Companies using generative AI technology have been notified by the Information Commissioner’s Office (ICO) that they remain bound by UK data protection law.
Therefore, when collecting personal information, you must obtain consent or provide proof of legitimate interest.
The ICO has issued a notice seeking clarification of companies’ data practices and has threatened to impose orders to stop certain conduct and impose fines of up to £17m under current data protection law.
ICO spokesman John Edwards told The Telegraph that “when an organization fails to comply with the law and does not consider the impact on individuals, we act.”
This development G7 meeting May 20th in Japan. A Summit release detailed that G7 countries should counter undue obstacles to the free flow of data that lack transparency and are arbitrarily managed, with a view to avoiding fragmentation of the internet. The G7 also works to combat human rights abuses by technology in the unethical use of data. It seeks to strike a balance between openly regulated data sharing between countries and protecting the rights and interests of individuals from misuse of data by large technology companies.
“We aim to increase trust across the digital ecosystem and counter the effects of authoritarian approaches,” the release continued.
The rapid growth of generative AI, led by companies such as OpenAI with its ChatGPT model, has alerted regulators to potential privacy implications.
Regulators are concerned not only about the ethics of data obtained from individuals interacting with AI, but also about the large amounts of data collected from the internet that may contain personal information.
Recommended
The Competition and Markets Authority (CMA) has already launched an investigation into the AI market, including a study of the safety impacts arising from the technology.
Ofcom also recommends stricter rules for the responsible use of AI, including stronger risk assessments for new applications.
Those concerns came to the fore in March when Italian data protection authorities temporarily blocked ChatGPT, saying it had no legal basis to justify its large-scale collection and storage of personal data.
In response, OpenAI has expanded its privacy policy to introduce the option for European users to opt out of data processing through an online form and to establish the right to erasure of inaccurate information.
