Privacy and Information Security Professional | soft woman🍀
Tallinn, Estonia
Joined March 2018
- Tweets1.7K
- Following320
- Followers145
- Likes3.1K
Tolulope retweeted
What tasks should AI be trusted with, and when should humans remain involved? Designing those decision rights is one of the defining challenges of the AI era. Researchers at the MIT Center for Information Systems Research have developed a framework to help.
Learn more: bit.ly/4zed20M
ALT This image is an informational chart titled "The AI Decision Matrix" from MIT Sloan School of Management. It is a grid with axes labeled "Ambiguity" (vertical) and "Risk" (horizontal). The four quadrants are labeled: Exploratory (high ambiguity, low risk), Strategic (high ambiguity, high risk), Routine (low ambiguity, low risk), and Consequential (low ambiguity, high risk). Each quadrant describes an approach and decision type and includes recommended levels of human and AI involvement in decision-making. A legend at the bottom specifies decision components and participants, with icons for human and AI. Adaptation credit is given to authors and publication details at the bottom right.
Tolulope retweeted
Want to understand what privacy work actually involves?
Start with one practical task that interests you.
Privarly’s guided labs let you explore the work before choosing a direction. You can start for free.
1/5
🤖 Made with AI
ALT explore privacy work through practice
Tolulope retweeted
Privacy work includes records, requests, assessments, policies and difficult decisions. Privarly gives you guided labs and career paths to practise the work.
Explore: privarly.com/
Tolulope retweeted
Operations, analysis, programme management, legal strategy, engineering, AI governance or DPO work? Explore seven privacy career tracks and find the tasks that interest you.
privarly.com/careers
Tolulope retweeted
aibcf.org/controls/ - AI Baseline Control Framework
Manage & govern AI use in your organization
The AI Baseline Control Framework (AI BCF) is a free, open framework of 20 AI governance controls for organizations that deploy (use) AI. Each control is mapped to the NIST AI RMF, ISO/IEC 42001 and the EU AI Act. The AI BCF helps organizations of all sizes understand what is necessary to manage & govern AI deployment.
Tolulope retweeted
Taking the weekend to catch up on the reading assignments from this week.
If you see potential synergies between the EU AI Act and GDPR, take a look at the following decision from the Italian DPA: lnkd.in/eJ46Htj7.
Tolulope retweeted
Mapping NIST AI RMF + Forrester RACI → Microsoft security stack
onedrive.live.com/:x:/g/pers…
Tolulope retweeted
We're thrilled to announce the next section of our Privacy Activism resources! 🎉
📑 The Data Protection Authority Directory is a new tool to help you find the main consumer privacy law in your region, and the authority mandated to enforce that law.
We sincerely hope this will be a useful tool for building your knowledge about what privacy protections you're entitled to. Paired with our resource on reporting privacy violations in our Privacy Activist Toolbox, you can take a stand against violations of your privacy rights, and make a significant impact benefiting both you and your community.
Find your country/state/region here: privacyguides.org/en/activis…
Tolulope retweeted
EU Cybersecurity Policy Directory
Policies
Overview of all EU cybersecurity-relevant legislation and policies in the database
cyber-policy-directory.eu
via RA Stephan Schmidt
Tolulope retweeted
1/2
E-Mail-Anbieter muss nach § 21 Abs. 2 TDDDG keine Auskunft über Bestandsdaten des Nutzers einer E-Mail-Adresse erteilen
OLG München, Beschluss vom 26.08.2025, 18 W 677/25 Pre e
gesetze-bayern.de/Content/Do…
Tolulope retweeted
Failure to comply with Uganda’s Data Protection and Privacy Act can result in financial penalties and reputational damage.
Early compliance reduces risks and avoids costly enforcement action.
Explore the Uganda Module to check your compliance:
privacyguide.africa/uganda
#Uganda
Tolulope retweeted
Operating across borders in Africa means your compliance obligations change from one country to the next.
Nigeria, Rwanda & Uganda all set different registration requirements.
Check the registration rules for all three countries here: privacyguide.africa
#Dataprotection
Tolulope retweeted
In Uganda, most organisations must register with the Personal Data Protection Office including foreign entities.
This is one of the first steps.
It promotes transparency under the Data Protection and Privacy Act.
Check if you need to register 👉 privacyguide.africa/uganda-r…
Tolulope retweeted
Uganda Assessment Module is LIVE
And it's sizzling hot🔥
From the Pearl of Africa comes your FREE guide to Uganda’s Data Protection laws.
If you collect/process Ugandan data, compliance starts here.
No more guessing. No excuses.
Access the module here:
privacyguide.africa/country/…
Tolulope retweeted
📢 Listen to the new podcast episode from Dr Datenschutz featuring the EDPB Chair.
Among topics discussed: the EDPB’s & DPAs’ roles, GDPR and AI, and what lies ahead for the GDPR.
🎧 Listen now: dr-datenschutz.de/podcast/75…
#DataProtection #GDPR #ArtificialIntelligence #AI
Tolulope retweeted
Come & work with me at the Hasso Plattner Institute - I am looking for 6 teaching assistants for my EU Tech Law course. Apply now! Deadline: 10.08.2025 tinyurl.com/b7cwx7e9 @hiig_berlin @JWI_Berlin @algorithmwatch @AJLUnited
Tolulope retweeted
Do you collect data from users in Rwanda?
You might need a local representative and it goes beyond having a local address.
This video breaks it down:
✔ Who qualifies
✔ What the rep does
✔ How to appoint
✔ What to do if things change
Check here: privacyguide.africa
Tolulope retweeted
Happening Today!
Join Ridwan Oloyede, AI Governance & Tech Policy Lead, as he shares insights on what what data equity really means and why it matters for social justice.
Date: Wed, 25th June 2025
Time: 11:00 AM WAT | 10:00 AM GMT
Register here: shorturl.at/M9zja
Tolulope retweeted
Not every project needs a Data Protection Impact Assessment (DPIA), but some do.
Handling sensitive data?
Affecting many people?
Using new tech/monitoring?
If yes, you might need a DPIA.
✅ Check in 2 mins: privacyguide.africa
