AI Governance Is No Longer Optional: What Privacy Employers Are Really Asking For
If you’ve been reading our quarterly Privacy Job Repor... ...
From July 1, 2021 the CIPP/E body of knowledge and exam will be updated.
The changes are not huge. They are supposed to represent about 10% of the content (which equates to around 9 of the 90 questions) but given the information that’s been provided about the changes, it’s likely to be less than that.
According to the iapp, the following new topics will be added to the CIPP/E body of knowledge and exam from July 1, 2021:
Examinees must understand the post-Schrems II position in regard to Standard Contractual Clauses. In particular, that in addition to the use of SCCs, organisations transferring data out of the EEA who are relying on SCCS must also conduct what are now commonly being referred to as ‘transfer impact assessments’ or TIAs. These TIAs will involve a consideration of the laws in each recipient country to ensure essential equivalence to EU law for personal data being transferred under SCCs or BCRs. If the laws are not essentially equivalent, companies must provide additional safeguards or suspend transfers.
To facilitate this assessment, many organizations are relying on questionnaires sent to organisations in the non-EEA or adequate jurisdictions. The are also adopting a combination of technical, organizational and contractual safeguards, using the advice provided to date by the EDPB on what might be appropriate supplementary measures..
Note: If additional guidance is provided by the EDPB on this topic, you should be aware of the same.
The content has expanded its coverage of Artificial Intelligence and Machine Learning. In particular it refers to ethical considerations around the use of AI/ML. Examinees will need to have some appreciation of the issues around the use of AI/ML and in particular some of the ethical concerns. This is consistent with recent releases from the European Commission on the topics of AI.
For more information, examinees are directed to:
European Commission: Strategy for Artificial Intelligence: https://digital-strategy.ec.europa.eu/en/policies/strategy-artificial-intelligence
Ethical guidelines for Trustworthy AI: https://iapp.org/media/pdf/resource_center/AIEthicsGuidelinespdf.pdf
The updated CIPP/E Body of Knowledge is available here.
The changes are:
Privacy 108 is running its next CIPP/E training course on 16th and 17th August.
More information here.
What included:
What a super course! As far as courses go this has been really enjoyable and exciting to do, compared to many other dry subject matter areas I’ve covered in my career.
For anyone who wants to do the exam, I would give the following feedback … Attend Jodie’s training session!
To register or for more information, click here.
Not sure whether you’re ready to take the CIPP/E exam or interested in finding out more about what’s required:
And you can also read some of our previous blog posts relating to the CIPP/E:
"*" indicates required fields
"*" indicates required fields
Privacy 108 collects your name and email to send you our newsletter. If you do not provide this information, we will be unable to send it to you. We may use third-party service providers (such as email marketing platforms) to distribute our communications. Some providers may store information overseas, including in the United States. For more information about how we handle your personal information, including how to access or correct it or make a complaint, please see our Privacy Policy or contact us at hello@privacy108.com.au. You can unsubscribe at any time using the link in our emails or by contacting hello@privacy108.com.au.