Data protection in the AI age

Data protection aspects of prohibited AI practices and the use of certain AI systems generating risks

Keywords: Artificial Intelligence, prohibited AI practices, AI Act, data protection, high-risk AI systems, biometric identification, risk assessment, web scraping

Abstract

The widespread use of AI today poses particular challenges for the protection of personal data. Thus, through the use of AI systems, the behavior of users can be easily observed, their habits and character can be mapped, from which AI can draw almost innumerable conclusions. The European AI Regulation has defined the scope of AI practices that can be considered prohibited in democratic societies with regard to the risks arising from excessive surveillance and certain other harmful AI practices. In addition, there are other AI applications that can be considered high-risk or potentially harmful and risky, and which have therefore attracted considerable attention in the context of data protection and with respect to the related risks to privacy. In line with the above, the aim of this paper is to present the data protection aspects and main risks associated with the use of prohibited AI practices and certain AI systems, including the challenges of biometric identification, certain risk assessment systems and web scraping.

References

Fraser, Henry – Bello y Villarino, José-Miguel: Acceptable Risks in Europe’s Proposed AI Act: Reasonableness and Other Principles for Deciding How Much Risk Management Is Enough. European Journal of Risk Regulation, Vol. 15., No. 2. (2024) https://doi.org/10.1017/err.2023.57
Laux, Johann – Wachter, Sandra – Mittelstadt, Brent: Trustworthy artificial intelligence and the European Union AI act: On the conflation of trustworthiness and acceptability of risk. Regulation & Governance, Vol. 18., No. 1. (2022) https://doi.org/10.1111/rego.12512
Floridi, Luciano: Introduction to the Special Issue. The Ethics of Artificial Intelligence: Exacerbated Problems, Renewed Problems, Unprecedented Problems. American Philosophical Quarterly, Vol. 61., No. 4. (2024) https://doi.org/10.5406/21521123.61.4.01
Necz, Dániel: Új fajta tudás, új fajta hatalom – a mesterséges intelligencia és a személyes adatok védelme. Doktori értekezés. Pázmány Péter Katolikus Egyetem, Jog- és Államtudományi Kar, 2024.
Pók, László: Felkészülés az MI Rendelet alkalmazására - 5. rész: Tiltott MI-gyakorlatok I. GDPR Blog, 2024. 07. 02. https://gdpr.blog.hu/2024/07/02/felkeszules_az_mi_rendelet_alkalmazasara_5_resz_tiltott_mi-gyakorlatok
Neuwirth, Rostam Josef: Prohibited Artificial Intelligence Practices in the Proposed EU Artificial Intelligence Act, 2022. http://dx.doi.org/10.2139/ssrn.4261569
Tóth, András, Fogyasztóvédelmi, adatvédelmi, médiajogi és versenyjogi eszközök együttes alkalmazása, az online figyelempiacok kudarcainak kiküszöbölésére. Infokommunikáció és Jog, 2021/2. 12.
Published
2025-04-04