Hi !
It's Arendalsuka (Norwegian conference called “Arendals Week”, and some of us from the national DPIA project are participating to discuss privacy. In light of this, we'd like to dedicate this week's newsletter to sharing recordings from the events most relevant to the national DPIA.
Unfortunately, all of the discussions and documents we are referring to in this newsletter are in Norwegian.
Event 1: National Privacy Policy – Why and How?
In the Data Protection Commission's report NOU 2022:11 'Your Privacy – Our Shared Responsibility — Time for a Privacy Policy', the need for a unified privacy policy was emphasized. Many of us in the privacy field have long desired such a national privacy policy.
Why is there a need for a national privacy policy? What should a "national privacy policy" entail?
The Data Protection Authority, Consumer Council, and The Nowegian Association for Local and Regional Authoryties (KS) presented various perspectives, answering these questions. This was followed by a panel discussion where participants discussed why it's challenging to prioritize privacy, even when "everyone" agrees on its importance.
You can find the link to both event 1 and 2 here.
Event 2: Privacy in the Education Sector
In a previous newsletter, we discussed the future of the national DPIA – what happens to it once it's complete? Who will oversee it? Are there plans to create other national DPIAs for other processors used in Norwegian schools?
The Government and KS have jointly developed a "Strategy for Digital Competence and Infrastructure in Kindergarten and School".
KS has advocated for the establishment of a permanent support service gared towards helping municipalities as controllers and school owners with privacy and information security. This is now one of the priority measures in the Government and KS's new strategy.
The form, tasks, functions, and responsible entity for this support service, will be explored and defined in a separate study, which has already started. The Directorate of Education is responsible for the study, and KS will be heavily involved in the process.
In this discussion, Udir and KS outlined the measures implemented in the strategy. The Norwegian Data Protection Authority discussed how a privacy code of conduct could serve as a tool to promote privacy in the education sector, and the Student Organization explained how students feel their privacy is respected in a school setting.
The conversation concluded with a planning discussion where the participants debated the establishment of a privacy code of conduct for the Norwegian education sector, their expectations for the national strategy measures, and the whereabouts of the Privacy Commission's initiative for a testing and competence center.
You can find the link to both event 1 and 2 here.
Event 3: Artificial Intelligence - Catalyst or Barrier to Effective Learning?
Technology has given schools a significant boost. Many cheer for, and many are concerned about, artificial intelligence (AI).
The panel discussion addresses how AI differs from previous technologies, how the technology affects learning, how we should use the technology in a way that also safeguards young people’s rights to freedom and privacy, and, importantly, who is responsible for guiding and influencing the development and use of AI in the education sector?
You can watch the discussion here.
I wish you a wonderful, privacy-friendly week-end!
Best regards,
Ida Thorsrud
Project manager national DPIA
This newsletter was translated from Norwegian to English with assistance from ChatGPT by OpenAI. While it guided our translation, we made independent editorial choices. Any discrepancies result from this combined approach.
