ARTICLE · 10 FEBRUARY 2025

EDPB Opinion On AI Models And Data Protection Compliance

Byrne Wallace Shields LLP

Contributor

Byrne Wallace Shields LLP

Byrne Wallace Shields LLP

As one of Ireland’s leading full service law firms, Byrne Wallace Shields LLP is dedicated to the...

View firm profile

Explore more from Byrne Wallace Shields LLP

On 17 December 2024, the European Data Protection Board ("EDPB"), following a first of its kind request from the Data Protection Commission ("DPC") under Article 64(2) of the GDPR...

IrelandPrivacy

On 17 December 2024, the European Data Protection Board ("EDPB"), following a first of its kind request from the Data Protection Commission ("DPC") under Article 64(2) of the GDPR, published Opinion 28.2024 on certain data protection aspects related to the processing of personal data in the context of AI models (the "Opinion").

The Opinion focuses on data protection compliance requirements arising from the training/development and use/deployment of AI models.

The Opinion was welcomed by the DPC, which published the press release below.

Irish Data Protection Commission welcomes EDPB opinion on the use of personal data for the development and deployment of AI models | 18/12/2024 | Data Protection Commission

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

Irish Supervisory Authority DPC Publishes AI Insights Report

DPC AI Report Part 1: Overview

William Fry LLP

The Data Protection Commission’s 2026 AI Insight Report

DPC AI Insights Report: Key Takeaways

High Court Judgment On GDPR Representative Actions

William Fry LLP

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

Comparative Guide

Data Protection & Cybersecurity

See more popular content from

PrivacyByrne Wallace Shields LLP

Verify, Guarantee, Demonstrate: The TikTok Decision And What It Means For International Data Transfers

The Irish High Court has delivered a landmark judgment in TikTok's appeal against the Data Protection Commission's €530 million fine, establishing that organizations must not only identify appropriate transfer...

European UnionPrivacy

The Data Protection Commission’s 2025 Annual Report

Ireland's Data Protection Commission received a record 16,160 new cases in 2025, marking a 45% increase from the previous year, while imposing over €530 million in administrative fines. The Commission finalized four major inquiries, with the TikTok decision accounting for €530 million of the total penalties, and concluded 208 cross-border complaints as Lead Supervisory Authority.

The Data Act – “Access By Design” Requirement Comes Into Force

The European Union's Data Act introduces a groundbreaking "access by design" requirement that fundamentally changes how manufacturers must approach product development for connected devices and IoT products. From September 2026, businesses placing connected products on the EU market must ensure users can directly access their generated data by default, shifting data accessibility from a reactive request-based model to a proactive design imperative.

Corporate Update October 2026 - Sustainability Reporting & ESG

This privacy statement outlines how cookies are used on this website and provides users with options to manage their cookie preferences. By accepting all cookies, users consent to analytics and targeting cookies being deployed on their device.

Part 2: AI Act Articles 50(3) And 50(4) Transparency Obligations

The European Commission has issued interpretive guidelines on Article 50 of the AI Act, clarifying transparency obligations for emotion recognition systems, biometric categorization, and deepfake content.

William Fry LLP

The Data Act: “Access By Design” Requirement Comes Into Force For Medical Devices

The Data Act's "access by design" requirement came into force on 12 September 2026, mandating that manufacturers of connected products and providers of related services must enable direct user access to generated data by default. This article examines the scope of this new obligation and its practical implications for businesses in the Life Sciences sector, particularly those developing medical devices and Internet of Things products.

The Data Act – Part I: Key Considerations Regarding Data Access And Sharing

The EU Data Act, which became applicable on 12 September 2025, fundamentally reshapes how businesses handle data generated by connected devices and related services. With Ireland's General Scheme published in February 2026 designating ComReg and CCPC as enforcement authorities, companies must now assess their compliance obligations across data sharing frameworks, contractual terms, and user access rights or face significant fines.

EDPB 2025 Annual Report: Recent Trends

The European Data Protection Board's 2025 Annual Report reveals significant developments in EU data protection enforcement and regulatory cooperation. With approximately €1.15 billion...

McCann FitzGerald LLP

EU Digital Omnibus Regulations – What Has Been Proposed?

On 19 November 2025, the European Commission published its draft Digital Omnibus Regulations (EU Regulations 2025/0360 and 2025/0359).

European UnionPrivacy

DPC AI Insights Report: Key Takeaways

Ireland's Data Protection Commission has published a comprehensive report examining its supervisory engagement with organizations developing AI products between 2021 and 2025, revealing a tenfold increase in AI-related engagements and highlighting critical compliance areas including lawful basis, transparency, and children's data protection. The report provides detailed insights into the DPC's quasi-regulatory sandbox approach and outlines key observations on data protection obligations for AI technologies,

The EU AI Act: Ban On Prohibited AI Systems Enters Into Force

The European Union's Artificial Intelligence Act (the "EU AI Act"), which entered into force on 1 August 2024, has a graduated timeline for implementation with the majority of the Regulation due to come into force...

European UnionTechnology

Byrne Wallace Shields LLP

Withdrawal Of The AI Liability Directive

Contained within Annexes to the European Commission's Work Program for 2025, was the withdrawal of the proposal for a Directive of the European Parliament and of the Council on adapting non-contractual...

IrelandTechnology

Byrne Wallace Shields LLP

Irish Chapter Of Digital Business 2024

B2B e-commerce in Ireland is treated very much the same as non-e-commerce B2B business and much of the same legislation will apply.

European UnionTechnology

Byrne Wallace Shields LLP

Central Bank Of Ireland Issues Modernised Consumer Protection Code 2025 (Video)

The Central Bank of Ireland has issued a Modernised Consumer Protection Code on 24 March 2025, to take effect on 24 March 2026.

IrelandFinance and Banking

Byrne Wallace Shields LLP

Artificial Intelligence In EU Investment Funds

Vulnerabilities report from the European Securities and Markets Authority ("ESMA") released last week (the "Report") on artificial intelligence in EU investment funds...

European UnionTechnology

Byrne Wallace Shields LLP

Data Protection Commission Fines Meta €91 Million

The Data Protection Commission (DPC) inquiry into Meta Platforms Ireland Limited (Meta), which commenced in April 2019 has now been concluded. The DPC announced its final

Byrne Wallace Shields LLP

The Risks Of Generative AI: Copyright Risks (Video)

Another key risk of Generative AI for businesses concerns intellectual property rights. Generative AI tools have to trawl through huge amounts of data to be "trained."

GlobalTechnology

Byrne Wallace Shields LLP

CRU Proposed Decision Paper On Large Energy Users

The Commission for Regulation of Utilities (CRU) published on 18 February 2025 a proposed decision paper on Large Energy Users – connection policy (CRU/202504).

IrelandEnergy and Natural Resources

Byrne Wallace Shields LLP

Budget 2025 – Highlights And Insights – Video Commentary Analysis (Video)

Budget 2025 was announced today by the Minister for Finance, Jack Chambers TD.

Byrne Wallace Shields LLP

Ireland's Federated Approach To AI Regulation

On Tuesday 4 March 2025, the Government approved the designation of an initial list of eight public bodies to act as competent authorities under the EU Artificial Intelligence (AI)...

IrelandTechnology

Byrne Wallace Shields LLP