The European Data Protection Board (EDPB) has adopted a statement emphasizing the need for Data Protection Authorities (DPAs) to act as Market Surveillance Authorities (MSAs) under the EU AI Act. DPAs, with their expertise in AI’s impact on fundamental rights, are well-suited for supervising AI systems, particularly high-risk ones related to law enforcement and democratic processes.
On 27 June 2024, the Spanish Data Protection Agency (AEPD) and the European Data Protection Supervisor (EDPS) published a joint report on neurodata processing. Neurodata, defined as information gathered from the brain and nervous system, includes brain activity, structure, and function data. The report warns of significant privacy risks, especially with the rise of neurotechnologies in marketing and entertainment. It proposes the creation of new “neurorights” and emphasizes stringent data protection principles, including proportionality and transparency, to address the invasive nature of neurodata.
On 27 June 2024, the EDPB published the results of a project under the Support Pool of Experts program, assessing data protection risks associated with AI-powered Optical Character Recognition (OCR). Conducted by external expert Isabel Barbera and completed in September 2023, the report identifies significant privacy risks in OCR technology, such as data breaches, unlawful data storage, and the unlawful handling of sensitive information. The findings emphasize the need for robust safeguards and strict compliance with data protection regulations to mitigate these risks effectively
The EDPB, in collaboration with the Spanish data protection authority (AEPD), initiated a project to enhance the GDPR compliance of AI systems. This project includes the development and piloting of tools and a checklist to inspect and audit AI systems. Key elements involve model card requirements, system maps, bias identification and testing, adversarial audits, and the publication of audit reports. These measures aim to improve transparency and accountability in AI systems, facilitating better oversight by data protection authorities.
EDPB publishes Checklist for AI auditing Read More »
The EDPB initiated the Standardised Messenger Audit project within the Support Pool of Experts program, prompted by the German Federal Data Protection Authority (DPA). Completed in November 2023 by Prof. Mathieu Cunche, the project developed a detailed test catalogue for GDPR-compliant messenger services. This catalogue, structured around GDPR requirements, assists data protection authorities and companies in evaluating and enhancing data privacy measures in messaging applications used for both personal and business communication.
EDPB publishes Standardised Messenger Audit Read More »