EDPS publishes revised guidance on generative AI for EU institutions
The European Data Protection Supervisor (EDPS) has published a revised guidance on the use of generative artificial intelligence (AI) and the processing of personal data by EU institutions, bodies, offices, and agencies. The update reflects the rapid pace of technological change and aims to help these entities comply fully with their obligations under Regulation (EU) 2018/1725. Developed with feedback from EU institutions, the guidance provides clearer, more practical instructions for responsible AI development and deployment. It includes a refined definition of generative AI, a new compliance checklist to ensure lawful processing, clarified institutional roles and responsibilities, and detailed advice on lawful bases, purpose limitation, and the protection of individuals’ rights.