: Many generative AI tools are relatively easy to access and use. For example, no technical expertise is required to pull up and type a prompt into ChatGPT, and the most basic version is free. This reality has led to a significant amount of “shadow AI” use within organizations; that is, uses of AI that are not formally approved or are even contrary to formal policies. Concerns about shadow AI commonly arise in the context of private companies, with some studies indicating that over 80% of workers report using unapproved tools at work. Much less discussed – and worthy of far . . . [more] The post Shadow AI: A Growing Problem for Canadian Courts appeared first on Slaw
: Brussels, 20 January - The European Data Protection Board (EDPB) has adopted a report on the implementation of the right of access by controllers . The report summarises the outcome of a series of coordinated national actions carried out in 2024 under the Coordinated Enforcement Framework (CEF). It lists the issues that were observed for some controllers, along with a series of recommendations to help them implement the right of access. A central element is controllers’ awareness of the EDPB Guidelines 01/2022 on data subjects rights – Right of access and whether these guidelines were followed in practice. EDPB Deputy Chair Zdravko Vukíc said: “The CEF is a valuable initiative that helps strengthen the cooperation among Data Protection Authorities (DPAs): by tackling selected topics in a coordinated fashion, they achieve greater efficiency and more consistency. How controllers implement the right of access lies at the heart of data protection and it is one of the most frequently exercised data subject rights[...]
: A revised first edition of the Canadian Open Access Legal (COAL) Citation Guide/Guide canadien de la référence juridique en accès libre (RJAL) is now available. The guide’s editors have incorporated reader feedback and corrections into a revised edition. Some of the changes include moving the general rules to their own section and revising rules on citing regularly updated books, regulations, administrative decisions, and generative AI for greater clarity and increased consistency across the guide. Additions to the guide include guidance on creating a bibliography/table of authorities and on citing reports, dissertations, municipal by-laws, court materials, First Nations, Métis, and Inuit - Crown Treaties, amongst other sources. A more detailed list is in the guide’s introduction. Since the publication of the guide in June 2024, the editors have led multiple online training sessions and conference workshops. We are now working on training materials that reflect the revised edition. The francophone editors c[...]
: Brussels, 19 March - The EDPB has launched its Coordinated Enforcement Framework (CEF) action for 2026*. Following a year-long coordinated action on the right to erasure in 2025 , the CEF's focus this year will shift to compliance with the obligations of transparency and information under the GDPR . The GDPR ensures that individuals are informed when their data is being processed (under Art. 12, 13 and 14). This right to be informed is a core element of transparency and ensures that individuals have more control over their data. Next steps During 2026, 25 Data Protection Authorities (DPAs) across Europe will take part in this initiative. They will look closely to assess the compliance of controllers with their transparency obligations under the GDPR. Participating DPAs will soon contact controllers from different sectors across Europe, either through enforcement actions or fact-finding exercises. In the latter case, they might also decide to undertake additional follow-up actions if needed. During the second[...]