The Data Protection Commission (DPC) serves as Ireland’s national independent authority tasked with safeguarding individuals’ personal data within the EU, in line with the General Data Protection Regulation (GDPR), the EU’s Law Enforcement Directive (LED), and Irish ePrivacy Regulations.
The DPC has initiated an inquiry to assess whether Google Ireland Limited adhered to regulations regarding cross-border processing of personal data from EU or EEA subjects while developing its foundational AI model, the Pathways Language Model 2 (PaLM 2).
Organizations are required to conduct a Data Protection Impact Assessment (DPIA) before using individual data to ensure that the fundamental rights and freedoms of individuals are upheld. GDPR mandates a DPIA when a type of processing, especially those involving new technologies, is likely to pose a high risk to the rights and freedoms of individuals, considering the nature, scope, context, and purposes of the processing involved.
A DPIA is crucial for demonstrating compliance and for data controllers to mitigate potential data protection risks associated with high-risk processing activities. It aims to verify that data processing is necessary and proportional while ensuring appropriate safeguards are implemented in light of the identified risks.
This statutory inquiry is part of the broader efforts by the DPC to regulate personal data processing in the context of AI model and system development.
For further insights into the challenges and opportunities that artificial intelligence presents to the banking sector, consider attending Finextra’s inaugural NextGenAI conference on November 26, 2024. Register your interest here.