BEGIN:VCALENDAR
VERSION:2.0
PRODID:-// - ECPv6.18.2//NONSGML v1.0//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-ORIGINAL-URL:https://i3-cnrs.fr/en/
X-WR-CALDESC:Events for 
REFRESH-INTERVAL;VALUE=DURATION:PT1H
X-Robots-Tag:noindex
X-PUBLISHED-TTL:PT1H
BEGIN:VTIMEZONE
TZID:Europe/Paris
BEGIN:DAYLIGHT
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
TZNAME:CEST
DTSTART:20200329T010000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
TZNAME:CET
DTSTART:20201025T010000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
TZNAME:CEST
DTSTART:20210328T010000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
TZNAME:CET
DTSTART:20211031T010000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
TZNAME:CEST
DTSTART:20220327T010000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
TZNAME:CET
DTSTART:20221030T010000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;TZID=Europe/Paris:20211118T100000
DTEND;TZID=Europe/Paris:20211118T123000
DTSTAMP:20211018T072151Z
CREATED:20211018T072207Z
LAST-MODIFIED:20211018T072151Z
UID:15028-1637229600-1637238600@i3-cnrs.fr
SUMMARY:Chaire Valeurs et Politiques des Informations Personnelles
DESCRIPTION:The Connected Cars & Cyber Security Chair is the twelfth teaching and research chair at Télécom Paris to be financed by companies\, and the second to deal with cybersecurity. In partnership with Nokia\, Renault\, Thales\, Valeo and Wavestone\, it is conducting its work along five main lines \nRisk analysis and operational safety ;\nReal-time data and data flow protection\, cryptography and agility;\nAuthentication\, identity and behavioral fingerprinting;\nResilience by design;\nProtection of personal data involved in the connected vehicle (legal and societal aspects). \nIn this fifth area\, the C3S Chair is working closely with the VP-IP Chair under the coordination of Claire Levallois-Barth (ITM). In this context\, Jonathan Keller\, a research engineer at the C3S Chair and associate researcher at the VP-IP Chair\, and Claire Levallois-Barth have conducted an in-depth study on Data Protection Impact Assessment (DPIA) in connected cars. A first article entitled “Critical approach to the EDPS guidelines on connected vehicles submitted for consultation” was published in April 2020 in the newsletter n°17\, on the occasion of the release of the first version of the European Data Protection Committee (EDPS) guidelines on “processing of personal data in the context of connected vehicles and mobility applications”. \nThis work has since been the subject of a full Research Report (see summary below)\, and a companion document accessible to a wider audience. They will be made public at the joint conference of the two chairs VP-IP and C3S on the morning of November 18 (see details below). \nAIPD through the prism of a practical case \nThe digitization of the automobile\, and even its autonomization\, is a source of hope\, but also of concern. Among the latter\, the fear of a digital panopticon developed without the knowledge of drivers and passengers\, or even manufacturers\, through the collection and use of their personal data is emerging. \nThe prevention of such a fear is anticipated by the General Data Protection Regulation (GDPR)\, Article 35 of which requires the data controller\, in certain circumstances\, to consult with stakeholders (subcontractors and technology providers in particular) prior to the implementation of any processing of personal data likely to entail a risk to the rights and freedoms of the persons concerned. \nAs a matter of principle\, the DPIA is mandatory for certain types of data processing provided for by the GDPR. In this regard\, the European text explicitly provides for a list of five distinct criteria: evaluation or scoring of personal aspects\, automatic decision-making\, large-scale systematic monitoring of a publicly accessible area\, large-scale processing of sensitive data or highly personal data\, large-scale data. In its Interpretative Guidelines 1/2020 on Article 35 of the GDPR\, the EDPS adds four new alternative criteria: cross-referencing or combination of data sets\, data relating to vulnerable persons\, innovative use or application of new organizational solutions\, and processing that prevents data subjects from benefiting from a service or contract. \nAs a prerequisite to the implementation of processing\, the