GUIDELINES ON ARTIFICIAL INTELLIGENCE AND DATA PROTECTION

21 giugno 2019

According to CONSULTATIVE COMMITTEE OF THE CONVENTION FOR THE PROTECTION OF INDIVIDUALS WITH REGARD TO AUTOMATIC PROCESSING
OF PERSONAL DATA, (Convention 108) (T-PD(2019)01)developers, manufacturers and service providers should take into account the following guidelines:

  1. AI developers, manufacturers and service providers should adopt a values-oriented approach in the design of their products and services, consistent with Convention 108+, in particular with article 10.2, and other relevant instruments of the Council of Europe. 
  2. AI developers, manufacturers and service providers should assess the possible adverse consequences of AI applications on human rights and fundamental freedoms, and, considering these consequences, adopt a precautionary approach based on appropriate risk prevention and mitigation measures. 
  3. In all phases of the processing, including data collection, AI developers, manufacturers and service providers should adopt a human rights by-design approach and avoid any potential biases, including unintentional or hidden, and the risk of discrimination or other adverse impacts on the human rights and fundamental freedoms of data subjects. 
  4. AI developers should critically assess the quality, nature, origin and amount of personal data used, reducing unnecessary, redundant or marginal data during the development, and training phases and then monitoring the model’s accuracy as it is fed with new data. The use of synthetic data5 may be considered as one possible solution to minimise the amount of personal data processed by AI applications. 
  5. The risk of adverse impacts on individuals and society due to de-contextualised data6 and de-contextualised algorithmic models7 should be adequately considered in developing and using AI applications. 
  6. AI developers, manufacturers and service providers are encouraged to set up and consult independent committees of experts from a range of fields, as well as engage with independent academic institutions, which can contribute to designing human rights- based and ethically and socially-oriented AI applications, and to detecting potential bias. Such committees may play an especially important role in areas where transparency and stakeholder engagement can be more difficult due to competing interests and rights, such as in the fields of predictive justice, crime prevention and detection. 
  7. Participatory forms of risk assessment, based on the active engagement of the individuals and groups potentially affected by AI applications, should be encouraged. 
  8. All products and services should be designed in a manner that ensures the right of  individuals not to be subject to a decision significantly affecting them based solely on  automated processing, without having their views taken into consideration. 
  9. In order to enhance users’ trust, AI developers, manufacturers and service providers are encouraged to design their products and services in a manner that safeguards users’ freedom of choice over the use of AI, by providing feasible alternatives to AI 
  10. AI developers, manufacturers, and service providers should adopt forms of algorithm  vigilance that promote the accountability of all relevant stakeholders throughout the entire life cycle of these applications, to ensure compliance with data protection and human rights law and principles. 
  11. Data subjects should be informed if they interact with an AI application and have a right to obtain information on the reasoning underlying AI data processing operations applied to them. This should include the consequences of such reasoning.
  12. The right to object should be ensured in relation to processing based on technologies that influence the opinions and personal development of individuals. 

 

 

Archivio news

 

News dello studio

set17

17/09/2025

Guerra in Ucraina: il Tribunale conferma le misure restrittive nei confronti di Positive Group PAO, un’entità che opera nel settore informatico russo ed è titolare di una licenza rilasciata dai servizi di intelligence nazionali russ

Sentenza del Tribunale nella causa T-573/23 | Positive Group / Consiglio A seguito dell’aggressione militare della Russia nei confronti dell’Ucraina nel 2022, l’Unione europea ha

set17

17/09/2025

Indagini Patrimoniali: si a Cerebro

  Il Garante privacy ha dato parere favorevole al Ministero dell’Interno sulla valutazione d’impatto (DPIA) relativa a CEREBRO: il Sistema di analisi ed elaborazione dati

set17

17/09/2025

Ordinanza ingiunzione nei confronti della società Enel Energia S.p.A. per la violazione dell’art. 98 – octies decies, del decreto legislativo 1° agosto 2003, n. 259, in combinato disposto con gli artt. 3, 4 e 8-bis, dell’allegato b alla Delibera n. 307/23

Con la delibera 195/25/Cons,l'Agcom ha  ingiunto alla società Enel Energia S.p.A.., in persona del legale rappresentante pro tempore, di versare entro 30 giorni dalla notificazione

News Giuridiche

set18

18/09/2025

L’altalena del Fine Vita tra legge e giurisprudenza

Accolti i moniti della Consulta: la legge

set18

18/09/2025

Il diritto di accesso nei contratti pubblici dopo il Correttivo

Inquadramento generale, esercizio del diritto