{"id":4954,"date":"2024-08-23T14:31:41","date_gmt":"2024-08-23T12:31:41","guid":{"rendered":"https:\/\/marszalekipartnerzy.pl\/uncategorized\/ai-act-and-rodo-regulations-and-artificial-intelligence\/"},"modified":"2024-08-23T14:33:54","modified_gmt":"2024-08-23T12:33:54","slug":"ai-act-and-rodo-regulations-and-artificial-intelligence","status":"publish","type":"post","link":"https:\/\/marszalekipartnerzy.pl\/en\/news\/ai-act-and-rodo-regulations-and-artificial-intelligence\/","title":{"rendered":"AI ACT and RODO &#8211; regulations and artificial intelligence"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">The entry into force of the Regulation of the European Parliament and of the Council Establishing Harmonized Legislation on Artificial Intelligence &#8211; the so-called &#8220;AI Act.<br \/>\nAI Act &#8211; represents the first attempt to legally regulate the operation of artificial intelligence systems.<br \/>\nIn practice, however, the act raises a number of controversies concerning, among other things.<br \/>\ncopyright law, liability for damages caused by AI, but also the processing of personal data.<br \/>\nDoes the AI legislation change the rules for processing personal data?    <\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Basic information on the implementation of RODO and AI into the legal order<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">The EU legislature has adopted a completely different strategy for the requirements to be met by an entity covered by the AI Act and RODO.<br \/>\nThe former requires the implementation of different types of standards and mechanisms regarding, among other things: <\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">risk management;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">data management;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">technical documentation;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">transparency obligations;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">impact assessment on fundamental rights.<\/span><\/li>\n<\/ul>\n<p><b>However, it is important to realize that the AI ACT itself does not grant users any rights (interestingly, the AILD, which has not yet been enacted, does so).<\/b><\/p>\n<p><span style=\"font-weight: 400;\">In the case of the RODO, this is quite different, as the regulation does not indicate exactly what needs to be done, but specifies the result to be achieved.<br \/>\nThis result is primarily to secure data protection and enable data subjects to exercise their rights. <\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Which artificial intelligence systems are addressed by the RODO and which by the AI Act?<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">A new EU law covering AI concerns the application of artificial intelligence.<br \/>\nHowever, it is important to note that the regulation primarily refers to high-risk artificial intelligence (AI) systems.   <\/span><i><span style=\"font-weight: 400;\">high-risk AI<\/span><\/i><span style=\"font-weight: 400;\">).<br \/>\nOznacza to, \u017ce do tych system\u00f3w stosuje si\u0119 r\u00f3wnolegle akt o sztucznej inteligencji oraz RODO.<br \/>\nDo pozosta\u0142ych osi\u0105gni\u0119\u0107 nowych technologii stosuje si\u0119 wy\u0142\u0105cznie RODO.  <\/span><\/p>\n<h2><span style=\"font-weight: 400;\">AI Act versus the General Data Protection Regulation.<br \/>\nHow to apply them simultaneously? <\/span><\/h2>\n<p><span style=\"font-weight: 400;\">First of all, it is worth noting the wording of paragraph 1.2 of the AI Act&#8217;s Preamble.<br \/>\nIn it, the EU legislator indicated that the AI Act regulation does not in any way violate the RODO 2016\/679 regulation.<br \/>\nThis means that the two legal acts operate on the same level complementing each other.  <\/span><\/p>\n<p><span style=\"font-weight: 400;\">AI developers, as well as system providers and operators, are subject to exactly the same data processing rules as all other market participants.<br \/>\nIt can be said that risk management in the design and use of AI systems must take into account both the grounds that legalize the processing of personal data and the rules for managing it. <\/span><\/p>\n<p><b>In practice, therefore, some AI-based systems must comply with both regimes of standards &#8211; the AI Act and RODO<\/b><span style=\"font-weight: 400;\">.<br \/>\nCz\u0119\u015b\u0107 z nich b\u0119dzie si\u0119 pokrywa\u0142a, np. ograniczenia w zakresie zautomatyzowanego przetwarzania danych osobowych i wykorzystanie modeli sztucznej inteligencji, kt\u00f3re bazuj\u0105 na podprogowej ingerencji w zachowanie os\u00f3b fizycznych. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">However, this doesn&#8217;t always have to be the case, so the use of artificial intelligence should be preceded by an audit of both AI Act and RODO regulations.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">How to train generative artificial intelligence models in compliance with RODO?<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">Currently, tools based on generative artificial intelligence are very popular.<br \/>\nThis can include, among others.