Regulating GPAI, CPDP, Brussels 22-24th May 2024

Regulating Generative AI: From the GDPR to the AI Act

Organized by AI-Regulation.com MIAI, Université Grenoble Alpes (FR)

Moderator Theodore Christakis, MIAI, Université Grenoble Alpes (FR)

Speakers Jessica G Lee, OpenAI (US); William Malcolm, Google (UK); Yann Padova, Wilson Sonsini (BE);  Félicien Vallet, CNIL (FR)

Join us for a fantastic workshop on how general purpose AI (GPAI) is already regulated by the GDPR and will be soon regulated by the EU AI Act!

The spectacular development of generative AI has triggered a global thinking about how best to regulate the technology’s risks. The EU AI Act trilogues were marked by disputes over regulating “foundational models” between the Council and the European Parliament. When it comes to issues related to data protection, privacy and security, however, generative AI is already regulated by the GDPR. DPAs, led by the Garante, have expressed concerns about compliance with GDPR principles by entities developing and deploying ChatGPT and other LLMs. Responding to these concerns, OpenAI, Google, and other companies revised privacy policies and took actions to address GDPR issues. However, significant questions persist. This panel will offer the perspectives of the regulator, the industry, the practitioners and academia on the intricate intersection of GDPR and generative AI, evaluating the EU AI Act’s impact on this crucial matter.

Highlights to be discussed include:

• What could be the legal basis for training large-language models with personal data?
• Does the GDPR principle of accuracy apply to GPAI outputs? How to deal with the “un-learning problem”?
• Purpose limitation in the generative AI lifecycle
• What is the interplay between the GDPR and the AI Act in regulating GPAI? Is innovation in Europe under threat by regulation?