The ICO has issued a blog to challenge some common myths about AI and data privacy. It covers topics like:
- Do people have control over their personal data being used to train AI?
- Can AI developers use people’s data without being transparent?
- Does data protection apply if AI developers didn’t intend to process people’s personal data?
- Do AI models themselves come with data protection risks?
- Should AI development be exempt from the law?
- Are the existing regulations fit for tech like AI?
You can find the answers at https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2025/01/debunking-data-protection-myths-about-ai/
We hope that you have a Generative AI policy or at least a statement but if not, contact us as we can signpost you to free and low-cost resources.