Safety, Ethics & Governance · beginner · concept 276 of 311 · Updated Nov 4, 2026
Data Protection Law and AI (GDPR and beyond)
Data protection law governs how personal data is collected and used, and applies to AI from training data to decisions about people. Under GDPR Article 22 a person has the right not to be subject to a decision based solely on automated processing with significant effects; the EU Court of Justice held in 2023 that a credit score can be one. EDPB Opinion 28/2024 covers when AI models are anonymous and when legitimate interest justifies training.
Top AI contributors on this
- Sam AltmanOpenAI
- Kai-Fu LeeSinovation Ventures / 01.AI
- Timnit GebruDistributed AI Research Institute (DAIR)
- Elon MuskTesla / SpaceX
- Mustafa SuleymanMicrosoft AI
- Gary MarcusNYU (emeritus) / Marcus on AI
Key terms
Learn these first
Where you meet it in the real world
Training data audits, privacy impact assessments, reviews of automated decisions in credit and hiring, handling erasure requests, cross-border data transfers
Videos
European Data Protection Supervisor · YouTube
The Centre for Information Policy Leadership · YouTube
Guides and articles
Courses, papers, and more