Data Protection Standards Research Articles

Farmers and their data: Evaluating the swiss conception of data sharing through the lens of digital farming

Digitalisation has changed agricultural production and will continue to do so. Although digital technology promises to increase the efficiency, productivity and environmental friendliness of agriculture while improving the work-life balance of farmers, new digital farming technologies come with potential negatives, such as privacy and security concerns. In recognition of that fact data is a fundamental part of digital adoption in the agricultural sector, this article analyses Swiss farmers perceptions of data sharing. We apply the Responsible Research on Innovation (RRI) approach to anticipate and discuss farmers' legal and political perspectives on agricultural data and data sharing. These form the foundation of and thus the key to digitalisation in agriculture. Based on a review of the literature and two exploratory interviews on the broader regulatory context of data sharing, Swiss data regulation and management were included as background to this work. This paper, further explores in detail the relationship between farmers' attitudes towards data sharing and their relatively low adoption of digital technologies. Such an analysis is valuable as it provides us with the farmers' perspective on data use and regulations in Switzerland which, though not an EU country, has its own high data-protection standards. More specifically, we assessed Swiss farmers’ perceptions of agricultural data sharing with public and private entities and placed these perceptions within the broader Swiss framework for data regulation. This was accomplished by a survey of 939 randomly selected farmers in the German- and French-speaking parts of Switzerland. From the Swiss farming perspective, we discuss how innovation can respond to societal needs. We conclude that the concerns, risks and vulnerabilities that Swiss famers are currently experiencing with regard to their farm data need to be addressed through a broader regulatory reform of Swiss agricultural data protection if digital farming is to achieve its full potential in Switzerland.

Relationship between Data Privacy Regulations and Consumer Trust in E-Commerce Platforms in Vietnam

Purpose: The aim of the study was to assess the relationship between data privacy regulations and consumer trust in e-commerce platforms in Vietnam. Materials and Methods: This study adopted a desk methodology. A desk study research design is commonly known as secondary data collection. This is basically collecting data from existing resources preferably because of its low cost advantage as compared to a field research. Our current study looked into already published studies and reports as the data was easily accessed through online journals and libraries. Findings: The study found that stringent data privacy regulations positively influence consumer trust in e-commerce platforms. When consumers perceive that their data is adequately protected, they are more likely to trust the platform, resulting in higher confidence levels and increased willingness to engage in online transactions. Moreover, compliance with these regulations can differentiate e-commerce platforms in competitive markets, as consumers tend to prefer platforms that prioritize data privacy and security. This relationship underscores the pivotal role of regulatory frameworks in shaping consumer perceptions and behaviors in the digital marketplace, emphasizing the importance of maintaining robust data protection standards to foster trust and sustainable business relationships. Implications to Theory, Practice and Policy: Trust theory, regulation theory and technology acceptance model may be used to anchor future studies on assessing the relationship between data privacy regulations and consumer trust in e-commerce platforms in Vietnam. E-commerce platforms should prioritize enhancing data transparency and accountability to build consumer trust. Policymakers should work towards harmonizing international data privacy standards to create a cohesive regulatory environment.

Univie: An App for Managing Digital Health Data of Refugees.

The refugee crisis has reached historic proportions, with more than 82 million people on the run. Access to healthcare is often difficult for them due to a lack of medical records and language barriers. This paper examines a digital medical documentation system for refugees that captures, stores, and translates records. International data protection standards are considered. The contribution consists of designing a system that manages and translates medical data across borders and integrates a prediction model for epidemics in refugee camps.

A tutorial on open-source large language models for behavioral science.

Large language models (LLMs) have the potential to revolutionize behavioral science by accelerating and improving the research cycle, from conceptualization to data analysis. Unlike closed-source solutions, open-source frameworks for LLMs can enable transparency, reproducibility, and adherence to data protection standards, which gives them a crucial advantage for use in behavioral science. To help researchers harness the promise of LLMs, this tutorial offers a primer on the open-source Hugging Face ecosystem and demonstrates several applications that advance conceptual and empirical work in behavioral science, including feature extraction, fine-tuning of models for prediction, and generation of behavioral responses. Executable code is made available at github.com/Zak-Hussain/LLM4BeSci.git . Finally, the tutorial discusses challenges faced by research with (open-source) LLMs related to interpretability and safety and offers a perspective on future research at the intersection of language modeling and behavioral science.

