AI training gets green light
The proposal directly addressed one of the most contentious issues in EU privacy law: whether companies can train AI systems using personal data.
The draft stated that AI training, testing, and validation may be conducted under the GDPR’s “legitimate interest” basis, as long as companies implement safeguards such as data minimization, transparency, and an unconditional right to object.
“Processing of personal data for AI training may therefore be carried out for purposes of a legitimate interest,” the draft said, adding that developers must ensure the training is “beneficial for the data subject and society at large.”
