热门搜索：

首份生成式人工智能数据合规指南

信息技术2024-06-03-EDPSB***

AI智能总结

Generative AI and Data Protection Compliance: Key Insights from the EDPS Orientations

Overview:

The European Data Protection Supervisor (EDPS) has issued guidelines focusing on the integration of generative artificial intelligence (AI) systems within European Union Institutions, Bodies, Offices, and Agencies (EUIs), particularly regarding personal data protection. These orientations aim to provide practical advice to ensure compliance with the General Data Protection Regulation (GDPR), emphasizing the importance of adhering to data protection principles while leveraging generative AI.

Key Areas of Focus:

Definition and Scope: Generative AI refers to a subset of AI that creates a diverse array of outputs through machine learning models, often utilizing large language models as foundational architectures. These models can be adapted for various tasks and applications, such as text, image, and audio generation.
Use of Generative AI by EUIs: The guidelines clarify that EUIs can use generative AI systems provided they adhere to GDPR principles. This includes ensuring that personal data processing is conducted lawfully, minimizing data use, maintaining data accuracy, informing individuals about data processing, avoiding biased outcomes, and protecting data security.
Data Protection Principles: The orientations emphasize the importance of adhering to general data protection principles, such as data minimization, data accuracy, and fair processing. Special attention is given to the avoidance of bias and the protection of individual rights.
DPO Role: Data Protection Officers (DPOs) play a crucial role in the development or deployment of generative AI systems, advising on privacy and data protection matters.
DPIA Requirement: An Impact Assessment (DPIA) must be carried out when developing or implementing generative AI systems to assess potential risks and ensure compliance.
Lawfulness of Processing: Processing of personal data during the design, development, and validation of generative AI systems must comply with GDPR, focusing on the conditions for lawful processing.
Ongoing Guidance: The EDPS intends to refine and expand these initial orientations over time, addressing new questions and challenges as the technology evolves.

Conclusion:

These EDPS orientations serve as a foundational guide for EUIs looking to incorporate generative AI systems while safeguarding personal data protection. By focusing on practical advice and general principles, the guidelines aim to facilitate compliance with GDPR, fostering innovation while respecting individuals' fundamental rights and freedoms.

