PrivacyCloud provides vendor risk management solutions focused on MarTech, ecommerce, and media, self-described as enabling compliance and privacy strategies.

PrivacyCloud

Advertising Services

Trusted Brands Program

PrivacyCloud | 1,192 followers on LinkedIn. Vendor Risk Management for MarTech, Ecommerce and Media. | PrivacyCloud&#39;s team combines a cross-border legal background with Privacy Engineering capabilities and a track record in Marketing Technology, eCommerce, Analytics and AI.

Directora de Relaciones Institucionales en DCH

Mariola Alonso-Cortés Rodríguez

Co-founder and CEO at PrivacyCloud

Sergio Maldonado

Abogado | Seguros | Derecho Informático y Protección de Datos Personales

Gonzalo Carrasco Pini

Fernando Freije Fuente

After the recent European Data Protection Board Guidelines on article 5.3 of the #ePrivacy Directive, this article is even more relevant. Why stop short at less intrusive #advertising or #measurement solutions if everything requires consent? Let’s keep on pretending that consent is free and informed while collecting as much data as we possibly can. The more life we infuse on the ePrivacy Directive, the further we get from embracing Privacy by Design in #DigitalMarketing . “Consent or Pay” choices? A natural side-effect. https://lnkd.in/dN8H6RQS #dataprotection #privacy

We are sharing some of our takeaways from the IAPP 's #PSR24 event in Los Angeles last week. Primarily: #MyHealthMyData Act and Third Party/ Vendor management (audits, DPAs...) https://lnkd.in/dqQkmASu #privacy #dataprotection

The latest #Newsroom , with all the relevant links, is now available on our blog. https://lnkd.in/eS_GFbfv #CDP #Uber #FTC #AI #California

[EN] For the first time, a Customer Data Platform ( #Segment - now Twilio), is subject to a class action for its data collection and data sharing practices. What’s most surprising -to us- is that the data controller ( Calm app) is apparently off the hook despite having determined the purposes of such SDK. We commented on it in our latest Masters of Privacy #newsroom https://lnkd.in/dqSdnVR9

The topic has been covered to death in the past few weeks, but we still needed to properly digest the context and longer term consequences of Google’s recent decision to shelve the deprecation of third party #cookies in Chrome. - What was the interplay between #competition and #dataprotection authorities? - What was the problem with the #PrivacySandbox ? - Who benefits the most from maintaining the status quo? - Will "elevated user choice" result in the end of cookie banners as we know them? https://lnkd.in/dXaJAWRd

We are back with a #Newsroom summarizing Q2 in our little world, including a quick review of key recent events in our usual five sections ( #ePrivacy , #MarTech /AdTech, AI/Competition/Digital Markets, #PETs /Zero-Party Data, Future of #media ), now including: EU Digital Wallet, European Data Protection Board 's #ChatGPT Task Force report, Mozilla ’s acquisition of #Anonym , Oracle’s exit from AdTech, Revolut ads, EU Commission vs. #Apple ’s App Store, Meta AI *not* training on EU user data, Copilot+ Recall, and The Trade Desk’s curated publishers. https://lnkd.in/dwVHc_Pe

