EDPB releases opinion on training AI models

The European Data Protection Board (EDPB) published an adopted opinion on the use of personal data to train AI models in light of GDPR, following a formal request from Ireland's Data Protection Commission. Many organizations have been anxiously anticipating this publication, hoping to gain clarity on how to address data utilization when implementing this widely implemented, transformative technology. 

‍

The opinion addressed specific issues, including anonymization, legitimate interest as a legal basis, and the steps to be taken following data privacy violations. 

‍

According to the EDPB, anonymization should be examined on a case-by-case basis to see whether specific individuals may be identified from the data or following relevant queries. The opinion also features a three-step test to enable data agencies to determine whether the use of legitimate interest forms a legal basis for data processing, as well as criteria to assess whether users can reasonably expect their personal data to be handled in a certain way. The EDPB believes that by balancing the various consequences, regulators can reach informed decisions.

Find the opinion here: https://www.edpb.europa.eu/our-work-tools/our-documents/opinion-board-art-64/opinion-282024-certain-data-protection-aspects_en