Glossary — Business and law
GDPR and AI
GDPR applies to AI exactly as it applies to everything else: if you put personal data into a model, you are processing personal data and you need a basis for it.
4 tokensGDPRandAI
Simply put#
AI is not an exception. Pasting a customer's name, email or health information into a third-party service is a transfer of data that needs a legal basis and usually a contract.
Example#
A free consumer tier that uses conversations for training is generally the wrong place for customer data. A business account with a data processing agreement is the right one.
Why it matters to you#
Three practical rules: know where the service stores data; know whether it is used for training; and do not paste anything you would not put in an email to a stranger.