GDPR

On 27 June 2024, the EDPB published the results of a project under the Support Pool of Experts program, assessing data protection risks associated with AI-powered Optical Character Recognition (OCR). Conducted by external expert Isabel Barbera and completed in September 2023, the report identifies significant privacy risks in OCR technology, such as data breaches, unlawful data storage, and the unlawful handling of sensitive information. The findings emphasize the need for robust safeguards and strict compliance with data protection regulations to mitigate these risks effectively

The EDPB, in collaboration with the Spanish data protection authority (AEPD), initiated a project to enhance the GDPR compliance of AI systems. This project includes the development and piloting of tools and a checklist to inspect and audit AI systems. Key elements involve model card requirements, system maps, bias identification and testing, adversarial audits, and the publication of audit reports. These measures aim to improve transparency and accountability in AI systems, facilitating better oversight by data protection authorities.