DEC 11, 2024 | US
BSA Managing Director Kate Goodloe Writes About 'Legitimate Interest' Exception in IAPP
IAPP
By Kate Goodloe
One key question regulators confront is why companies process personal data for AI-related activities — and if they do so for a reason recognized in their country's privacy law, such as if it is based on consent, necessary to perform a contract or if the company has a legitimate interest in the activity.
Policymakers should answer that question by recognizing legitimate interest as an important legal basis for processing personal data to train AI models and systems, which take many forms and serve a variety of purposes. When companies rely on legitimate interest to process data, they must examine the potential risks of their activities to data subjects — and then identify and implement appropriate safeguards. This approach can establish important guardrails for companies that create and use AI systems across industry sectors.
ABOUT BSA
The Business Software Alliance (www.bsa.org) is the global trade association of the enterprise software industry, representing companies that are leaders in artificial intelligence, cybersecurity, cloud computing, quantum, and other breakthrough technologies. We work in over 20 markets in the US, Europe, and Asia, advocating for policies that build trust in technology so that every industry sector and the public can benefit from innovation.