The Data Protection and Privacy Hub™’s Post

Next Monday, the UK’s Information Commissioner's Office (#ICO) concludes its inquiry into how generative artificial intelligence (#AI) models manage individual rights. Here are the key details: 🔍 The inquiry focuses on how AI developers and platforms ensure compliance with data protection laws. 🚀 The inquiry also seeks information into the specific practices organizations employ to fulfill these legal obligations. 💡 Stay informed on latest AI regulations by visiting our dedicated thread: https://bit.ly/4byZgKT Subscribe to our notification service here 👉https://bit.ly/4aSwUtY #AIRegulations #DataProtection #GenerativeAI #Privacy

As we enter the year of #AI; it's time (again) to reinvent and retool. I am happy to say I have completed the IAPP - International Association of Privacy Professionals AI Governance Professional Training. My advice? Breathe deeply. Read lots, listen to webinars. That's what I am doing. Things are changing, quickly, and while at some levels this is terrifying, the only way forward as professionals - whether we are in privacy, law or any occupation - is to learn how to use AI tools and understand their issues, and how they can help us be better professionals.

In light of current legislative actions, such as Italy’s ban of ChatGPT due to privacy concerns, and ongoing debates in the United States regarding the potential divestment of TikTok for national security reasons, the rapid proliferation of artificial intelligence (AI) technology has raised significant apprehensions, particularly surrounding privacy and security considerations. The recently enacted European Union’s (EU) comprehensive AI Act marks a significant milestone in global AI regulation. This regulatory framework endeavors to standardize regulations governing AI systems across the twenty-seven EU member states, with the overarching goal of safeguarding fundamental rights and EU values in the face of the risks posed by advancing technology. The enactment of the AI Act signals the dawn of a new era in governance, centered around rapid technological development.   The AI Act’s significance extends beyond the EU, with potential implications for global AI regulation. Will it exert the “Brussels effect,” inspiring emulation by other nations? Only time will tell. What remains to be seen is the extent of global political efforts aimed at translating the AI Act from a mere legal doctrine into practical, operational implementation. My article provides an overview of the Act, highlighting its scope and applicability, and delving into key developments, its provisions, and potential impact on global AI regulation. #privacy #AI #EUAIAct #law #AIgovernance

We are excited to share a comprehensive data protection related AI guidebook, a collaborative effort by our international network #Ecomlex. The guidebook includes 19 countries. The Polish chapter has been written by Michał Pietrzyk. The guidebook provides a general understanding of what should be taken into account when personal data is processed in connection with AI tools. It offers a detailed exploration of the current positions of national data protection authorities in Europe. The publication tackles critical questions, including the legal basis for using personal data in training AI models, competent regulators for enforcing AI laws, and the issuance of sanctions related to AI models. Delving deeper, the guidebook not only navigates the current landscape but also sheds light on ongoing legislative initiatives and pertinent case law developments.    You can download the guidebook here: https://lnkd.in/d4aUK26F #DataProtection #AI #ŁiW #Poland #PolishLawFirm Marek Korcz

The EDPS - European Data Protection Supervisor just published guidelines for EU institutions regarding the processing of personal data when using generative AI services. Even if it's nominally intended for EU institutional use, it provides helpful insight into how the EPDS is thinking about data protection in the generative AI space and is worth a read. Some topics covered: - Defining generative AI and determining if personal data processing is involved - The role of DPOs in generative AI use - Lawfulness of data processing in generative AI deployment - Addressing data minimization and accuracy requirements - Providing notice of processing - Automated decision-making - Avoiding bias and ensuring fair processing - Exercising of data subject rights - Data security https://lnkd.in/d5GpFCtJ #ai #artificialintelligence #edps #edpb #gdpr #dataprotection #privacy #data #generativeai #law #policy #eu #DSRs #datasecurity #informationsecurity #automateddecisionmaking

The EU #artificialintelligence Act 🇪🇺 the world's first comprehensive AI law, aimed at regulating the development and use of AI technologies. 🔑 Here are some key points about the Act: 1- Risk-Based Classification: Systems are classified based on risk, high-risk and restricted systems subjected to stricter rules 🚫📊. 2- Transparency & Accountability: The act requires better documentation, compliance with EU copyright laws, and detailed information about training data 📄✅. 3- New AI Regulator & Fines: Establishment of an AI Office and expert panel, with hefty non-compliance fines 💶🚨. 4- Specific Provisions for Law Enforcement: Allows police to use biometric systems with judicial approval for serious crimes, excluding military purposes 🚓🔒. 5- Global Impact: Like the GDPR, the Act is expected to have a global influence, requiring companies worldwide to comply with EU regulations 🌍✈️. The final text of the Act will be published in early 2024 and will apply two years post-publication, with some provisions applying sooner ⏱️🗓️. For more details https://lnkd.in/dmG7X6H4

The US and EU are adopting #generativeAI for legal purposes at a similar pace despite the EU's AI Act regulation. Legal professionals in both regions are building new frameworks to govern AI use. The reasons for this similarity include: → The act is new and hasn't impacted buyers yet. → Some legal specialties, like IP, are more global and have similar concerns. → Risk tolerance can vary by firm more than by location. However, while the #US, UK, and some Asian countries are more enthusiastic than Central Europe, EU lawyers may also have more concerns about #data privacy and intellectual property. Read the full article down below:

Proposed AI Act negotiations enter final stages: EU Institutions made progress in their latest trilogue negotiations on the proposed Artificial Intelligence Act, Euractiv reports. In the most recent negotiations 24 Oct., policymakers agreed on provisions for classifying high-risk AI applications and developed general guidance for using enhanced foundation models. However, negotiations did not include substantial dialogue on provisions for prohibitions and law enforcement use. The next trilogue begins 6 Dec. Editor's note: Explore the IAPP AI Governance Center and subscribe to the AI Governance Dashboard.  Full story #dataprotection #dataprivacy #privacy

Is data scraping to train generative AI models lawful? Today, the UK Information Commissioner’s Office (ICO) launched a consultation series on generative AI. The consultations examine how data protection law applies to the development and use of the technology. The first consultation examines when it is lawful to train generative AI models on personal data scraped from the web. 🗓 Deadline: 1 March 2024 Further consultations throughout the first half of 2024 will examine other topics, including the appropriate lawful basis, the principles of purpose limitation principle and accuracy, and data subject rights in the context of generative AI. AI privacy concerns have activated regulators across the globe. In August 2023, twelve data protection authorities issued a joint declaration on data scraping and privacy. Trying to keep up with global developments? Our thread page on Privacy and AI (linked in comments) provides a feed of regulatory developments. Stay tuned: Our upcoming AI policy series demonstrates differences and commonalities in AI policy approaches. Follow the Digital Policy Alert to stay on top of global digital policy developments. #digitalpolicy #fragmentation #techpolicy #ai #privacy #privacypro #data #digitaltrade 

A look at how the EU AI Act will impact US generative AI deployments: Industry experts advise tech chiefs on initial next steps and why the GDPR comparison matters before the European Union begins regulatory enforcement of its act. @Poseidon-US #CIODive #Innovation