Interesting read — AI & Data Protection

The General Data Protection Regulation, also known as GDPR, came into effect six years ago today, significantly changing the way personal data is handled and protected across the European Union (EU).

Six years is a very long time in terms of tech; with the advent of AI, it might as well be an eternity.

We came across an interesting article by Verdict about the impact of AI and Cyber Security on GDPR:

“GDPR requires companies to report certain types of data breaches to relevant authorities within 72 hours and, in some cases, notify affected individuals, promoting transparency and accountability…However, at the rate that the cyber landscape is evolving, some experts have questioned whether GDPR is enough to protect companies.

“Steve Bradford, senior vice president EMEA at cloud security company SailPoint, says […] the stakes are too high for companies to be waiting to be led by government regulation or red tape,” as “operational downtime, customer loss, reputational damage and system restoration that follow any data breach all come with a major price tag.” 

Similarly, the rise of AI and Generative AI (GenAI) has clashed with GDPR, impacting both sides of the coin:

“The GlobalData Thematic Research Data Privacy Report defines AI as a software-based system that uses data inputs to make decisions on its own.

“The EU’s GDPR states that individuals have the right not to be subject to a decision that is based solely on automated decision-making or without human intervention. The law also requires organisations to explain how they use personal data in AI systems that have a significant impact on individuals.

“Some commentators have stressed that the complexity of AI and the difficulty in explaining its decisions may ultimately prevent European companies from using advanced AI systems for fear of not being compliant with GDPR,” quoting the recent complaint against OpenAI ChatGPT by the Austrian Data Protection Agency (DPA) and privacy activist group NOYB. 

Read the full article.