When am I actually GDPR compliant?
When it comes to GDPR, the biggest misconception is that compliance is a one-off project and that once you have checked all the boxes, you don’t have to worry about it anymore.
GDPR Compliance
A collection of articles on the EU Regulation 679/2016, also referred to as General Data Protection Regulation.
Who does actually read my privacy policy?
Not taking into account the importance of protecting your users’ privacy and their personal data may damage your brand reputation and get you out of business. We saw companies lose deals in B2B and B2C startups lose partnerships and reimbursement agreements.
Can I use Google Cloud now? The new EU-US Adequacy Decision on data transfers
Since July 10th you can start again using US service providers like AWS, Google Cloud, and Azure, without any trouble (and additional safeguards).
This is thanks to the new Adequacy Decision approved by the EU Commission for the United States.
3 ways to use sensitive data for product improvement in B2B digital health
In this blog article, we will go through this topic from the POV of a digital health startup and try to give you a better understanding of when you should ask for consent and why.
What does the ban on ChatGPT mean for AI startups in Europe?
Italy’s data protection authority has ordered OpenAI to stop processing people’s data locally with immediate effect. The Italy DPA claims that ChatGPT is breaching the GDPR due to unlawful data processing.
Do we avoid GDPR when we leave the data on the device?
Many digital health companies, afraid of the costs and timeline of a proper GDPR implementation, opt for a strategy to store personal and sensitive data inside the devices, hoping to circumvent the regulation.
Can you use AWS/Azure/Google Cloud in digital health in the EU in 2023?
After the invalidation of the previous adequacy decision on the EU-US Privacy Shield, the US is still considered TODAY a Third country without an Adequacy Decision according to GDPR.
“My users put personal data into my app, even though I tell them not to”
What happens when a user puts personal data in a free text field even though we tell them not to? How do we deal with this case?
ChatGPT: can (should) it handle sensitive data?
Although the tool can boost AI innovation, it is crucial to keep in mind that there are still some “grey areas” on the data protection and privacy side. We will focus our assessment on the GDPR.