Privacy and Information Security Professional | soft woman🍀
Tallinn, Estonia
Joined March 2018
- Tweets1.7K
- Following320
- Followers145
- Likes3.1K
…and non-technical people. Very useful for AIGP prep especially.
My special interest is privacy engineering, so I also love that one a lot but probably too technical for many people. Super good challenge though if you want to push yourself and future-proof your career.
That said, I have found the AI Governance labs the one I have learned from the most as a professional. It is tough by design but you will never forget what you learn... well I haven’t. It breaks down the most technical details in a way that is easily understandable for lawyers…
… dev tools in a non-technical friendly manner. The Privacy by design lab moves PbD from abstract principles to concrete artifacts like agile integration etc. The privacy incident playbook also puts you in the hot seat where you have to make important life/death decisions (lol)
Someone asked me today what my favorite path on @Privarlylearn is and tbh that is sooooo hard to say. I am partial to the privacy program management module. It is very hands-on. You have to actually audit a website, you have to do actual cookie configurations, you have to use…
Tolulope retweeted
What tasks should AI be trusted with, and when should humans remain involved? Designing those decision rights is one of the defining challenges of the AI era. Researchers at the MIT Center for Information Systems Research have developed a framework to help.
Learn more: bit.ly/4zed20M
ALT This image is an informational chart titled "The AI Decision Matrix" from MIT Sloan School of Management. It is a grid with axes labeled "Ambiguity" (vertical) and "Risk" (horizontal). The four quadrants are labeled: Exploratory (high ambiguity, low risk), Strategic (high ambiguity, high risk), Routine (low ambiguity, low risk), and Consequential (low ambiguity, high risk). Each quadrant describes an approach and decision type and includes recommended levels of human and AI involvement in decision-making. A legend at the bottom specifies decision components and participants, with icons for human and AI. Adaptation credit is given to authors and publication details at the bottom right.
5. Preparing stakeholder briefings, a board presentation outline and an executive summary to support an informed go/no-go decision.
The capstone brought together legal research, privacy risk assessment, and practical business planning in one end-to-end simulation.
5/5
4. Assessing five international data flows, distinguishing EU export requirements from HIPAA disclosure rules and Japanese transfer requirements.
5. Building a €180,000 remediation roadmap, with priorities, owners, deadlines, dependencies and resource estimates.
4/5
2. Identifying compliance gaps and evaluating privacy policies against the planned expansion.
3. Conducting a Privacy Threshold Analysis and DPIA, assessing risks from sensitive health data and AI processing.
3/5
Completed @Privarlylearn's Project Horizon: Multi-Jurisdictional Privacy Assessment capstone, acting as a Privacy Analyst for a simulated biotech company expanding from the EU into the US and Japan.
1/5
Tolulope retweeted
aibcf.org/controls/ - AI Baseline Control Framework
Manage & govern AI use in your organization
The AI Baseline Control Framework (AI BCF) is a free, open framework of 20 AI governance controls for organizations that deploy (use) AI. Each control is mapped to the NIST AI RMF, ISO/IEC 42001 and the EU AI Act. The AI BCF helps organizations of all sizes understand what is necessary to manage & govern AI deployment.
Just completed the lab "AI Impact Assessment" on Privarly: career-focused privacy training. privarly.com/labs/ai-impact-…
Just completed the foundation module "AI Governance Foundations" on Privarly: building real privacy skills. privarly.com/modules/ai-gove…
what a nightmare 😣
BREAKING: ASOS customers have received a push notification saying the e-commerce giant had been 'hacked'
Sky's Phoebe Southworth has the details.
qrcode.skynews.com/skynews/A…
At the cafe, I made my order entirely in German and then had a nice conversation with the waiter all in German and I’m sooooo proud of myself😄
Studying cybersecurity while working in privacy has made me think differently about privacy controls. Lawyers naturally start with obligations, security folks often start with threats, engineers start with systems. Good privacy engineering requires all three perspectives.
