Robin Nariman’s Post

View profile for Robin Nariman, graphic

Kommunjurist med särskilt fokus på dataskydd och AI

It is correct that AI models are not databases of information or structured repositories of facts which are accessible in a direct way. However, it is wrong to suggest - as many people do - that such models cannot contain personal data. The definition of personal data is, in order to ensure a high level of protection of natural persons, very wide. All it takes is for information to relate to an identified or identifiable natural person (a data subject). The relation could be by content, purpose or effect. I argue that even data that is abstracted and only accessible indirectly, could be information relating to a data subject. That the information might be incorrect or that the controller's aim is not to store personal data does not matter. #EU #GDPR #PersonalData

Iulian M.

Project Manager | Scrum Master | SAFe 6.0, PSM, Prince 2 | CIPP/E, CIPM, CEH | solely my views

1mo

Linkability is the key concept here. Proper de-identification is extremely hard to achieve and certainly last priority (if at all) to AI developers.

To view or add a comment, sign in

Explore topics