The European Data Protection Supervisor issued an updated report for EU institutions using generative AI. The report contains practical directions for responsible development and deployment of generative AI tools, while introducing a revised definition of generative AI, a new “action-oriented” compliance checklist, clarified roles for EUIs so they can better determine if they are controllers, joint controllers or processors under the framework, and recommendations for determining lawful basis, purpose limitation and upholding data subjects’ rights.
Full story