Mapping out the Rosen Docket

-
Federal prosecutors in D.C. typically provide notice to a person after receiving court approval to track them with geolocation data. However, after obtaining a warrant to search journalist James Rosen's Gmail account in May 2010, the government argued it did not have any obligation to provide the same notice to the customer/subscriber when it comes to email and ultimately won. The difference comes down to the different provisions under ECPA and other procedural rules under which the government obtains warrants for the different types of information. Check out the ACLU's post for an overview, or this link for my summary of the arguments contained in the recently unsealed documents. Keep in mind that the issue here is the ECPA language applied to the government's disclosure obligations, not the service provider's, although the latter is often prohibited from giving the user notice.

Popular posts from this blog

A Privacy Engineer's Guide to the EU AI Act

-
Image
I've been thinking about the ways the EU AI Act's requirements fit within existing privacy review or software development processes more generally. After the past few years of gradually improving data governance practices thanks to GDPR and other sources, tossing in a few more compliance requirements shouldn't be a big deal, right? Here are some answers and plenty of references for those who are just getting started. What is it? The EU AI Act is a risk-based framework for evaluating creation, use, and deployment of models. Some uses of AI are strictly prohibited, while requirements for others vary. Here's the raw text and a helpful AI Act Explorer .  Obligations are based primarily on whether you're a provider (of a general-purpose AI system) or deployer. (Definitions here .) It will be interesting to see where the line is drawn between provider and deployer; in other words, whether a deployer can modify a general purpose system enough to become a provider. Jurisdi
Read more

A New Serverless Look

-
(Update 3/20/2024: If it ain't broke, do the classic developer thing and rebuild it! I've taken the site described below offline, and moved its posts here.) Until recently, I had no reason to build anything elaborate with a serverless architecture. Yet it's everywhere now! There's  Amplify , Netflify , JAM , SAM , lambdas , workers and more to learn about.
Read more