Andreas Lewald

A growing number of companies are using AI chatbots to provide customers with quick and uncomplicated support with product questions. This raises the question of how such a system can be operated in compliance with data protection regulations and what requirements arise from the AI Regulation (KI-VO). A typical application scenario is an AI-enhanced FAQ chatbot, for example, which is obtained from appropriately specialised software providers to answer frequently asked questions on a website automatically and, improved by AI, in an increasingly targeted manner.

The Swedish Data Protection Inspectorate has imposed a fine of SEK 13 million on Bonnier AB.

In view of the progressive use of artificial intelligence (hereinafter "AI"), in particular generative AI such as ChatGPT, the French supervisory authority CNIL published an action plan for the authority's handling of AI systems on 16 May 2023.

On Thursday, May 4 2023, the ECJ handed down three judgements relevant to data protection law. The article provides an overview of the respective proceedings, the decisions and potential effects. The indicated marginal numbers refer to the respective judgement.

The waves are running high: No more legal basis for processing personal data in the employment relationship? In its ruling of 30 March 2023 (C-34/21), the ECJ declared Section 23(1) sentence 1 of the Hessian Data Protection and Freedom of Information Act (HDSIG) and Section 86(4) of the Hessian Civil Service Act (HBG) to be incompatible with Article 88(1) and (2) of the GDPR.