Support Centre

Spain: AEPD publishes guide on incorporating GDPR into AI-based data processing

The Spanish data protection authority ('AEPD') published, on 13 February 2020, its guide ('the Guide') on the incorporation of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') within processing activities using artificial intelligence ('AI') technologies. In particular, the Guide addresses the aspects that managers and developers must take into account when designing products and services that carry out data processing activities through AI technologies. Moreover, the Guide addresses, among other things, the lawfulness of processing, transparency requirements, the exercise of data subjects' rights, automated decisions, and Data Protection Impact Assessments.

You can read the press release here and the Guide here, both only available in Spanish.

UPDATE (27 February 2020)

AEPD publishes English version of Guide

The AEPD published, on 24 February 2020, an English version of the Guide.

You can read the English version of the Guide, here