AI Training and GDPR: A Comedy of Data Compliance or Chaos?
The European Data Protection Board (EDPB) stated that using personal data to train AI models might not violate GDPR, provided the AI’s output doesn’t reveal personal information. This decision, sought by the Irish Data Protection Authority, underscores the need for case-by-case analysis of AI models’ GDPR compliance.

Hot Take:
Looks like the EDPB is playing referee in the AI vs. GDPR game, and they’ve ruled that AI can have its cake and eat it too. Just as long as it doesn’t spill any personal data crumbs on the carpet!
Key Points:
- Personal data can be used to train AI without violating GDPR, provided the AI output doesn’t reveal personal information.
- Decision made by the European Data Protection Board (EDPB) in response to a request from the Irish Data Protection Authority (DPC).
- GDPR’s applicability to AI models will be determined on a case-by-case basis.
- The EDPB emphasizes thorough evaluation of risks in identifying personal data in AI models.
- Irish DPC welcomes the EDPB’s opinion for clearer industry guidance and responsible AI innovation.
Already a member? Log in here