• An office worker looks at a screen showing a world map laid over a visual background of binary code

    What Do I Need to Know About US and EU Privacy Legislation?​

    Data’s fluid and global nature creates a complicated network of international legal obligations.


  • Authorities working in data center room hosting server computer, Provide information services for business, isometric concept vector illustration

    Big Privacy for Big Data

    Managing the Risks of Data Analytics Big data analytics has tremendous potential. With it, you can weave together massive amounts of disparate information and discover unforeseen patterns that enable you to optimize marketing, distribution, staffing, resource allocation, and virtually any other aspect of your operations. This is both the source of its value, and of…


  • Series: Bringing Privacy Regulation into an AI World

    Over the past decade, privacy has become an increasing concern for the public as data analytics have expanded exponentially in scope. Big data has become a part of our everyday lives in ways that most people are not fully aware of and don’t understand.


  • Moving from Access Control to Use Control

    Bringing Privacy Regulation into an AI World, Part 5 I would like to outline a new concept of use control: a way of designing AI systems so that personal data can be used only for specified purposes.


  • Is AI Compatible with Privacy Principles?

    Bringing Privacy Regulation into an AI World, Part 2 Many experts on privacy and artificial intelligence (AI) have questioned whether AI technologies such as machine learning, predictive analytics, and deep learning are compatible with basic privacy principles.


  • Do We Need to Legislate AI?

    Bringing Privacy Regulation into an AI World, Part 1 In recent years, artificial intelligence (AI) and big data have subtly changed many aspects of our daily lives in ways that we may not yet fully understand. As the Office of the Privacy Commissioner (OPC) of Canada states, “AI has great potential in improving public and…


  • Why Canadian Privacy Enforcement Needs Teeth

    Bringing Privacy Regulation into an AI World, Part 7 This seven-part series explores, from a Canadian perspective, options for effective privacy regulation in an AI context. In this series on bringing privacy regulation up to date for a world of big data and AI, I have discussed the need for revised legislation, the continued relevance…


  • Implementing Use Control: The Next Generation of Data Protection

    Bringing Privacy Regulation into an AI World, Part 6 In my last few posts, I have discussed the crucial difference between access control and use control as tools for protecting privacy in an AI context. Access control has been highly effective in managing security threats – so much so, in fact, that external hacks are…


  • Big Data’s Big Privacy Leak – Metadata and Data Lakes

    Bringing Privacy Regulation into an AI World, Part 3 This seven-part series explores, from a Canadian perspective, options for effective privacy regulation in an AI context. For a long time, access control has been the principal means of protecting personal information. Fifty years ago, this meant locked file cabinets. Today, much of our personal data…


  • ACCESS CONTROL IN BIG DATA

    Access Control in a Big Data Context

    Bringing Privacy Regulation into an AI World, Part 4 This seven-part series explores, from a Canadian perspective, options for effective privacy regulation in an AI context. Access control, the ability to control access to information, has long been the primary tool of online security. The great advantage of access control is that it tells you…