requirement to conduct a DPIA should be seen as fulfilling two distinct functions: \nTo define and assess the risks to personal data processed by the controller prior to the deployment of a processing operation to identify and mitigate the inherent risks\, and\nTo have a risk assessment management tool to prioritize the appropriate measures to be deployed and set up. \nThese two functions should enable the data controller to demonstrate compliance of its data processing\, highlighting the existence of active prevention to mitigate the harmful effects of the processing. \nSeveral methodologies are available to assist the data controller in conducting a DPIA. Four of them (CNIL\, PRIAM\, BSI and NIST) were evaluated in the context of the research report\, our main criterion being based on the following question: “which methodologies are the most relevant for analyzing the risks incurred in the context of a personal data processing operation involving a plurality of controllers? Each methodology has advantages and disadvantages\, and takes into account a different set of risks. Although it is a manifestation of the principle of responsibility\, in practice\, the performance of a DPIA suffers from numerous shortcomings\, thus making the legal obligation to perform it more cumbersome. The research report thus demonstrates the legal and practical limits of the provisions of Article 35 of the GDPR and its interpretation by the European and French guidelines. Situated between an obligation of reinforced means in its realization and an obligation of result in the demonstration of its documentary proof\, the AIPD proves to be a difficult instrument to implement\, to say the least. \nIn order to study the methodologies related to PIDA\, a practical case (“Biomem”) was defined in collaboration with the partners of the C3S Chair\, taking into account different hypotheses of personal data processing by different actors. This practical case – the implementation of on-demand video services in a connected vehicle – offers the possibility of applying four impact analysis methodologies to deduce their effectiveness in such a context and define adequate risk mitigation measures. Three assumptions are considered\, depending on whether the Biomem service is provided by a standalone entity\, by the vehicle manufacturer\, or by the video-on-demand provider as an ancillary service. The law and provisions applicable to registration data\, biometric data\, and geolocation data are examined. Interviews with data controllers\, third parties to the Chair\, were conducted (feedback). \nIn its third part\, the research report carries out an exercise in comparative law. Indeed\, uncertainties\, designated under the terminology of “risks”\, are mainly assessed at the European level by the two European legal systems\, the Council of Europe and the European Union. This assessment is in practice carried out by two courts set up by these systems\, the European Court of Human Rights and the Court of Justice of the European Union. Furthermore\, the issue of assessing damages under the GDPR requires studying judicial practice in non-EU states. In particular\, decisions rendered in the United States of America and the United Kingdom impose monetary penalties and invite an examination of the concept of harm. The various decisions taken by foreign authorities make it possible to explore the possible transposition of these Anglo-Saxon trends into French law. \nThe research report and the companion document allow us to better situate the Data Protection Impact Assessment process in the regulatory context\, and to consider the most relevant DPIA methodologies according to the needs encountered. \n  \n 
URL:https://i3-cnrs.fr/en/evenement/chaire-valeurs-et-politiques-des-informations-personnelles/
ATTACH;FMTTYPE=image/png:https://i3-cnrs.fr/wp-content/uploads/2021/10/chaire.png
END:VEVENT
BEGIN:VEVENT
DTSTART;TZID=Europe/Paris:20211118T100000
DTEND;TZID=Europe/Paris:20211118T123000
DTSTAMP:20211018T081321Z
CREATED:20211018T081209Z
LAST-MODIFIED:20211018T081321Z
UID:15036-1637229600-1637238600@i3-cnrs.fr
SUMMARY:Values and Personal Information Policy Chair (VP-IP)
