GDPR Article 15: Accessing Personal Data in Trained AI Models

Article 15 of the General Data Protection Regulation (GDPR) presents two distinct rights regarding personal data held by companies, particularly those that have trained AI models. The first right, under Article 15(1), concerns access to information about the data, including its purposes, categories, recipients, and automated decision-making logic. The second right, Article 15(3), grants individuals a copy of their personal data undergoing processing. While the information access part is generally straightforward for AI companies, the right to a copy of data processed by a trained model's weights remains an unsettled legal question. Some authorities, like the Hamburg Commissioner, argue that the model weights themselves do not constitute processing of personal data, while others, such as the European Data Protection Board, are taking a more cautious approach. AI

IMPACT Clarifies complex GDPR rights for AI developers, highlighting the unsettled legal status of personal data within model weights.

RANK_REASON The article discusses legal interpretations and unsettled questions regarding GDPR compliance for AI models, rather than announcing a new product, research, or policy.

Read on dev.to — LLM tag →

• Article 15
• Article 15(1)
• Article 15(1)(g)
• Article 15(1)(h)
• Article 15(3)
• European Data Protection Board
• General Data Protection Regulation
• Hamburg Commissioner for Data Protection and Freedom of Information

• policy
• other

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →