB News","titre":"European Patent Organisation and extension of adequacy decisions for the UK: EDPB adopts opinions","url":"https://www.edpb.europa.eu/news/news/2025/european-patent-organisation-and-extension-adequacy-decisions-uk-edpb-adopts_en","pubDate":"Tue, 06 May 2025 15:51:59 +0200"},{"pubDate":"Wed, 18 Dec 2024 15:47:16 +0100","titre":"EDPB opinion on AI models: GDPR principles support responsible AI","url":"https://www.edpb.europa.eu/news/news/2024/edpb-opinion-ai-models-gdpr-principles-support-responsible-ai_en","id":1792119,"description":"Brussels, 18 December - The European Data Protection Board (EDPB) has adopted an opinion* on the use of personal data for the development and deployment of AI models . This opinion looks at 1) when and how AI models can be considered anonymous, 2) whether and how legitimate interest can be used as a legal basis for developing or using AI models, and 3) what happens if an AI model is developed using personal data that was processed unlawfully. It also considers the use of first and third party data. The opinion was requested by the Irish Data Protection Authority (DPA) with a view to seeking Europe-wide regulatory harmonisation. To gather input for this opinion, which deals with fast-moving technologies that have an important impact on society, the EDPB organised a stakeholders’ event and had an exchange with the EU AI Office. EDPB Chair Talus said: “AI technologies may bring many opportunities and benefits to different industries and areas of life. We need to ensure these innovations are done ethically, safely, and in a way that benefits everyone. The EDPB wants to support responsible AI innovation by ensuring personal data are protected and in full respect of the General Data Protection Regulation (GDPR).” Regarding anonymity , the opinion says that whether an AI model is anonymous should be assessed  on a case by case basis by the DPAs. For a model to be anonymous, it should be very unlikely (1) to directly or indirectly identify individuals whose data was used to create the model, and (2) to extract such personal data from the model through queries. The opinion provides a non-prescriptive and non-exhaustive list of methods to demonstrate anonymity. With respect to legitimate interest , the opinion provides general considerations that DPAs should take into account when they assess if legitimate interest is an appropriate legal basis for processing personal data for the development and the deployment of AI models. A three-step test helps assess the use of legitimate interest as a legal basis. The EDPB gives the examples of a conversational agent to assist users, and the use of AI to improve cybersecurity. These services can be beneficial for individuals and can rely on legitimate interest as a legal basis, but only if the processing is shown to be strictly necessary and the balancing of rights is respected. The opinion also includes a number of criteria to help DPAs assess if individuals may reasonably expect certain uses of their personal data. These criteria include: whether or not the personal data was publicly available, the nature of the relationship between the individual and the controller, the nature of the service, the context in which the personal data was collected, the source from which the data was collected, the potential further uses of the model, and whether individuals are actually aware that their personal data is online. If the balancing test shows that the processing should not take place because of the negative impact on individuals, mitigating measures may limit this negative impact. The opinion includes a non-exhaustive list of examples of such mitigating measures, which can be technical in nature, or make it easier for individuals to exercise their rights or increase transparency. Finally, when an AI model was developed with unlawfully processed personal data, this could have an impact on the lawfulness of its deployment, unless the model has been duly anonymised. Considering the scope of the request from the Irish DPA, the vast diversity of AI models and their rapid evolution, the opinion aims to give guidance on various elements that can be used for conducting a case by case analysis. In addition, the EDPB is currently developing guidelines covering more specific questions, such as web scraping. Note to editors: *An Article 64(2) opinion addresses a matter of general application or produces effects in more than one Member","source":"EDPB News"}]