The use of artificial intelligence is becoming increasingly common in professional studios, with tools like ChatGPT, Claude, and Microsoft Copilot being used to draft documents, conduct research, and analyze data.
The adoption of these technologies has raised concerns about their compliance with the General Data Protection Regulation (GDPR), and whether their use is compatible with the principles of data protection.
Initially, the debate focused on whether it was possible to use AI tools in compliance with the GDPR, but it has become clear that this is not enough, and that a more detailed approach to AI governance is needed, one that considers the broader implications of AI on data protection.
The GDPR introduced the principle of accountability, which requires organizations to demonstrate that they have taken adequate measures to protect personal data, and this principle is particularly relevant in the context of AI, as it ensures that organizations are responsible for the data they process.
The AI Act consacra una logica di governance.
Building AI governance in professional studios requires a detailed approach that takes into account the specific needs and risks of the organization, and that is based on a thorough understanding of the AI systems being used, including their capabilities and limitations.
Professional studios must identify the AI tools being used, define clear criteria for their use, and establish procedures for monitoring and controlling their use, as well as providing cybersecurity training and support for staff to ensure they are equipped to handle AI systems effectively.
Ultimately, the goal of AI governance is to ensure that AI systems are used in a way that is compatible with the principles of data protection.
The European Union’s AI Act provides a framework for achieving this goal, and organizations must develop a model of AI governance that is tailored to their specific needs and risks, and that is based on a thorough understanding of the AI systems being used.
