microsoft
Why Homomorphic encryption cannot be used to enable data scientists to circumvent GDPR?
"Homomorphic encryption cannot be used to enable data scientists to circumvent GDPR." why couldn't it be used to circumvent GDPR? GDPR aims to protect privacy, right? And HE could make customer data private in all the computation processes. So HE is a good way to circumvent GDPR, isn't it?
And HE could make customer data private in all the computation processes.
Then who will decrypt the result? Why wouldn't it decrypt the encrypted data before computation?
I mean GDPR is aimed at protecting personal data and privacy? And HE could protect the user's data by encrypting it and sending the encrypted data to cloud services for computation and the user, at last, get the encrypted result and then user decrypts the encrypted result to get the actual result while cloud services do not know the user's privacy because the data is encrypted when cloud services handle the data. This satisfies the aim of GDPR to protect privacy. so looks like HE could work well with GDPR. Does "circumvent" the same meaning as "work well"?
You'd better consult with a privacy law attorney. I cannot offer legal advice here. What I know is that "satisfying the aim of GDPR" is different from "complying with GDPR".
You'd better consult with a privacy law attorney. I cannot offer legal advice here. What I know is that "satisfying the aim of GDPR" is different from "complying with GDPR".
Thank you. So why "Homomorphic encryption cannot be used to enable data scientists to circumvent GDPR." is basically because HE is a technique thing while GDPR is a law thing thus they could not be talked about in the same sense, right?
So why "Homomorphic encryption cannot be used to enable data scientists to circumvent GDPR." is basically because HE is a technique thing while GDPR is a law thing thus they could not be talked about in the same sense, right?
Right, GDPR does not specify techniques.
So why "Homomorphic encryption cannot be used to enable data scientists to circumvent GDPR." is basically because HE is a technique thing while GDPR is a law thing thus they could not be talked about in the same sense, right?
Right, GDPR does not specify techniques.
Cheers