←
Privacy
EDPB weighs in on key questions on personal data in AI models
IAPP — AI Governance Center
8mo · 5 min
Europe's data protection board says an AI model counts as anonymous only if the developer can show, with evidence, that personal data from training can't be extracted back out of it.
On 17 December, the European Data Protection Board adopted Opinion 28/2024 "on certain data protection aspects related to the processing of personal data in the context of AI models."  Although organizations appreciate explicit confirmation that legitimate interest is a legal basis for the development and deployment of artificial intelligence models, they hoped to move from theoretical discussions to practical solutions. We are partway there.The wording "case by case" appears 16 times with "may" or "might" 161 times in the opinion. This will likely lead to a diverging approach between DPAs, but it is possible this strategic ambiguity is deliberate by the EDPB.Does an AI model contain personal data?This is a big question, the Hamburg Commissioner for Data Protection and Freedom of…
That's the opening of the original reporting — continue reading at IAPP — AI Governance Center for the rest.
Open at IAPP — AI Governance Center ↗
Because you read this
Startup Corner: SaaS Tracker takes aim at hidden contract change risk
Legal IT Insider · 1mo · 3 min
Privacy by Architecture Makes AI Compliance Work
Tech Policy Press · 1mo · 8 min