Artificial intelligence in a privacy-concerned world: Automated decision-making and the GDPR

Abstract

When we think of artificial intelligence (AI), most of us think of robots and machines that have yet to be invented. AI is, however, all around us and has been for a while now. AI makes our everyday lives easier but has a downside, such as massive data processing (Big Data). The General Data Protection Regulation (GDPR) that came into force on 25th May, 2018, regulates the protection of personal data of individuals within the European Union member states. While innovation is important to our society, it is also important that organisations using AI technologies and Big Data comply with the GDPR to ensure that privacy and data are protected. This paper focuses on the relation between AI, automated decision-making by using machine learning and the GDPR. It describes the risks of automated decision-making in the context of data protection and the rights of data subjects. Finally, it will give recommendations that could be useful for organisations using automated decision-making.