Guidance on Generative AI, strengthening data protection in a rapidly changing digital era
The following guidelines are an update of the guidance published in 2024.
Since the data protection implications of some functions common to all EU institutions, bodies and agencies are similar, we publish guidelines on specific subjects, such as recruitment, appraisals, use of IT equipment in the workplace and disciplinary procedures.
These consolidate our guidance from our prior check Opinions, consultations and also include relevant guidance by the Article 29 Working Party and the case law of the European courts.
Our guidelines may be a useful source of inspiration for other organisations outside the EU institutions or may supplement the guidance offered by national data protection authorities.
The following guidelines are an update of the guidance published in 2024.
Article 42 of Regulation (EU) 2018/1725 requires the EDPS to be consulted on proposals for legislative and other acts with an impact on the protection of individuals’ rights and freedoms with regard to the processing of personal data. The purpose of this guidance is to offer practical advice to the Commission, European Parliament and Council on the main elements to consider with regards to legislative proposals and other acts that imply the processing of personal data.
The EDPS has published its Orientations on “generative Artificial Intelligence and personal data protection” to provide EU institutions, bodies, offices and agencies with practical advice and instructions on the processing of personal data when using generative AI systems, to facilitate their compliance with the requirements of the data protection legal framework.
EDPS Guidance on Return to the Workplace and EUIs’ screening of COVID immunity or infection status
EDPS publishes orientations on manual contact tracing by EU Institutions in the context of the COVID-19 crisis.