2026-10-22 09:20 UTC
The text gives AI special treatment: personal data processed ‘in the context of the development and operation’ of AI may be carried out for the legitimate interest of a company or third party.
That is extraordinarily broad, covering huge parts of an AI system’s life, from building and training to deployment.
Replies (2)
-
@edri@eupolicy.social 2026-10-22 09:21
The text does not change the definition of personal data but makes it easier for the #GDPR to stop applying along a data chain. The Council wants to make the protection of pseudonymised data (gentle reminder: still personal data) depend much more on who holds them.
-
@polx@mastodon.online 2026-10-22 13:28
@edri@eupolicy.social This is indeed enormously broad! So running a deanonimising script on my web page (e.g. Facebook embed,....) would not require an authorization anymore? E.g. because I collect data for some AI development?? That is very scary and completely wrong...