Navigating GDPR Compliance: The Intersection of Data Governance, Accountability, and Organizational Culture

This Abstract highlights the GDPR's important role in shaping data protection practices within the EU and its broader implications for data governance. The GDPR harmonizes data protection laws across EU, establishing comprehensive guidelines for the collection, processing, storage, and transfer of personal data. The GDPR directs significant penalties for non-compliance, thereby reinforcing the importance of adhering to data protection standards. Additionally the GDPR also validates the principles of lawfulness, fairness, transparency, and accountability in the processing of personal data.

Regulatory compliance in the age of data privacy: A comparative study of the Nigerian and U.S. legal landscapes

This comparative study delves into the intricate regulatory compliance mechanisms governing data privacy in Nigeria and the United States. Employing a qualitative methodology, this research synthesizes existing literature and case studies to highlight the pivotal role of data protection regulations in safeguarding personal information in an increasingly digital world. The analysis begins with an exploration of the conceptual framework of data privacy, emphasizing key principles such as transparency, accountability, and data minimization. It then meticulously examines the Nigerian Data Protection Regulation (NDPR) and the diverse U.S. legal landscape, including the California Consumer Privacy Act (CCPA) and the Health Insurance Portability and Accountability Act (HIPAA). The main findings reveal significant differences in regulatory approaches, with Nigeria's centralized enforcement by the National Information Technology Development Agency (NITDA) contrasting sharply with the U.S.'s fragmented state and federal oversight. Case studies underscore the challenges faced by both jurisdictions in ensuring compliance, ranging from resource constraints in Nigeria to the complexities of navigating multiple regulatory requirements in the U.S. The study concludes that while both countries emphasize the importance of data privacy, their divergent legal landscapes reflect unique cultural, economic, and operational contexts. The research recommends harmonizing data protection standards, enhancing enforcement mechanisms, and fostering greater public awareness to address the evolving challenges of data privacy. This study contributes to the global discourse on data privacy by offering insights into the strengths and weaknesses of different regulatory frameworks, thereby providing a roadmap for policymakers, businesses, and other stakeholders to navigate the complexities of data privacy compliance. Keywords: Data Privacy, Regulatory Compliance, Nigeria, United States, Data Protection, Legal Frameworks.

DATA PROTECTION IN THE AGE OF SOCIAL REGULATION: A CONCEPTUAL FRAMEWORK

In the current digital landscape, characterized by rapid technological advancements and pervasive social media usage, the intersection of data protection and social regulation has emerged as a critical area of focus. This research paper explores how emerging social norms and regulatory frameworks shape the ways in which personal data is collected, processed, and protected. It critically examines the evolving definitions of privacy and consent, the role of regulatory bodies in enforcing data protection standards, and the implications of social expectations on corporate practices. By presenting a conceptual model that integrates legal, ethical, and societal dimensions, the article highlights the necessity for a multifaceted approach to data protection that transcends traditional legal frameworks. It argues for a collaborative paradigm that engages stakeholders, including individuals, institutions, and policymakers, in the creation of robust data governance solutions. Ultimately, this work aims to contribute to the discourse on building resilient data protection strategies that are aligned with contemporary social values and technological realities. This article aims to analyze the effectiveness of the Personal Data Protection Act of 2023 in ensuring the right to privacy and data protection.