DESCRIPTION:The Chairs for Personal Information Values and Policies (VP-IP) and  Connected Cars and Cyber Security (C3S) are organizing a joint conference on November 18\, 2021 dedicated to the treatment of personal data in the context of connected vehicles. A research report on Data Protection Impact Analysis (DPIA): the case of connected cars will be presented\, and its findings discussed.   \nThe Connected Cars & Cyber Security Chair\, the twelfth Télécom Paris teaching and research chair financed by companies and the second chair dealing with cybersecurity\, in partnership with Nokia\, Renault\, Thales\, Valeo and Wavestone\, is conducting its work along five main lines: \n1- Risk analysis and operational safety;\n2′ Data protection and real-time data flow\, cryptography and agility;\n3- Authentication\, identity and behavioral fingerprinting;\n4- Resilience by design;\n5- Protection of personal data involved in the connected vehicle (legal and societal aspects). \nIn this fifth area\, the C3S Chair works closely with the VP-IP Chair under the coordination of Claire Levallois-Barth (ITM). In this context\, Jonathan Keller\, a research engineer at the C3S Chair and associate researcher at the VP-IP Chair\, and Claire Levallois-Barth have conducted an in-depth study on Data Protection Impact Assessment (DPIA) in connected cars. A first article entitled “Critical approach to the EDPS guidelines on connected vehicles submitted for consultation” was published in April 2020 in the newsletter n°17\, on the occasion of the release of the first version of the European Data Protection Committee (EDPS) guidelines on “processing of personal data in the context of connected vehicles and mobility applications”. \nThis work has since been the subject of a full Research Report (see summary below)\, and a companion document accessible to a wider audience. They will be made public at the joint conference of the VP-IP and C3S Chairs on the morning of November 18 (see details below). \nAIPD through the prism of a practical case \nThe digitization of the automobile\, or even its autonomization\, is a source of hope\, but also of concern. Among the latter\, the fear of a digital panopticon developed without the knowledge of drivers and passengers\, or even manufacturers\, through the collection and use of their personal data is emerging. \nThe prevention of such a fear is anticipated by the General Data Protection Regulation (GDPR)\, Article 35 of which requires the data controller\, in certain circumstances\, to consult with stakeholders (subcontractors and technology providers in particular) prior to the implementation of any processing of personal data likely to entail a risk to the rights and freedoms of the persons concerned. \nAs a matter of principle\, the DPIA is mandatory for certain types of data processing under the GDPR. In this regard\, the European text explicitly provides for a list of five distinct criteria: evaluation or scoring of personal aspects\, automatic decision-making\, large-scale systematic monitoring of a publicly accessible area\, large-scale processing of sensitive data or highly personal data\, large-scale data. In its Interpretative Guidelines 1/2020 on Article 35 of the GDPR\, the EDPS adds four new alternative criteria: cross-referencing or combination of data sets\, data relating to vulnerable persons\, innovative use or application of new organizational solutions\, and processing that prevents data subjects from benefiting from a service or contract. \nAs a prerequisite to the implementation of the processing\, the obligation to conduct a DPIA should be seen as fulfilling two distinct functions: \n\nDefine and assess the risks to personal data processed by the data controller prior to the deployment of a processing operation to identify and reduce the inherent risks\, and\nHave a risk assessment management tool to prioritize the appropriate measures to be deployed and set up.