<br \/>\nChat GPT, Dall-E, Google Bard or Jasper, among others.<br \/>\nTheir common denominator is that in order to use AI, it is necessary to &#8220;train&#8221; it, i.e. provide resources and modify parameters to obtain the most accurate results.   <\/span><\/p>\n<p><span style=\"font-weight: 400;\">Currently, regulators involved in the personal data sector have not developed a unified position on whether such AI can process users&#8217; personal data for development purposes.<br \/>\nA good example is the ruling of the Italian GPDP, which held that it is permissible for a personal data controller to invoke the legitimate interest rationale (Article 6(1)(f) of the RODO). <\/span><\/p>\n<p><span style=\"font-weight: 400;\">It can be expected that in order to avoid ambiguity and the risk of a severe sanction, the designers of artificial intelligence tools in the future will introduce the possibility of  <\/span><b>to withdraw consent or object by the user to the use of his\/her personal data, provided that the functionality of the software is affected<\/b><span style=\"font-weight: 400;\">.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Why is the implementation of the AI Act and RODO so important?<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">Leaving aside the risk of hefty fines associated with ignoring EU regulations, both AI Act solutions and the RODO regulation create compliance obligations on the part of businesses.  <\/span><b>Meeting the requirements indicated in the legal standards guarantees the conduct of business in accordance with the law<\/b><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In both cases, it is worth remembering that compliance audits should be conducted periodically and repeated each time new solutions are implemented that modify existing processes.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Who will be in charge of evaluating the use of artificial intelligence?<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">Compliance of AI tools and personal data processing rules will be under the same regulatory authority in Poland (as probably in other EU countries).<br \/>\nExpanding the competencies of the Office for Personal Data Protection will make it possible for entrepreneurs to be controlled on two levels in parallel. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">Doubts and legal problems with artificial intelligence are increasing the risk of a <\/span><i><span style=\"font-weight: 400;\">chilling effect<\/span><\/i><span style=\"font-weight: 400;\"> among system manufacturers fearing heavy sanctions for failing to meet the new requirements, or for failing to properly integrate an AI system with RODO regulations.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Responsible risk management and the provision of tools that are not only effective, but also work in accordance with the RODO and AI Act requires the support of professionals.<br \/>\nWe invite both entities involved in AI design and entrepreneurs who use them to work with us.<br \/>\nOur law firm specializes in new technology law and offers comprehensive support in this area.  <\/span><\/p>\n<p><span style=\"font-weight: 400;\">Meta title: AI Act and RODO.<br \/>\nCan these regulations be applied simultaneously? <\/span><\/p>\n<p><span style=\"font-weight: 400;\">Meta description: Artificial intelligence is increasingly being used in business.<br \/>\nReconciling the AI Act and RODO, however, raises many questions.<br \/>\nHow to apply them?  <\/span><\/p>\n<p><span style=\"font-weight: 400;\">Link to analysis in Contad:<\/span><span style=\"font-weight: 400;\">https:\/\/app.contadu.com\/analysis\/content-preview\/385ef5ad810f6143\/0f1754f68d5585e9d8d6e1ef48ea6dd15d3<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The entry into force of the Regulation of the European Parliament and of the Council Establishing Harmonized Legislation &#8230;<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[12],"tags":[],"class_list":["post-4954","post","type-post","status-publish","format-standard","hentry","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/marszalekipartnerzy.pl\/en\/wp-json\/wp\/v2\/posts\/4954","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/marszalekipartnerzy.pl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/marszalekipartnerzy.pl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/marszalekipartnerzy.pl\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/marszalekipartnerzy.pl\/en\/wp-json\/wp\/v2\/comments?post=4954"}],"version-history":[{"count":1,"href":"https:\/\/marszalekipartnerzy.pl\/en\/wp-json\/wp\/v2\/posts\/4954\/revisions"}],"predecessor-version":[{"id":4955,"href":"https:\/\/marszalekipartnerzy.pl\/en\/wp-json\/wp\/v2\/posts\/4954\/revisions\/4955"}],"wp:attachment":[{"href":"https:\/\/marszalekipartnerzy.pl\/en\/wp-json\/wp\/v2\/media?parent=4954"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/marszalekipartnerzy.pl\/en\/wp-json\/wp\/v2\/categories?post=4954"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/marszalekipartnerzy.pl\/en\/wp-json\/wp\/v2\/tags?post=4954"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}