International Emergency Responses: Harmonizing Data Security and Protection Standards for Emergency Medical Teams

International Emergency Responses: Harmonizing Data Security and Protection Standards for Emergency Medical Teams

Control of Personal Data and Cyber ​​Space by Global Digital Platforms in Relation to Indonesia's Digital Sovereignty

The dominance of foreign digital platforms in the application ecosystem within Indonesia poses significant implications for the sovereignty of the Indonesian state; the utilization of such foreign digital technologies results in the inadvertent surrender and delegation of citizen data to foreign entities for monitoring and processing purposes. This phenomenon has elicited concern among legal scholars, as the usage of foreign applications signifies the applicability of the legal frameworks from the countries of origin of these applications. This raises critical questions regarding the sovereignty of the Indonesian state, particularly concerning its ability to exert control over data and cyberspace in the context of global platforms. The methodological approach employed in this investigation is grounded in normative legal research, utilizing a conceptual framework that examines relevant legal statutes. The aggregation and distribution of personal data constitutes an infringement upon individual privacy rights, as the right to privacy inherently encompasses the prerogative to determine the provision of personal information. The strategic policies and initiatives undertaken by the Indonesian government to bolster national digital sovereignty can be realized through several measures: the implementation of comprehensive personal data protection standards to enhance national digital sovereignty, the establishment of an independent authority for personal data protection, the fortification of cybersecurity measures to mitigate data security risks, and the jurisdictional enforcement of cyberspace law towards achieving digital economic sovereignty. There exists a pressing need for extensive regulatory frameworks to safeguard personal data as an integral component of human rights. A balance must be struck in the management of personal data processing, ensuring the protection of rights and fostering awareness among data subjects, thereby facilitating the development of a secure digital economic ecosystem that offers legal certainty for enterprises and enhances consumer confidence. Furthermore, the establishment of equitable international personal data protection regulations is essential to support the advancement of the digital economy through arrangements governing cross-border data flow.

Language Translation Tool

The Language Translation Tool project aims to develop an advanced, user-friendly software application that facilitates accurate and efficient translation between multiple languages. Leveraging the latest advancements in neural machine translation (NMT) and artificial intelligence (AI), the tool is designed to overcome the limitations of traditional translation methods, providing high-quality translations in real-time. The core of the tool is built on state-of-the-art transformer models, such as OpenAI's GPT-4 and other comparable architectures, which have been fine-tuned on extensive multilingual datasets. This allows the tool to not only translate text with remarkable accuracy but also to understand context, idiomatic expressions, and cultural nuances, ensuring that the output is both grammatically correct and contextually appropriate. Key features of the Language Translation Tool include: The project also emphasizes data privacy and security, ensuring that user data is handled with the utmost confidentiality and compliance with international data protection standards. In conclusion, the Language Translation Tool project represents a significant step forward in bridging language barriers, fostering global communication, and promoting cross-cultural understanding through innovative technology. The successful implementation of this tool promises to revolutionize how individuals and organizations interact in an increasingly interconnected world.

Cross-jurisdictional Data Transfer in Health Research: Stakeholder Perceptions on the Role of Law

Large data-intensive health research programmes benefit from collaboration amongst researchers who may be located in different institutions and international contexts. However, complexities in navigating privacy frameworks and data protection laws across various jurisdictions pose significant challenges to researchers seeking to share or transfer data outside of institutional boundaries. Research on the awareness of data protection and privacy laws amongst stakeholders is limited. Our qualitative study, drawn from a larger project in Singapore, revealed insights into stakeholders’ perceptions of the role of law in cross-national health data research. Stakeholders in our study demonstrated a range of perceptions regarding the role of data protection law in governing the collection and transfer of health data for research. The main criticisms included inadequate legal protection to data and lack of uniformed data protection standards. Despite these criticisms, participants recognised the importance of data protection law in supporting cross-border data transfers and proposed measures to improve perceived limitations of existing laws. These measures include strengthening existing legal framework, establishing contractual agreements and imposing severe punishments for data misuse.

