| Intelligenza artificiale | 2024-04-20 · NEW:  Appunta · Stampa · Cita: 'Doc 98458' · pdf |
Cnil: raccomandazioni su AI |
abstract:
Da notare l'ipotesi che la AI non tratti dati personali in taluni casi, tema sostenuto su questo osservatorio
Fonte: CnilLink: http://dl-iusondemand.s3.amazonaws.com/civileitpro
analisi:
-
index:
testo:
What is the scope of the AI fact sheets?
08 April 2024
The Cnil wishes to provide clarifications and concrete recommendations for the development ofartificial intelligence (AI) and the creation of databases used for their learning, which involve personal data. The Cnil defines the scope of the various fact sheets.
The following factsheets relate only to the development phase of AI systems, and not to the deployment phase, where this involves the processing of personal data ("personal data"). It is limited to data processing subject to the General Data Protection Regulation (GDPR).
These sheets should make it possible to support professionals with both legal and technical profiles (data protection officers, legal professionals, people with technical skills specific to AI or not, etc.).
It should be noted that these fact sheets, adopted following a public consultation, constitute a framework to support organizations in their compliance. They Recall the obligations imposed by the regulations and make recommendations to comply with them. These recommendations are not binding: data controllers may deviate from them, provided that they can justify their choice and are under their responsibility. Some recommendations are also made as good practices and go further than compliance with the regulations.
The presence of personal data
The factsheets relate to the activities of database building and their use in the development of AI systems when all or part of this data is personal data. In practice, three cases can be encountered:
Certainly, none of the Personal data is present in the database : the fact sheets do not apply (even if some recommendations, of the order of good practice, may be relevant).
It is certain that personal data is present: the forms apply. This is the case with AI systems developed from videos or images of people, voice recordings, structured personal data, etc. - It should be noted that European texts lay down the rule according to which datasets including personal and non-personal data, known as "mixed", are governed by the GDPR, if the two types of data are inextricably linked.
It is possible that personal data is present: this is a frequent case for which the collection of personal data is not expressly desired. Like what:
residual presence of people or license plates in images;
occurrences of surnames, first names, addresses, etc. in textual data such as comments, prompts, etc.
In these cases, provided that the original personal data has been anonymised and for processing
operations subsequent to this deletion, the data loses its personal character and the records no longer apply.
by manual verification, e.g. when annotating data;
by automatic verification, e.g. through the use of techniques for detecting people/faces in images, by methods of Named Entity Recognition (named-entity recognition), etc.
Issues related to the risks associated with the use of the system will be the subject of fact sheets published at a later date.
Download Pdf
Link: http://dl-iusondemand.s3.amazonaws.com/civileitpro
Testo del 2024-04-20 Fonte: Cnil
Intelligenza artificiale Cnil Linee guida English Guidelines
