随着对存储与算力的需求快速增长，云服务整体正变得愈发普及和流行，这也相应提升了对开发高度成熟的机制与治理体系以降低云基础设施中数据泄露风险的需求。本研究聚焦云治理领域，将多项数据安全措施与立法权限有机结合。我们提出了旨在防范数据泄露的法律层面考量，以及与数据保护机制落地相关的技术要求。具体而言，我们探讨了涉及最小权限原则的主要权威与技术框架，并结合其在当前市场主流云服务提供商（CSP）之一Amazon Web Services（AWS，亚马逊云科技）中的应用展开讨论。
英文摘要：
As demand for more storage and processing power increases rapidly, cloud services in general are becoming more ubiquitous and popular. This, in turn, is increasing the need for developing highly sophisticated mechanisms and governance to reduce data breach risks in cloud-based infrastructures. Our research focuses on cloud governance by harmoniously combining multiple data security measures with legislative authority. We present legal aspects aimed at the prevention of data breaches, as well as the technical requirements regarding the implementation of data protection mechanisms. Specifically, we discuss primary authority and technical frameworks addressing least privilege in correlation with its application in Amazon Web Services (AWS), one of the major Cloud Service Providers (CSPs) on the market at present.
TU Berlin（柏林工业大学）；Weizenbaum Institute（魏岑鲍姆研究所）；KU Leuven（鲁汶大学）；University of Münster（明斯特大学）
When technology enters applications and processes with a long tradition of controversial societal debate, multi-faceted new ethical and legal questions arise. This paper focusses on the process of whistleblowing, an activity with large impacts on democracy and business. Computer science can, for the first time in history, provide for truly anonymous communication. We investigate this in relation to the values and rights of accountability, fairness and data protection, focusing on opportunities and limitations of the anonymity that can be provided computationally; possible consequences of outso…
Global AI Governance Overview: Understanding Regulatory Requirements Across Global Jurisdictions
University of Texas at Tyler（得克萨斯大学泰勒分校）；Polish-Japanese Academy of Information Technology（波日信息技术学院）；University of the National Education Commission in Kraków（克拉科夫国家教育委员会大学）
Data has become a critical resource for organizations and society. Yet, it is not always as valuable as it could be since there is no well-defined approach to managing and using it. This article explores the increasing importance of global data governance due to the rapid growth of data and the need for responsible data use and protection. While historically associated with private organizational governance, data governance has evolved to include governmental and institutional bodies. However, the lack of a global consensus and fragmentation in policies and practices pose challenges to the dev…
A Technical Policy Blueprint for Trustworthy Decentralized AI
MLCommons；Sage Bionetworks；Google（谷歌）；Inria（法国国家计算机科学研究所）；Intel（英特尔）；Flower；Apheris；University of Notre Dame（圣母大学）；NVIDIA（英伟达）；Factored；Florida International University（佛罗里达国际大学）
Data Protection and Corporate Reputation Management in the Digital Era
I'M BRAND INSTITUTE Sp. z o.o.（I'M BRAND INSTITUTE 有限责任公司）；Nowy Sącz School of Business - National Louis University（新松奇商学院 - 国家路易斯大学）；University College of Professional Education in Wroclaw（弗罗茨瓦夫职业教育学院）；WSB Merito University in Toruń（托伦 WSB Merito 大学）；Pomeranian Higher School in Starogard Gdanski, Institute of Management, Economics and Logistics（什切青波美拉尼亚高等学院（斯塔尔加德格丹斯基）管理、经济与物流研究所）；GLOBAL HYDROGEN spółka akcyjna（GLOBAL HYDROGEN 股份公司）；WSB Merito University in Gdańsk, Faculty of Computer Science and New Technologies（格但斯克 WSB Merito 大学计算机科学与新技术学院）
Unlocking the Power of Health Datasets and Registries: The Need for Urgent Institutional and National Ownership and Governance Regulations for Research Advancement
Computable Gap Assessment of Artificial Intelligence Governance in Children's Centres: Evidence-Mechanism-Governance-Indicator Modelling of UNICEF's Guidance on AI and Children 3.0 Based on the Graph-GAP Framework
Dhurakij Pundit University（杜斯特帕尼大学）；The University of Western Australia（西澳大学）；Royal Anthropological Institute（皇家人类学研究所）
This research examines the impact of digital neo-colonialism on the Global South and encourages the development of legal and economic incentives to protect Indigenous cultures globally. Data governance is discussed in an evolutionary context while focusing on data sharing and data mining. Case studies that exemplify the need to steer global data law towards protecting the earth, while addressing issues of data access, privacy, rights, and colonialism in the global South are explored. The case studies highlight connections to indigenous people's rights, in regard to the protection of environmen…
Data Obfuscation through Latent Space Projection (LSP) for Privacy-Preserving AI Governance: Case Studies in Medical Diagnosis and Finance Fraud Detection
Governable AI: Provable Safety Under Extreme Threat Models
College of Artificial Intelligence, Nankai University（人工智能学院，南开大学）；Sursen Corp.（苏尔森公司）；China Academy of Electronics and Information Technology（中国电子信息技术研究院）
Rethinking Data Protection in the (Generative) Artificial Intelligence Era
The State Key Laboratory of Blockchain and Data Security（区块链与数据安全国家重点实验室）；Nanyang Technological University（南洋理工大学）；University of Maryland（马里兰大学）；IBM Research（IBM研究院）；CISPA Helmholtz Center for Information Security（CISPA 欧洲信息安全部分）；University of Oxford（牛津大学）
This chapter introduces the Accountability Principle and its role in data protection governance. We focus on what accountability means in the context of cybersecurity management in smart homes, considering the EU General Data Protection Law requirements to secure personal data. This discussion sits against the backdrop of two key new developments in data protection law. Firstly, the law is moving into the home, due to narrowing of the so called household exemption. Concurrently, household occupants may now have legal responsibilities to comply with the GDPR, as they find themselves jointly res…