DATA BREACHES EXIT STRATEGY: A COMPARATIVE ANALYSIS OF DATA PRIVACY LAWS

Data has become highly valuable in the era of digitalisation and is the main target of cybercriminals. Cybercriminals steal data by exploiting system vulnerabilities. The rise of catastrophic data breach incidents affects business operations, reputation and legal standing, leading to business disruptions, financial loss and reputation damage. These incidents have raised data security concerns. The frequent incident is partly due to insufficient security measures in place. This article employs doctrinal research focusing on legal principles based on legislation to analyse Malaysia’s legal framework for protecting personal data in Malaysia and a comparison with other jurisdictions, i.e. the European Union General Data Protection Regulation (GDPR), the Singapore Personal Data Protection Act 2012 and the China Personal Information Protection Law (PIPL). The findings show that Malaysia’s data protection laws fall short of the international norm in some areas. This article suggests that Malaysian policymakers may amend the Personal Data Protection Act 2010 to align with international data protection standards to strengthen data security measures in preventive, detective and responsive data breaches. Consequently, this article provides an analysis of data protection laws in Malaysia and compares them with other advanced jurisdictions. It offers valuable insights into the challenges and opportunities involved in safeguarding personal data, the legal framework, and organisational strategies related to data privacy and security.

Cross-Border Data Forensics: Challenges and Strategies in the Belt and Road Initiative Digital Era

Cross-border data forensics in the era of the Belt and Road Initiative (BRI) are facing increased complexity. Multinational enterprises are encountering legal and technical challenges due to the fragmentation of global data regulations. The different data protection standards in major jurisdictions such as the European Union, China and the United States have created varying approaches to data privacy, national security, and cross-border data flow management. A study was conducted to explore the intricate framework of traditional Mutual Legal Assistance (MLA) in criminal cases. It highlights the inefficiency of cross-border data forensics and proposes reform proposals to strengthen international data-sharing cooperation. The study suggests that data localization is an effective alternative, but developing digital forensics standards in line with the goals of the Belt and Road Initiative would be a better option. To achieve this, a comprehensive regulatory framework needs to be established that balances national security, personal privacy and international cooperation in data exchange. The framework should emphasize that cross-border data management needs to coordinate and integrate technical, legal and business considerations.

Enhancing the Responsibilities of Data Controllers in Vietnam: Insights from the European General Data Protection Regulation


 This article explores the evolving landscape of data protection law in Vietnam, focusing specifically on the responsibilities of data controllers under Vietnam's new Personal Data Protection Decree (Decree No. 13/2023/ND-CP - hereinafter referred to as Decree 13) and compares it with the European Union's General Data Protection Regulation (GDPR). The main objective is to assess how the provisions regarding data controllers’ responsibilities under Decree 13 align with international data protection standards, identifying its progress and challenges. The analysis uncovers both convergence and divergence points between the related provisions under Decree 13 and the GDPR, particularly in terms of clarity, scope, and enforcement mechanisms. A significant challenge identified is the ambiguity in Decree 13’s provisions on data controllers’ responsibilities and the absence of several essential elements, which could undermine the effectiveness of Vietnam's data protection framework. To address these issues, the article offers strategic recommendations for legislative improvements and practical adjustments for data controllers in Vietnam. In conclusion, while navigating the path to a comprehensive data protection framework poses challenges for Vietnam, this journey offers an opportunity to align with regional and global developments in data protection laws. By learning from the GDPR and adapting to its specific features, Vietnam can develop a robust, effective, and trustworthy data protection environment, safeguarding its citizens' privacy rights and facilitating a favorable international business climate.

Data Protection and Privacy as a Fundamental Right - An In-depth Analysis of the European Union and India's Data Protection Legislation

In the digital age, the protection of personal data and the right to privacy have emerged as paramount concerns, necessitating robust legal frameworks to safeguard these fundamental human rights. This paper embarks on a comprehensive study of data protection laws in two distinct jurisdictions, the European Union (EU) and India. By examining the EU’s General Data Protection Regulation (GDPR), renowned for its stringent data protection standards, and juxtaposing it with India’s evolving legal framework, particularly in light of the Supreme Court’s landmark recognition of privacy as a fundamental right and the ongoing deliberations on the Digital Personal Data Protection Act (DPDPA), 2023, this research aims to unravel the complexities of legislating privacy in the digital era. Through a comparative analysis, the article highlights the similarities and divergences between the GDPR and the DPDP Act, evaluates the effectiveness of these frameworks in safeguarding privacy, and explores the challenges posed by technological advancements. Furthermore, it delves into the future of data protection laws. By integrating legal analysis with the theoretical underpinnings of privacy as a fundamental right, this research contributes to the global discourse on data protection, advocating for a dynamic legal landscape that aligns with the evolving nature of privacy threats in the digital world.