\n\nThese two functions must allow the data controller to demonstrate the compliance of its data processing\, emphasizing the existence of active prevention to mitigate the harmful effects of the processing. \nSeveral methodologies are available to assist the data controller in conducting a DPIA. Four of them (CNIL\, PRIAM\, BSI and NIST) were evaluated in the context of the research report\, our main criterion being based on the following question: “which methodologies are the most relevant for analyzing the risks incurred in the context of a personal data processing operation involving a plurality of controllers?” Each methodology has advantages and disadvantages\, and takes into account a different set of risks. Although it is a manifestation of the principle of responsibility\, in practice\, the performance of a DPIA suffers from numerous shortcomings\, thus making the legal obligation to perform it more cumbersome. The research report thus demonstrates the legal and practical limits of the provisions of Article 35 of the GDPR and its interpretation by the European and French guidelines. Situated between an obligation of reinforced means in its realization and an obligation of result in the demonstration of its documentary proof\, the AIPD proves to be a difficult instrument to implement\, to say the least. \nTo study the methodologies related to PIA\, a practical case (“Biomem”) including different hypotheses of personal data processing by different actors has been defined in collaboration with the C3S Chair partners. This practical case – the implementation of on-demand video services in a connected vehicle – offers the possibility of applying four impact analysis methodologies to deduce their effectiveness in such a context and define adequate risk mitigation measures. Three assumptions are considered\, depending on whether the Biomem service is provided by a standalone entity\, by the vehicle manufacturer\, or by the video-on-demand provider as an ancillary service. The law and provisions applicable to registration data\, biometric data\, and geolocation data are examined. Interviews with data controllers\, third parties to the Chair\, were conducted (feedback). \nIn its third part\, the research report carries out an exercise in comparative law. Indeed\, uncertainties\, designated under the terminology of “risks”\, are mainly assessed at the European level by the two European legal systems\, the Council of Europe and the European Union. This assessment is in practice carried out by two courts set up by these systems\, the European Court of Human Rights and the Court of Justice of the European Union. Furthermore\, the issue of assessing damages under the GDPR requires studying judicial practice in non-EU states. In particular\, decisions rendered in the United States of America and the United Kingdom impose monetary penalties and invite an examination of the concept of harm. The various decisions taken by foreign authorities make it possible to explore the possible transposition of these Anglo-Saxon trends into French law. \nThe research report and the companion document allow us to better situate the Data Protection Impact Assessment process in the regulatory context\, and to consider the most relevant DPIA methodologies according to the needs encountered. \nContents of the research report “Data Protection Impact Assessment: the case of connected cars” \n\nContents of the research report “Data Protection Impact Assessment: the case of connected cars*\nIntroduction\nPart 1: Definition of the Biomem case study\n◊Chapter 1: Presentation of the three hypotheses of the Biomem case study\n◊Chapter 2: Law applicable to the processing carried out by Biomem\nPart 2: Risk analysis methodologies for personal data protection\n◊Chapter 1: Position of the European Data Protection Committee on personal data protection impact assessments (PIDA)\n◊Chapter 2: Feedback on how to conduct a DPIA\n◊Chapter 3: Analysis of the four selected methodologies under the prism of the European Data Protection Committee’s DPIA Guidelines\nPart 3: Judicialization of risks related to personal data\n◊Chapter 1: Risk assessment by the European Court of Human Rights and the Court of Justice of the European Union\n◊Chapter 2: The assessment of the personal data breach by the judicial judge\n◊Conclusion
URL:https://i3-cnrs.fr/en/evenement/values-and-personal-information-policy-chair-vp-ip/
LOCATION:en visioconférence\, France
ATTACH;FMTTYPE=image/png:https://i3-cnrs.fr/wp-content/uploads/2021/10/chaire.png
END:VEVENT
BEGIN:VEVENT
DTSTART;TZID=Europe/Paris:20211118T103000
DTEND;TZID=Europe/Paris:20211118T120000
DTSTAMP:20211116T210446Z
CREATED:20211116T201606Z
LAST-MODIFIED:20211116T210446Z
UID:15224-1637231400-1637236800@i3-cnrs.fr
SUMMARY:"Digital capitalism and ideologies" with Olivier Alexandre (CIS/CNRS) and Samuel Coavoux (CERLIS/Orange-Sense)
