DATA PROTECTION
Italian Data Protection Authority: favourable opinion adopted on the Italian Government's bill on Artificial Intelligence.
The Italian Data Protection Authority has adopted a favourable opinion on the draft government law on AI, which also contains legislative delegation for adaptation to the EU Regulation on Artificial Intelligence (no. 2024/1689 – AI Act).
The bill regulates research, experimentation, development, adoption and application of Artificial Intelligence (AI) systems and models in the various sectors of society (health, justice, work and professions, national security and defense, etc.).
In giving its favourable opinion to the text, the Authority nevertheless asked the Government to integrate it in several parts to ensure greater protection of citizens' personal data.
In particular, the Authority asked for the introduction of a new article to specify that the processing of personal data carried out through artificial intelligence systems must comply with national and European privacy legislation. The text must also be supplemented with a specific reference to adequate age verification systems (so-called "Age Verification Systems"). age verification) capable of guaranteeing limitations or prohibitions on the use of AI systems by minors.
In the case of the use of AI systems in high-risk healthcare, the Authority has asked to indicate particular limitations for the use of data (storage, prohibition of transmission, transfer or communication) and the preference for the use of synthetic or anonymous data.
It was also requested to indicate the Authority - as provided for in the AI Act - as the competent Authority for high-risk Artificial Intelligence systems used, for example, for law enforcement, remote biometric identification, emotion recognition, border management, administration of justice and democratic processes.
The bill regulates research, experimentation, development, adoption and application of Artificial Intelligence (AI) systems and models in the various sectors of society (health, justice, work and professions, national security and defense, etc.).
In giving its favourable opinion to the text, the Authority nevertheless asked the Government to integrate it in several parts to ensure greater protection of citizens' personal data.
In particular, the Authority asked for the introduction of a new article to specify that the processing of personal data carried out through artificial intelligence systems must comply with national and European privacy legislation. The text must also be supplemented with a specific reference to adequate age verification systems (so-called "Age Verification Systems"). age verification) capable of guaranteeing limitations or prohibitions on the use of AI systems by minors.
In the case of the use of AI systems in high-risk healthcare, the Authority has asked to indicate particular limitations for the use of data (storage, prohibition of transmission, transfer or communication) and the preference for the use of synthetic or anonymous data.
It was also requested to indicate the Authority - as provided for in the AI Act - as the competent Authority for high-risk Artificial Intelligence systems used, for example, for law enforcement, remote biometric identification, emotion recognition, border management, administration of justice and democratic processes.