Abstract 2283: A targeted mutation calling workflow - end to end - from FASTQ to clinical report for single cells

Abstract Molecular profiling of rare cancer cells derived from liquid biopsy holds promise to monitor systemic cancer progression and guide personalized therapy interventions. However, this necessitates reliable and comprehensive profiling of samples at the single cell level and requires whole genome amplification (WGA), which adds amplification errors and bias to common sequencing errors. Therefore, we established a single-cell mutation calling workflow that can identify clinically actionable somatic mutations in rare single cell DNA with high sensitivity and accuracy. Our workflow is an end-to-end solution which can take FASTQ reads from any Panel Sequencing (PanelSeq) data and gives out single nucleotide variations (SNVs), insertion-deletions (InDels), and copy number variations (CNVs) in single cells alongside with mutation specific information from ClinVar, OncoKB, pathogenicity scores, conservations scores as well as known association to drug response and resistance. We incorporated a Bayesian Neural Network (NN) based Classifier algorithm that assigns a single statistical confidence score to the mutations, enabling prioritization of the mutations in a robust manner. On the training dataset including MDA-MB-453, BT474, BT549 and ZR-75.1 cell lines, the classifier achieved 91% sensitivity and 96% specificity (AUC=0.98), while on the independent test collective including HCC1395/HCC1395BL cell lines it achieved 84% sensitivity and 96% specificity (AUC=0.90). We applied the workflow to patient samples suffering from advanced metastatic Triple Negative Breast Cancer (TNBC) assayed with in-house single-cell Integrated Mutation Profiling of Actionable Cancer Targets (scIMPACT) and single-cell Whole Exome Sequencing (scWES). Using our method, we detected clinically actionable SNVs with pathogenic relevance in primary tumor, metastatic specimens, circulating tumor cells (CTCs) from blood and disseminated cancer cells (DCC) from pleural effusions, as well as the matched CTC-derived in vivo models (CDX). Notably, functional in vitro drug screens performed on CDX models uncovered susceptibility to approved drug treatments conferred by mutations detected in the samples. In summary, we introduce a novel mutation calling workflow facilitating detection of SNVs, Indels and CNVs in rare single cells with high sensitivity and precision. Confident scores assigned by the NN classifier enables identification of functionally actionable mutations. The workflow was executed in GDPR compliant fashion and follows all data protection standards imposed by the European laws. Accordingly, the method is well suited for molecular profiling, therapeutic target selection and longitudinal monitoring of liquid biopsy specimens in diagnostic environments. Citation Format: Adithi Ravikumar Varadarajan, Thomas Ragg, Jonas Grote, Vadim Dechand, Steffi Treitschke, Clara Chaiban, Christoph Klein, Zbigniew Czyz, Jens Warfsmann. A targeted mutation calling workflow - end to end - from FASTQ to clinical report for single cells [abstract]. In: Proceedings of the American Association for Cancer Research Annual Meeting 2024; Part 1 (Regular Abstracts); 2024 Apr 5-10; San Diego, CA. Philadelphia (PA): AACR; Cancer Res 2024;84(6_Suppl):Abstract nr 2283.