More notes from #PEPR24 (USENIX Conference on Privacy Engineering Practice and Respect), now over. All of it highly enjoyable. - Jessica Colnago and Simon Fondrie-Teitler (Federal Trade Commission): Careful with false and misleading representations regarding the use of PETs in your tech stack. The FTC has already come after Henry Schein (2016), Zoom (2020) and CafePress (2022) for this (ie., not keeping the show-offs in marketing under control) - Wendy Seltzer : Our many efforts to keep personal data closer to us in a more human-centric way (eg., pods, personal data stores, etc.) have floundered. In hindsight, identity is relational - you cannot be a guest without a host, a patient without a doctor…Many of our attributes originate in a counterpart and those at each end of the relationship may have different goals. This requires real governance. - Arthur Borem (University of Chicago) shared a really interesting study on the user experience of data subject access requests ( #DSAR ). Users are both unable to explore the files they are given (Json!) and overwhelmed by their size and depth. They are in fact looking for a direct answer to: What is being stored (eg., payment details); How it’s being stored (eg., retention period); and How it’s being used (eg., ads, sold to others). They are also hoping for high-level takeaways, but these are never on offer. It is likely that in an attempt to ensure “machine-readability” (in line with the separate right to portability), human accessibility has been left behind. - Aziel Epilepsia , Fernando Rubio, Ansuman A. (Airbnb): The Airbnb team was forced to build their own Consent Management Platform after verifying that expensive off-the-shelf tools did not really allow them to implement legal requirements in a consistent way. #CMP vendors would also fail at properly supporting different regions or easily onboarding new features, considerably delaying product iterations. - Lisa LeVasseur , Bryce S. (Internet Safety Labs): The ISL team has managed to measure and benchmark privacy risks across EdTech mobile apps at scale, creating an SDK Risk Score and providing their own Safety Labels. - Ryan Guest (Amazon): When it comes to deploying the Global Privacy Control signal (Universal Opt-Out) across a very large amount of digital properties, touchpoints and devices (either server-side or client-side), different teams may come up with highly-creative, and also highly-inadequate formulas. (Orchestration, training, and guidance seem particularly important in an organization of this size.) #GPC - Tamara Bonaci : More work should be done on Machine Unlearning as a means to remove the effect of certain pieces of personal data on a trained algorithm once such records have been deleted (eg., at the request of data subjects). MU is already working for smaller models. (We've run out of characters in this post but we'll add more notes elsewhere). Hopefully seeing you all again next year. #Privacy #PrivacyEngineering

A few notes from #PEPR24 (USENIX Conference on Privacy Engineering Practice and Respect - Santa Clara, CA), with a full day still to go: - Damien Desfontaines (Tumult Labs): Synthetic data is not the privacy-preserving silver bullet that many believe. Vendors should share empirical metrics, test for reconstruction and target outliers. (Damien is a former Masters of Privacy guest.) - Yuchao Tao (Snapchat): Unlike other social networks, #Snapchat does not share a member’s social graph. Snap leverages differential privacy to make sure that this is not compromised while suggesting new connections. It is still not risk-free, though (as made clear during the FAQ). #ABSet - Jordan Brandt (Inpher): Combining PETs (rather than picking one) is the way to go if we want to provide privacy safeguards while achieving high precision. Keeping data encrypted for as long as possible (eg., in Trusted Execution Environments) and adding noise (Differential Privacy) at the very end helps maintain such precision. - Jian Du and Shikun Airin (TikTok): Applying Secure Multiparty Computation alone provides “input privacy” in ad performance measurement, but does not guarantee output-related safeguards, so #DifferentialPrivacy should be applied on top. - Matt Gershoff (Conductrics): We need to be intentional about the data that we collect. This boils down to discarding “magical thinking” about the abstract possibilities of collecting data without control. Minimizing granularity and "linkability" in AB Testing can deliver k-anonymity, providing efficient computations/storage and beyond, as well as guaranteeing alignment with privacy by design and privacy by default principles. - Daniel Simmons-Marengo (Tumult Labs): How can we provide anonymization while it remains such an elusive target? Be skeptical about it, minimize assumptions, do not rely on governance, build with composability in mind and expose your technique to others. Looking forward to the rest of the sessions! #privacyengineering

We’re working with the Competition and Markets Authority on its investigation into Google’s proposed browser changes. The CMA has published its latest update report on how Google is implementing its Privacy Sandbox commitments. The report incorporates our preliminary assessment on the privacy and data protection impacts of the Privacy Sandbox. We will continue to work with the CMA as Google resolves the remaining competition concerns before going ahead with third-party cookie deprecation. Read the report for more: https://lnkd.in/d-rXxiyD .

Information Commissioner's Office

In case you missed it: FTC’s statement on #Privacy compliance requirements for #AI “Models-as-a-service”. https://lnkd.in/gAKSfcFb

PRIV

COM:PRIVACYCLOUD

PrivacyCloud