{"title":"After the GDPR: Cybersecurity is the Elephant in the Artificial Intelligence Room","authors":"Sara Degli-Esposti, Ester Mocholí Ferrándiz","doi":"10.54648/eulr2021001","DOIUrl":null,"url":null,"abstract":"This article presents an analysis of data protection authorities’ (DPAs) enforcement actions undertaken since the implementation of the General Data Protection Regulation (GDPR) in May 2018. The analysis shows that corporations fail to adopt transparent data processing practices and appropriate technical and organisational measures to secure personal data. By focusing on two specific DPAs, the Spanish AEPD and the British ICO, we make practical suggestions on how to foster the healthy development of the European digital ecosystem and the deployment of trustworthy artificial intelligence in big data environments in the face of growing cybersecurity risks.\nData protection law, cybersecurity, artificial intelligence, ICO, AEPD, DPA, big data, compliance, supervisory authority, sanctions","PeriodicalId":53431,"journal":{"name":"European Business Law Review","volume":" ","pages":""},"PeriodicalIF":0.0000,"publicationDate":"2021-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"2","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"European Business Law Review","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.54648/eulr2021001","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q2","JCRName":"Social Sciences","Score":null,"Total":0}
引用次数: 2
Abstract
This article presents an analysis of data protection authorities’ (DPAs) enforcement actions undertaken since the implementation of the General Data Protection Regulation (GDPR) in May 2018. The analysis shows that corporations fail to adopt transparent data processing practices and appropriate technical and organisational measures to secure personal data. By focusing on two specific DPAs, the Spanish AEPD and the British ICO, we make practical suggestions on how to foster the healthy development of the European digital ecosystem and the deployment of trustworthy artificial intelligence in big data environments in the face of growing cybersecurity risks.
Data protection law, cybersecurity, artificial intelligence, ICO, AEPD, DPA, big data, compliance, supervisory authority, sanctions
期刊介绍:
The mission of the European Business Law Review is to provide a forum for analysis and discussion of business law, including European Union law and the laws of the Member States and other European countries, as well as legal frameworks and issues in international and comparative contexts. The Review moves freely over the boundaries that divide the law, and covers business law, broadly defined, in public or private law, domestic, European or international law. Our topics of interest include commercial, financial, corporate, private and regulatory laws with a broadly business dimension. The Review offers current, authoritative scholarship on a wide range of issues and developments, featuring contributors providing an international as well as a European perspective. The Review is an invaluable source of current scholarship, information, practical analysis, and expert guidance for all practising lawyers, advisers, and scholars dealing with European business law on a regular basis. The Review has over 25 years established the highest scholarly standards. It distinguishes itself as open-minded, embracing interests that appeal to the scholarly, practitioner and policy-making spheres. It practices strict routines of peer review. The Review imposes no word limit on submissions, subject to the appropriateness of the word length to the subject under discussion.