Regulators in the EU Engaging with Leading Internet Firms on AI Data Protection Compliance

The European Union’s Data Protection Commission (DPC) has revealed that leading internet firms are actively engaging with regulators to ensure their artificial intelligence products comply with data protection rules. The DPC, which oversees major tech companies like Google, Meta, Microsoft, TikTok, and OpenAI, has emphasized the importance of addressing potential data privacy issues posed by AI technology.

In an interview, the top officials at the DPC highlighted the need for regulators to determine the boundaries of using public data to train AI models and the legal basis for utilizing personal data. They also stressed the importance of AI operators guaranteeing individuals’ data rights, including the right to erase their data and addressing the risk of incorrect personal data being generated by AI models.

Dale Sunderland, one of the DPC’s commissioners, disclosed that leading US tech firms have been actively seeking the commission’s input on their new AI products, particularly in the large language model space. He mentioned that Google had made adjustments to its Gemini AI chatbot following consultations with the DPC.

While Ireland serves as the primary regulator for most US internet firms with EU headquarters in Dublin, decisions can also involve input from other regulators through the European Data Protection Board. The upcoming EU AI Act will require AI model operators to comply with data protection laws, including the General Data Protection Regulation, which carries hefty fines for non-compliance.

Des Hogan, the DPC’s chair and commissioner, emphasized the broad regulatory powers at their disposal, warning that companies failing to conduct proper due diligence on new products or services risk having to make design changes later on. The DPC’s proactive approach underscores the importance of safeguarding data privacy in the rapidly evolving AI landscape.