• Algorithms that forget: Machine unlearning and the right to erasure 

      Juliussen, Bjørn Aslak; Rui, Jon Petter; Johansen, Dag (Journal article; Tidsskriftartikkel; Peer reviewed, 2023-09-22)
      rticle 17 of the General Data Protection Regulation (GDPR) contains a right for the data subject to obtain the erasure of personal data. The right to erasure in the GDPR gives, however, little clear guidance on how controllers processing personal data should erase the personal data to meet the requirements set out in Article 17. Machine Learning (ML) models that have been trained on personal data ...
    • Governments' Enforcement of Corporate Bribery Laws: A Call for a Two-Track Regulatory Regime 

      Rui, Jon Petter; Søreide, Tina (Journal article; Tidsskriftartikkel; Peer reviewed, 2019-06-13)
      Internationally, there is a trend toward a regulatory regime for corporate bribery with more emphasis on <i>ex ante</i> oversight and preventive systems, and less emphasis on investigations driven by suspected crime. Governments want the benefits associated with civil law regulation – including corporate self-regulation and the flexibility associated with non-trial resolutions, although such tools ...
    • Sport and Nutrition Digital Analysis: A Legal Assessment 

      Juliussen, Bjørn Aslak; Rui, Jon Petter; Johansen, Dag (Journal article; Tidsskriftartikkel; Peer reviewed, 2023-03-29)
      This paper presents and evaluates legal aspects related to digital technologies applied in the elite soccer domain. Data Protection regulations in Europe clearly indicate that compliance-by-design is needed when developing and deploying such technologies. This is particularly true when health data is involved, but a complicating factor is that the distinction between what is health data or not is ...
    • The third country problem under the GDPR: enhancing protection of data transfers with technology 

      Juliussen, Bjørn Aslak; Kozyri, Elisavet; Johansen, Dag; Rui, Jon Petter (Journal article; Tidsskriftartikkel; Peer reviewed, 2023-07-19)
      The overall objective of the General Data Protection Regulation (GDPR)1 is two-fold: To contribute to the protection of privacy and personal data and to promote the free flow of personal data within the protected area2 through uniform regulations and homogenized interpretations of those regulations.<p> <p>If a controller or processor in the protected area (the exporter) transfers personal data ...