How can organizations ensure GDPR compliance while developing and deploying AI models that rely on personal data? In this episode of Diritto al Digitale, Giulio Coraggio and Tommaso Ricci from the law firm DLA Piper explore the implications of the European Data Protection Board’s (EDPB) Opinion 28/2024, which clarifies how the GDPR applies to AI model training, development, and deployment. 

We discuss the challenges of achieving genuine anonymity in AI models, navigating the use of legitimate interest as a legal basis for processing personal data, and understanding the consequences of unlawful data usage during the AI lifecycle.

Through practical insights and real-world examples—such as the recent GEDI case involving data sharing with OpenAI—we highlight the importance of robust documentation, Data Protection Impact Assessments (DPIAs), and privacy-preserving techniques. Discover how to manage data protection risks, integrate privacy by design into your AI projects, and maintain accountability and transparency. 

This comprehensive overview is aimed at equiping businesses, tech developers, and legal professionals with strategies to align cutting-edge AI technologies with GDPR requirements, ensuring trust, compliance, and long-term success in an increasingly data-driven world.

Send us a text

📌 You can find our contacts 👉 www.dlapiper.com