Скачать или смотреть GDPR: AI and data protection - statement from the supervisory authorities

(AI translated video; original video: )

Welcome to Café Datenschutz, straight from the heart of Munich. Today we are looking at important issues surrounding the data protection-compliant use of AI applications in companies. Both German and European supervisory authorities have published their positions on this.

Companies that are responsible for deciding on the purposes and means of processing personal data (Art. 4 GDPR) must comply with specific data protection requirements if they wish to use artificial intelligence applications.

You can find out more in the following links:
Position paper of the German supervisory authorities: https://www.datenschutzkonferenz-onli...
Guidance from the supervisory authorities: https://www.datenschutzkonferenz-onli...
Framework conditions of the European Data Protection Committee: https://www.edpb.europa.eu/our-work-t...

What applies to the creation of your own LLMs?
1. training of LLMs: possibility to train LLMs with publicly available data on the basis of legitimate interest; protective measures for data, especially children's and sensitive data (e.g. health data).
2. information of data subjects in the case of large amounts of data**: Exemption under Art. 14 (5) GDPR may apply.
3. prompts: Create the possibility that prompts are not used for training.
4. notice to users: note that the output of the LLM may not always be correct
5. data subject rights: Implement measures to guarantee data subject rights (e.g. information, deletion).

What should companies consider?
Regulation with AI provider: (a) No training with the prompts used and (b) if necessary, conclusion of an order processing agreement (AVV).
Training of employees: Training of employees in the use of AI tools.
Integration of AI: Limits to the automation of relevant decisions by AI; humans must remain in the saddle:    • Einsatz von KI im Unternehmen #dsgvo #date...  

And so to the conclusion:
Supervisory authorities are clarifying the data protection framework for creating your own LLMs.
When using third-party providers: (a) check data protection settings in the AI tool and (b) conclude a data protection agreement with the AI provider if necessary.
Train employees in the use of AI tools.

What else has happened?
The governing mayor of Berlin, Kai Wegner, wants to re-discuss data protection in Germany. You can find out more here: [link](https://www.rbb24.de/politik/beitrag/...)

Stay informed and subscribe to our channel for more updates on data protection. Thank you for watching!

Speaker: Dr. Sebastian Kraska, IITR Datenschutz GmbH, https://www.iitr.de

Chapter for faster navigation:
0:00 Welcome Café Data Protection
0:30 Purpose and means of data processing
0:40 Guidance from the German supervisory authorities
0:50 Taskforce of the European Data Protection Committee on AI
1:02 What applies to the training of LLMs from the perspective of the supervisory authorities
2:48 What companies should consider when implementing AI systems
3:55 Summary of data protection and AI tools
4:33 Data protection news: Berlin's mayor wants to re-discuss data protection in Germany