Gouvernance

GDPR + AI

Définition

The intersection of the General Data Protection Regulation with AI systems. Key tensions include the right to explanation for automated decisions (Article 22), data minimisation requirements that limit training data use, and purpose limitation that constrains repurposing of collected data for model training.

Termes Connexes

Data Minimisation

The GDPR principle requiring that only the minimum necessary personal data be collected and processed for a specified purpose. Applied to AI, data minimisation drives techniques like federated learning, synthetic data generation, and differential privacy to train effective models without retaining raw personal data.

Purpose Limitation

The GDPR principle that personal data must be collected for specified, explicit, and legitimate purposes and not further processed in a way incompatible with those purposes. This constrains organisations from repurposing customer data to train internal AI models without fresh consent or a lawful basis.

Right to Explanation

The GDPR right (Article 22) for individuals to obtain meaningful information about the logic of automated decision-making that significantly affects them, including profiling. This right drives XAI requirements in credit scoring, HR, and other high-stakes AI applications.

Services Connexes

Eu Ai Act Compliance

Besoin d'Aide pour Comprendre l'IA?

Réservez un appel de cadrage Physical AI pour discuter de l'application de ces concepts IA à votre secteur et vos défis métier.