DATA PRIVACY AND SECURITY IN IT: A REVIEW OF TECHNIQUES AND CHALLENGES

In today's interconnected digital world, data privacy and security have emerged as paramount concerns for individuals, organizations, and governments alike. This review provides a comprehensive review of techniques and challenges surrounding data privacy and security in information technology (IT) systems. The review begins by outlining the significance of data privacy and security in IT, emphasizing the proliferation of sensitive information stored and transmitted across various digital platforms. With the exponential growth of data collection, storage, and processing, ensuring the confidentiality, integrity, and availability of data has become imperative. Next, the review delves into the techniques employed to safeguard data privacy and security in IT environments. Encryption techniques, such as symmetric and asymmetric cryptography, play a crucial role in protecting data from unauthorized access and interception. Additionally, access control mechanisms, including authentication and authorization protocols, help manage user privileges and restrict unauthorized entry into sensitive data repositories. Furthermore, anonymization and pseudonymization techniques are utilized to conceal personally identifiable information (PII) and mitigate the risk of identity theft and privacy breaches. Moreover, the review discusses the challenges associated with data privacy and security in IT ecosystems. These challenges include the evolving nature of cyber threats, such as malware, ransomware, and social engineering attacks, which constantly test the resilience of IT defenses. Additionally, compliance with regulatory frameworks, such as the General Data Protection Regulation (GDPR) and the Health Insurance Portability and Accountability Act (HIPAA), presents significant challenges for organizations striving to adhere to stringent data protection standards while maintaining operational efficiency. Furthermore, emerging technologies, such as the Internet of Things (IoT) and artificial intelligence (AI), introduce novel security risks and privacy concerns due to their interconnected nature and reliance on vast amounts of data. In conclusion, the review underscores the critical importance of continuously evaluating and enhancing data privacy and security measures in IT systems to mitigate risks, comply with regulations, and foster trust among stakeholders in an increasingly digitalized world.
 Keywords: Data, Privacy, Security, IT, AI.

GDPR's impact on cybersecurity: A review focusing on USA and European practices

The General Data Protection Regulation (GDPR) has emerged as a landmark legislation reshaping the global landscape of data privacy and cybersecurity. Enforced in May 2018, the GDPR has had a profound impact on organizations worldwide, prompting a reevaluation of cybersecurity practices to ensure compliance with stringent data protection standards. This paper provides a comprehensive review of GDPR's influence on cybersecurity, with a particular emphasis on the contrasting approaches and practices adopted in the United States (USA) and Europe. The GDPR introduces a set of robust principles designed to protect the rights and privacy of individuals, emphasizing the need for transparency, accountability, and proactive measures to safeguard personal data. Its extraterritorial scope extends its impact beyond European borders, compelling businesses operating globally to adhere to its regulations. This paper explores the challenges and opportunities arising from GDPR compliance, examining how organizations in the USA and Europe have navigated the evolving cybersecurity landscape. In the USA, where privacy regulations historically differed across states, the GDPR has prompted discussions around the development of federal privacy laws. The review delves into the varying approaches adopted by American businesses, considering the interplay between state and federal regulations in shaping cybersecurity strategies. Conversely, European practices reflect a proactive response to the GDPR, as organizations have embraced the principles embedded in the regulation to fortify cybersecurity frameworks. The paper investigates the evolution of cybersecurity standards in Europe, highlighting successful strategies and potential areas for improvement. By synthesizing experiences from both sides of the Atlantic, this review contributes to a deeper understanding of the GDPR's impact on cybersecurity. It sheds light on the evolving dynamics of data protection, offering insights for organizations seeking to enhance their cybersecurity resilience in the face of a rapidly changing regulatory landscape.

QUANTUM COMPUTING AND LEGAL READINESS FOR E-GOVERNMENT SERVICES

Quantum computing promises unprecedented processing power that could revolutionize e-government services. However, realizing this potential requires updating legal frameworks on data privacy, cybersecurity, intellectual property, and procurement. This paper provides an overview of quantum computing and its applications to e-government. It analyzes gaps in current laws and regulations, arguing for benchmarks towards legal readiness. Recommendations focus on data protection standards, liability rules, transparency policies, interagency collaboration, and public-private partnerships. With timely legislation and strategic planning, governments can harness quantum computing for more secure, efficient, and equitable public services.

Legal and Regulatory Framework for the Protection of Scientific Data in Guinea

Faced with the growing importance of data security, this research aims to examine the Guinean legal and regulatory framework relating to the protection of scientific data. Through a systematic analysis of legal and regulatory provisions, enriched by interviews with key players in the academic and scientific community, the study evaluates the coherence and efficiency of legislation in Guinea with regard to international standards. Preliminary findings reveal the existence of notable progress but also significant deficits, particularly with regard to alignment with international data protection standards. On this basis, recommendations are put forward with the aim of improving the current legal and regulatory structure for optimal safeguarding of scientific data in the Republic of Guinea.