II.3)Description of the field or fields covered by the call for expressions of interest:
The EDPB welcomes expressions of interest from experts in many sectors, i.e. academia, research, industry, EU institutions, etc. with a relevant expertise in one or several of the following fields (each item below being a ‘sublist’):
A. technical expertise in new technologies and information security (including but not limited to the following):
1. IT auditing, information security auditing;
2. website security, mobile OS, internet of things, mobile applications;
3. digital forensics, eavesdropping techniques, MITM proxy;
4. cloud computing architectures, cloud computing models, cloud infrastructures, cloud services, cloud trust and security;
5. behavioural advertising, digital tracking, cookies, fingerprinting, RTB and internet advertising (programmatic advertising, ad exchanges, demand side platforms, SSP, data brokers, consent management platforms), ePrivacy;
6. anonymisation and pseudonymisation techniques; risk analysis and attacks with respect to data reidentification (including inference attacks); privacy enhancing technologies;
7. cryptology; (a)symmetric cryptography; hash functions, digital signature, message authentication; cryptanalysis methodologies, techniques and tools; crypto material management key management, PKI; homomorphic encryption; mathematical foundations of cryptography;
8. digital identity management and trust services (including security of electronic identification schemes, authentication, digital signatures); elDAS; zero trust, identity federation; age verification; biometrics including facial recognition;
9. artificial intelligence;
10. UX, web design and dark patterns;
11. DPIA, personal data breaches, risk management;
12. fintech;
13. data science or statistical analysis in this field;
14. experience in conducting exercises/training in the above;
B. legal expertise in new technologies (including but not limited to the following):
1. policy monitoring;
2. digital laws, EU legal framework on data protection and privacy, legislation on forensics;
3. digital ethics;
4. statistical analysis in this field of activity.
Experts could be expected to perform, for instance, one or several of the following tasks:
• support/participate in investigation activities (as approved and authorised by SAs, under the direction and management of national authorities, and in compliance with applicable laws) - e.g. scoping, evidence gathering and analysis, participating in a remote or onsite inspection, digital forensics / analysing data in a lawful manner and for use in regulatory procedures and/or court proceedings;
• provide advisory services for the documentation of investigatory support tools and methods (in particular in technical fields) or for the purchase and use of specialist technical equipment, in order to ensure that regulatory procedures can be carried out in as effective and efficient manner as possible;
• provide legal advisory services on the use of specific forensic methods to gather evidential quality that can be relied on in the course of a regulatory procedure and/or in court proceedings;
• produce (written and oral) high-quality, clear, concise, and when required sufficiently detailed contributions, according to their expertise in the project selected. This may cover both technical and methodological contributions as well as non-technical/summative contributions;
• participate in any face-to-face meetings and teleconferences organised, including as appropriate in working groups.