Blog

The GDPR obligates controllers to implement appropriate technical and organisational measures to ensure an appropriate security level to the risk of processing.

An AI system, or several AI systems, could be means selected by a controller to implement personal data operations of a processing activity. It is key to understand that the final purpose of a processing activity is different from the means selected and performed to implement such processing. Indeed...