The Catalan Data Protection Authority (APDCAT) has shared in Jersey, at the Global Privacy Assembly (GPA) 2024, its concerns about the regional challenges of disruptive technologies. In this sense, the director Meritxell Borràs, has been one of the representatives chosen to participate in the panel organized to discuss this matter, together with representatives of the authorities of Japan, Brazil and Kenya.
In his intervention, Borràs defended that the data protection authorities must take action regarding the new challenges posed by the new Artificial Intelligence Regulation (RIA), to prevent our rights from being diluted. He recalled that the General Data Protection Regulation (GDPR) also applies to systems subject to the RIA. In this sense, he has vindicated the work of data protection authorities to protect fundamental rights and freedoms in the use of AI in the face of the gap in this Regulation, which does not mention new individual rights.
Borràs added that most AI systems deal with personal data throughout their life cycle, and that it is the data protection authorities that should control the application of the RIA, given their experience in the analysis of AI systems from the perspective of the GDPR. Also because of the experience in data computing and cyber security, and in risk assessment for fundamental rights, because of its independence, and because the RIA itself gives the data protection authorities the supervision of some AI systems d high risk Likewise, he has defended that the attribution of new powers by the RIA must be accompanied by the human and financial resources necessary to carry them out.
With regard to disruptive technologies, he pointed out that data protection regulation must serve to give security and confidence to society and companies to develop them.
Finally, the director talked about the actions that the APDCAT is promoting for training, research and specialization in the field, which includes the preparation of studies, as well as the creation of working groups within the framework of the Network of Catalan data protection delegates, one of which is developing a methodology to carry out impact assessments on fundamental rights in the use of AI.
Global Privacy and Data Protection Awards
On the other hand, within the framework of the GPA 2024, this year the APDCAT has been awarded the Global Privacy and Data Protection Awards 2024, in the category of 'Education and public awareness', among 37 nominations submitted. The award is an international recognition of the work carried out with the project 'Who are you? Data that talk about you', promoted jointly with libraries, thanks to the support of the Library Service of the Department of Culture of the Generalitat and the Diputació de Barcelona, and which aims to promote the culture of privacy based on materials, resources and activities designed for children, young people and adults.
In addition, the GPA has distinguished a second project presented by the APDCAT because it has been a finalist in the category of 'Proactive responsibility' with the project 'DPD en xarxa', the first learning and collaboration data protection officers network in Catalonia, promoted by the APDCAT.
In the framework of the Global Privacy Assembly 2024, the Catalan Data Protection Authority participated in a round table where it highlighted the role of data protection authorities in the face of the challenges of artificial intelligence and disruptive technologies