EDPB shift forces AI firms to embed procurement, risk management in GDPR considerations

Efforts to clarify the circumstances in which artificial intelligence models may or may not be violating the General Data Protection Regulation (GDPR) could result in yet more confusion for tech firms, companies deploying the technology, and even data protection authorities (DPAs), according to experts.

Additionally, they warn that the recent opinion on AI models issued by the European Data Protection Board (EDPB), the EU’s top regulator for GDPR decisions, could stifle technology innovation throughout Europe as data regulators make increasingly divergent interpretations about what constitutes the safe and legal use of people’s personal information and online data.

In December, the EDPB outlined when and how AI models can be considered anonymous, what constitutes “legitimate interest” when developing AI models, and what should happen if an AI model is developed using personal data that was unlawfully accessed.