Data protection is a fundamental right under EU law and is governed by the General Data Protection Directive (GDPR), and the Law Enforcement Directive. GDPR protects individuals' fundamental rights in the digital age and facilitates business by clarifying rules for companies and public bodies in the digital single market. A single law across the EU, reduces the fragmentation in approach providing for consistency in application.
The Artificial Intelligence Regulation (AI Act) sets out a set of risk-based rules for AI developers and deployers regarding specific uses of AI and is part of a wider package of EU policy measures to support development of AI.
In December 2024, the European Data Protection Board (EDPB) issued an opinion in relation to using personal data for AI training purposes. Ireland’s Data Protection Commission took the lead in seeking this opinion from the EDPB and thereby provide greater certainty to industry.
Ireland will continue to work within the EU regulatory framework to seek the right balance in promoting innovation while providing the necessary protections for fundamental rights.