GDPR’s tools to tackle AI and machine-driven data

Abstract

As technologies and information management systems evolve, machine-based data management and artificial intelligence (AI) continue to multiply and to expand into new fields. Despite the many potential benefits, challenges, if not clear pitfalls, also appear crucial to take into account, not the least from the perspective of privacy and data protection law. Are the benefits merely a continuation of Moore’s law or do they become more negative after all? This paper evaluates the tools that the EU’s General Data Protection Regulation (GDPR) will offer to address the mounting interest in AI and machine learning. The examination will focus on the right to information, right to object, and the notions of pseudonymisation, anynonymisation and data minimisation under the GDPR.