The Data Protection Commission (DPC) has commenced a cross-border statutory inquiry into Google Ireland over its compliance with GDPR while developing its Pathways Language Model 2 (PaLM2) artificial intelligence model.
The DPC will investigate concerns about whether the tech giant’s main Irish arm undertook a data protection impact assessment prior to engaging in the processing of personal data of EU/EEA residents for PaLM2.
Under Article 35 of the GPR, a data protection impact assessment is required where a type of processing, in particular using new technologies, is likely to result in a high risk to the rights and freedoms of individuals.
DPC said its inquiry forms part of its efforts to regulate the processing of the personal data of EU/EEA data subjects in the development of AI models and systems, working in conjunction with other EU/EEA regulators.
“A Data Protection Impact Assessment, where required, is of crucial importance in ensuring that the fundamental rights and …