0 03June2024 GenerativeAIandtheEUDPR. FirstEDPSOrientationsforensuringdataprotectioncompliancewhenusingGenerativeAIsystems. TheseEDPSOrientationsongenerativeArtificialIntelligence(generativeAI)andpersonaldataprotectionintendtoprovidepracticaladviceandinstructionstoEUinstitutions,bodies,officesandagencies(EUIs)ontheprocessingofpersonaldatawhenusinggenerativeAIsystems,tofacilitatetheircompliancewiththeirdataprotectionobligationsassetout,inparticular,inRegulation(EU)2018/1725.Theseorientationshavebeendraftedtocoverasmanyscenariosandapplicationsaspossibleanddonotprescribespecifictechnicalmeasures.Instead,theyputanemphasisonthegeneralprinciplesofdataprotectionthatshouldhelpEUIscomplywiththedataprotectionrequirementsaccordingtoRegulation(EU)2018/1725. TheseorientationsareafirststeptowardsmoredetailedguidancethatwilltakeintoaccounttheevolutionofGenerativeAIsystemsandtechnologies,theirusebyEUIs,andtheresultsoftheEDPS’monitoringandoversightactivities. TheEDPSissuestheseorientationsinitsroleasadataprotectionsupervisoryauthorityandnotinitsnewroleasAIsupervisoryauthorityundertheAIAct. TheseorientationsarewithoutprejudicetotheArtificialIntelligenceAct. Introductionandscope3 1.WhatisgenerativeAI?4 2.CanEUIsusegenerativeAI?6 3.HowtoknowiftheuseofagenerativeAIsysteminvolvespersonaldataprocessing?.7 4.WhatistheroleofDPOsintheprocessofdevelopmentordeploymentofgenerativeAIsystems?8 5.AnEUIwantstodeveloporimplementgenerativeAIsystems.WhenshouldaDPIAbecarriedout?9 6.Whenistheprocessingofpersonaldataduringthedesign,developmentandvalidationofgenerativeAIsystemslawful?11 7.HowcantheprincipleofdataminimisationbeguaranteedwhenusinggenerativeAIsystems?14 8.AregenerativeAIsystemsrespectfulofthedataaccuracyprinciple?15 9.HowtoinformindividualsabouttheprocessingofpersonaldatawhenEUIsuse generativeAIsystems?17 10.WhataboutautomateddecisionswithinthemeaningofArticle24oftheRegulation? .............................................................................................................................................18 11.HowcanfairprocessingbeensuredandavoidbiaswhenusinggenerativeAIsystems?20 12.Whatabouttheexerciseofindividualrights?22 13.Whataboutdatasecurity?23 14.Doyouwanttoknowmore?25 Introductionandscope 1.TheseorientationsareintendedtoprovidesomepracticaladvicetotheEUinstitutions,bodies,officesandagencies(EUIs)ontheprocessingofpersonaldataintheiruseofgenerativeAIsystems,toensurethattheycomplywiththeirdataprotectionobligationsinparticularassetoutintheRegulation(EU)2018/1725(‘theRegulation’,orEUDPR).EveniftheRegulationdoesnotexplicitlymentiontheconceptofArtificialIntelligence(AI),therightinterpretationandapplicationofthedataprotectionprinciplesisessentialtoachieveabeneficialuseofthesesystemsthatdoesnotharmindividuals’fundamentalrightsandfreedoms. 2.TheEDPSissuestheseorientationsinhisroleasadataprotectionsupervisoryauthorityandnotinhisnewroleasAIsupervisoryauthorityundertheAIAct. 3.TheseorientationsdonotaimtocoverinfulldetailalltherelevantquestionsrelatedtotheprocessingofpersonaldataintheuseofgenerativeAIsystemsthataresubjecttoanalysisbydataprotectionauthorities.Someofthesequestionsarestillopen,andadditionalonesarelikelytoariseastheuseofthesesystemsincreasesandthetechnologyevolvesinawaythatallowsabetterunderstandingonhowgenerativeAIworks. 4.Becauseartificialintelligencetechnologyevolvesquickly,thespecifictoolsandmeansusedtoprovidethesetypesofservicesarediverseandtheymaychangeveryquickly.Therefore,theseorientationsorientationshavebeendraftedtocoverasmanyscenariosandapplicationsaspossible. 5.Theseorientationsarestructuredasfollows:keyquestions,followedbyinitialresponsesalongwithsomepreliminaryconclusions,andfurtherclarificationsorexamples. 6.Theseinitialorientationsserveasapreliminarysteptowardsthedevelopmentofmorecomprehensiveguidance.Overtime,theseorientationswillbeupdated,refinedandexpandedtoaddressfurtherelementsneededtosupportEUIsinthedevelopmentandimplementationofthesesystems.Suchanupdateshouldtakeplacenolaterthantwelvemonthsafterthepublicationofthisdocument. 1.WhatisgenerativeAI? GenerativeAIisasubsetofAIthatusesspecialisedmachinelearningmodelsdesignedtoproduceawideandgeneralvarietyofoutputs,capableofarangeoftasksandapplications,suchasgeneratingtext,imageoraudio.Concretely,itreliesontheuseoftheso-calledfoundationmodels,whichserveasbaselinemodelsforothergenerativeAIsystemsthatwillbe‘fine-tuned’fromthem. Afoundationmodelservesasthecorearchitectureorbaseuponwhichother,morespecialisedmodels,arebuilt.Thesemodelsaretrainedonthebasisofdiverseandextensivedatasets,includingthosecontainingpubliclyavailableinformation.Theycanrepresentcomplexstructureslikeimages,audio,videoorlanguageandcanbefine-tunedforspecifictasksorapplications. Largelanguagemodelsareaspecifictypeoffoundationmodeltrainedonmassiveamountsoftextdata(frommillionstobillionsofwords)thatcangeneratenaturallanguageresponsestoawiderangeofinputsbasedonpatternsandrelationshipsbetweenwordsandphrases.ThisvastamountoftextusedtotrainthemodelmaybetakenfromtheInternet,books,andothe

点击免费查看完整报告

你可能感兴趣

首份生成式人工智能数据合规指南

Generative AI and Data Protection Compliance: Key Insights from the EDPS Orientations

Overview:

Key Areas of Focus:

Conclusion:

你可能感兴趣

生成式人工智能海外合规白皮书

生成式AI优势：创始人指南之利用数据脱颖而出

【天风传媒】新华网涨停！生成式AI浪潮下建议关注AI合规及内容甄别主线

2023生成式人工智能服务合规发展白皮书

生成式AI浪潮下，建议关注AI合规及内容甄别主线