The Centre for Democracy and Technology Europe (CDT Europe) has engaged with the French national data protection authority, Commission Nationale de l’Informatique et des Libertés (CNIL), regarding the General Data Protection Regulation's (GDPR) application to artificial intelligence systems. This engagement is part of CNIL's consultation process.

CDT Europe's submission focuses on the use of legitimate interests as a legal basis for processing personal data in AI training, including practices like web scraping. The organization emphasizes the necessity of informing individuals about how their data is used and ensuring they can exercise their rights effectively.

"CDT highlights the limits of relying on legitimate interests as the legal basis for processing personal data for the training of AI systems," states CDT Europe. They stress that protecting individual rights within the AI ecosystem is crucial, pointing out existing challenges people face in accessing information about their data processing and enforcing their rights.

For those interested in more details, CDT Europe's full submission is available online.