The latest

Our client's personal identification numbers and financial records, which were stored on TopServer's server, were compromised in a security breach conducted by the company's janitor, who was later revealed to be a cybercriminal. Given that TopServer had some lapses in security compliance with data protection regulations and considering the service agreement that includes data security assurances, what legal responsibilities does TopServer bear in this situation? What specific claims can our client make against TopServer for the unauthorized transactions and identity theft, which have resulted in an estimated loss of $50,000, and what compensation or other remedies should we seek, given that TopServer has reported the breach timely and has begun taking remedial actions?

TopServer may hold legal responsibility due to security lapses and potential non-compliance with data protection regulations, despite their prompt breach report and remedial actions. If they were not just transmitting data but played a role in how the data was handled, they might be liable for the breach. Your client could argue that TopServer knew or should have known about vulnerabilities and did not act to prevent the breach, which caused considerable financial loss. Claims may be made against TopServer for failing to remove or restrict access to compromised data, and your client may be entitled to seek compensation for the unauthorized transactions and identity theft. Options include lodging a formal complaint with the relevant regulatory body for a potential breach of the Digital Services Act. Legal remedies could cover both direct financial losses and more extensive damages stemming from the data breach.

Read more

I am based in the EU and recently purchased a service package from WordPress. Due to unclear pricing and package details on their EU-targeted platform, I accidentally selected a package that exceeds my business needs, and I am now locked into a one-year contract. It has been approximately one month since the purchase. WordPress customer service has informed me that the contract is non-modifiable and binding for the full term. Given my situation, I would like to know if the EU Digital Services Act offers any legal grounds for me to withdraw from this contract, modify my service package, or receive any form of redress.

The EU Digital Services Act imposes transparency requirements on online platforms, including the need to report on dispute resolutions, which may offer insights into how your issue with WordPress might be resolved if escalated. However, smaller platforms may be exempt from these requirements. It’s crucial to determine whether WordPress qualifies as a "very large online platform" as this will influence their obligation to adhere to these rules and, consequently, your rights concerning contract modifications and redress for unclear pricing and package details.

Read more

I am interested in understanding the algorithms Instagram uses to make content suggestions to users like me, and I want to ensure my user rights are respected. Can you explain how the Digital Services Act addresses the transparency of such recommendation algorithms, and advise me on what legal steps I can take to gain better insight into Instagram's algorithmic practices?

Under the Digital Services Act, Instagram is required to clearly explain the primary factors of their content recommendation algorithms in their terms and conditions and provide you with options to adjust these settings if offered. For platforms classified as very large, they may also need to disclose detailed information about their algorithms' design and logic to EU authorities upon request. Additionally, there are procedures in place to handle disputes and ensure compliance with these transparency requirements, with the European Commission playing a role in enforcement. As an entrepreneur, to gain insight into Instagram's algorithmic practices, you should regularly review their terms, transparency reports, and be proactive in utilizing any available settings to influence content recommendations. If you believe Instagram isn't providing adequate information, you can request an investigation by the relevant EU authorities.

Read more

What are the new transparency requirements for content moderation under the DSA, and how should we adapt our current systems to comply?

To comply with the Digital Services Act (DSA), your online platform must address transparency requirements by documenting and publicly reporting content moderation efforts, conducting risk assessments, subjecting your systems to independent audits, and ensuring data can be accessed by regulators. If you operate a very large platform with over 45 million EU users, you'll be held to higher standards, such as providing clear, machine-readable annual reports on content moderation actions and assessing systemic risks associated with your services, including algorithms. You'll need to adapt your current systems to facilitate these processes and to safeguard user privacy and service security while doing so. Start these implementations promptly, as the compliance deadline is 2024.

Read more

What are the new transparency requirements for content moderation under the DSA, and how should we adapt our current systems to comply?

To comply with the new transparency requirements under the DSA, your platform needs to clearly communicate its content moderation policies, including how decisions are made and the role algorithms play in this process. Additionally, you'll need to establish secure data sharing capabilities with regulators to report on your content moderation practices. Start by updating your content moderation policies, making algorithmic processes transparent to users, and implementing data-sharing mechanisms that protect privacy. Although specific to the DSA, these changes can ensure that you meet the regulatory standards for operating transparently online. Consult the DSA text and seek legal advice for complete compliance.

Read more