Skip to Content

AI Policy & Governance, European Policy, Privacy & Data

CDT Europe’s response to the French data protection authority’s consultation on AI systems

The Centre for Democracy and Technology Europe welcomes the opportunity to provide input to the French national data protection authority Commission Nationale de l’Informatique et des Libertés (CNIL) on the applicability of the General Data Protection Regulation to AI systems. 

In our submission, we provide input to the consultation specifically addressing the applicability of legitimate interests as a legal basis for processing personal data for AI training purposes, including web scraping, as well as the importance of informing data subjects and facilitating the exercise of their rights. 

CDT highlights the limits of relying on legitimate interests as the legal basis for processing personal data for the training of AI systems. Further, CDT calls for the protection of data subject rights in the AI ecosystem, noting the obstacles for individuals to access sufficient information about the processing of their data and enforcing their rights. 

Read the full submission here.