DESCRIPTION:This seminar is an activity of the Digital Capitalism and Ideologies working group of the GDR Internet\, AI and Society. Intended to bring together researchers working on these different issues\, in order to produce an operational framework of analysis and to initiate a series of collective publications\, this seminar is coordinated by Benjamin Loveluck (i3-SES\, Télécom Paris) and Olivier Alexandre (CIS-CNRS). \n  \n“Ideology\, a concept of the future? The case of the Silicon Valley influencers “ \n\nOlivier Alexandre (CIS/CNRS) \nSamuel Coavoux (CERLIS/Orange-Sense)\n\n  \nto register
URL:https://i3-cnrs.fr/en/evenement/capitalisme-numerique-et-ideologies-avec-olivier-alexandre-cis-cnrs-et-samuel-coavoux-cerlis-orange-sense/
LOCATION:en visioconférence\, France
CATEGORIES:Seminaires
ORGANIZER;CN="Benjamin Loveluck et Olivier Alexandre":MAILTO:Benjamin Loveluckbenjamin.loveluck@telecom-paris.fr
END:VEVENT
BEGIN:VEVENT
DTSTART;TZID=Europe/Paris:20211118T180000
DTEND;TZID=Europe/Paris:20211118T200000
DTSTAMP:20211103T134525Z
CREATED:20211102T132454Z
LAST-MODIFIED:20211103T134525Z
UID:15162-1637258400-1637265600@i3-cnrs.fr
SUMMARY:The Chair for the Future of Industry and Work at Mines-Paris PSL invites you to session 9 of the seminar Autonomy and Responsibility in Organizations:
DESCRIPTION:Sodebo Group: when a family-owned company builds resilience by developing people throughout the value chain. \nSession presentation:  \nFounded in 1973 by Simone and Joseph Bougro\, pork butchers and caterers in Saint-Georges de Montaigu\, the family business Sodebo\, which specializes in fresh catering products\, has made it its mission to do good for everyone and to do it well. Since 2000\, Marie-Laurence Gouraud\, Bénédicte Mercier and Patricia Brochard have been at the head of the French company\, continuing their parents’ project. Favoring integration since the beginning\, the company manufactures a large part of the ingredients that go into the composition of its products (salads\, pizzas\, boxes\, sandwiches…). These products are carefully cooked on site at a unique location in the Vendée region\, with a focus on responsible and sustainable quality. \nSodebo’s project has always been based on paying attention to the men and women in the company\, whatever their role and hierarchical position\, by helping them grow personally and professionally. The three co-presidents are committed to developing a form of continuous learning that allows each person to solve problems at his or her own level\, as suggested by the subsidiarity model. They also insist on the fact that the autonomy of employees must be exercised within a defined framework to allow the company to be collectively more resilient\, as the recent experience of the pandemic has shown. \nSodebo’s three co-Chairmen\, Marie-Laurence Gouraud\, Bénédicte Mercier and Patricia Brochard\, will be interviewed by Charles-Henri Besseyre des Horts\, Professor Emeritus at HEC Paris\, on issues related to (1) the development of individuals\, (2) the emergence of a form of subsidiarity\, (3) the mastery of autonomy and (4) the construction of collective resilience. \nPresentation of the seminar: \nThe Chair for the Future of Industry and Work at Mines – Paris Sciences et Lettres organizes a monthly seminar on the rise of autonomy in organizations. The objective of this seminar is to discuss concrete experiences of setting up an organization that favors employee autonomy by analyzing the difficulties encountered\, the impact on operational performance and on employee satisfaction\, the construction of “words to say it”… During the first year\, we will be interested in companies where different national or professional traditions coexist and in the support of middle management \n  \n  \n*Those wishing to attend in person must have a health pass and wear a mask. \nThursday\, November 18\, 2021 from 6:00 pm to 8:00 pm – at Mines-Paristech in the Salle Chevalier* or by videoconference. \nIn case of questions\, please contact: chaire-fit2@mines-paristech.fr
URL:https://i3-cnrs.fr/en/evenement/the-chair-for-the-future-of-industry-and-work-at-mines-paris-psl-invites-you-to-session-9-of-the-seminar-autonomy-and-responsibility-in-organizations/
LOCATION:séminaire en hybride\, jjj
CATEGORIES:Seminaires
ATTACH;FMTTYPE=image/jpeg:https://i3-cnrs.fr/wp-content/uploads/2021/11/fit2.jpg
END:VEVENT
END:VCALENDAR