Privacy International's response to the DSIT's call for evidence relating to data regulation

Privacy International’s response to the Department for Science, Innovation & Technology’s call for evidence highlights how AI challenges fundamental tenets of data protection law.

In particular, that organisations who are responsible for processing are able to define what, how and why personal data are being processed at all stages of a system’s lifecycle.

Due to the potential complexity and opacity of processing associated with the different stages of an AI system’s lifecycle, organisations who are responsible for these systems may be unable to comprehensively characterise the personal data that they process.

As pointed out in Privacy International’s response, this inability to characterise processing then poses challenges for individuals who may wish to exercise their data protection rights - if the organisation responsible for a system cannot determine whether the personal data of a specific individual is being processed, how could that individual know and then exercise their rights over that data?

Read Privacy International’s response at: https://privacyinternational.org/advocacy/5868/pis-response-uk-department-science-innovation-technology-data-regulation-age-ai-and

Read the Department for Science, Innovation & Technology’s call for evidence at: https://www.gov.uk/government/calls-for-evidence/data-regulation-in-the-age-of-ai-and-other-data-intensive-technologies/data-regulation-in-the-age-of-ai-and-other-data-intensive-technologies