Artificial Intelligence and the Challenges of Personal Data Protection Rules with a Control Approach; Alternative Legal Regime

Document Type : Original Article

Author
Seyed Ali Hosseini
PhD Candidate, Public Law, Imam Sadiq University, Tehran, Iran
Abstract
Artificial intelligence is built on technologies such as machine learning and deep learning neural networks, whose performance relies on a vast amount of high-quality data. Personal data is an indispensable resource for the development of artificial intelligence and the improvement of the efficiency of AI algorithms. Personal data is attributed to individuals and part of an individual's rights and obligations in the analog space can, depending on the case, have a close connection with its proper processing, which ensures the benefits for the data subject and prevents harm against them. Before the advent of artificial intelligence, the volume of personal data processing was relatively small and limited compared to AI; thus, the General Data Protection Regulations (2016) has mandated duties for each instance of personal data processing for the controller and has also determined rights for the data subject regarding each instance of personal data processing. However, considering the technical nature of artificial intelligence, the application of these rules to the algorithmic processing of personal data is fraught with difficulties. This article examines the challenges of the GDPR in protecting personal data under the processing of AI systems and analyzes legislative solutions for protecting personal data in the field of artificial intelligence. The major question of this article is, what is the legislative solution to overcome the challenge of personal data protection in algorithmic processes? This research is conducted using a descriptive-analytical method.
Keywords
Artificial Intelligence
Personal Data
GDPR
Fundamental Rights
Data Processing

  1. انصاری، باقر ( 1400). حقوق داده‌ها و هوش مصنوعی، تهران: سهامی انتشار.

    انصاری، باقر (1402). اصول پردازش داده‌های شخصی، تهران: سهامی انتشار.

    کیسینجر، هنری، اشمیت، اریک و هوتنلوچر، دانیل (1401). عصر هوش مصنوعی و آینده ما انسان‌ها، ترجمه علی پناهی، تهران: ذهن‌آویز.

    گرجی، علی‌اکبر (1383). مبنا و مفهوم حقوق بنیادین، حقوق اساسی، 2 (2).

    ورابک، هلنا یو (1402). حقوق موضوع داده تحت مقررات عمومی حفاظت از اطلاعات اروپا، ترجمه حسین صادقی و دیگران، تهران: حقوق‌یار.

    وکیلیان، حسن (1402). قانون‌گذاری خوب؛ مبانی، شاخص‌ها و ابعاد، تهران: مرکز پژوهش‌های اتاق ایران.

    Alexy, Robert (2010). A Theory of Constitutional Rights translate Julian Rivers, Oxford University Press.

    Allen, J. G. (2022). AGENCY AND LIABILITY. In Artificial Intelligence. Cheltenham, UK: Edward Elgar Publishing. Retrieved Jun 19, 2024, from https://www.elgaronline.com/view/edcoll/9781800371712/9781800371712.00020.xml.

    Church, P., & Cumbley, R. (2022). "Chapter 10: DATA AND DATA PROTECTION". In Artificial Intelligence. Cheltenham, UK: Edward Elgar Publishing. Retrieved Jun 18, 2024, from https://www.elgaronline.com/view/edcoll/9781800371712/9781800371712.00021.xml.

    Ciriani, Stephane, The Economic Impact of the European Reform of Data Protection (March 31, 2015). COMMUNICATIONS & STRATEGIES, no.97, 1st quarter 2015, Available at SSRN: https://ssrn.com/abstract=2674010.

    Clérico, Laura (2018) Proportionality in Social Rights Adjudication; Making It Workable, In Proportionality in Law; an Analytical Perspective, Springer International.

    Ding, Z., Zhou, Y., & Zhou, M. (2014). Modeling Self-Adaptive Software Systems With Learning Petri Nets. IEEE Transactions on Systems, Man, and Cybernetics: Systems, 46. https://doi.org/10.1145/2591062.2591113.

    Dogouli, Athanasia (2023). Examining Artificial Intelligence through the scope of the GDPR, Information Law Journal.

    DOI:10.1007/978-3-030-58951-6_36.

    European Parliament, Directorate-General for Parliamentary Research Services, Lagioia, F., Sartor, G. (2020). The impact of the general data protection regulation on artificial intelligence, (G.Sartor,edito) Publications Office. https://data.europa.eu/doi/10.2861/293.

    Kerrigan, C. (2022). INTRODUCTORY ESSAY. In Artificial Intelligence. Cheltenham, UK: Edward Elgar Publishing. Retrieved Jun 19, 2024, from https://www.elgaronline.com/view/edcoll/9781800371712/9781800371712.00011.xml.

    Kutyłowski, M., Lauks-Dutka, A., & Yung, M. (2020). Challenges for Reconciling Legal Rules with Technical Reality. European Symposium on Research in Computer Security.

    Nivel, E., & Thórisson, K. (2009). Self-Programming: Operationalizing Autonomy. https://doi.org/10.2991/AGI.2009.45.

    Petrin, M. (2022). CORPORATE GOVERNANCE". In Artificial Intelligence. Cheltenham, UK: Edward Elgar Publishing. Retrieved Jun 19, 2024, from https://www.elgaronline.com/view/edcoll/9781800371712/9781800371712.00016.xml.

    Purtova, N. (2011). Property rights in personal data: a European perspective. Kluwer Law International.

    Rab, S. (2022). Telecoms and Connectivity. In Artificial Intelligence. Cheltenham, UK: Edward Elgar Publishing. Retrieved Jun 19, 2024, from https://www.elgaronline.com/view/edcoll/9781800371712/9781800371712.00031.xml.

    Robert Alexy (2005) Balancing, constitutional review and representation, International Journal of Constitutional Law, Volume 3, Issue 4.

    1. Venkataramani et al.,(2020) "Efficient AI System Design With Cross-Layer Approximate Computing," in Proceedings of the IEEE, vol. 108, no. 12, doi: 10.1109/JPROC.2020.3029453

    Schwartz, Paul M. (2005) Property, Privacy, and Personal Data. Harvard Law Review, Available at SSRN: https://ssrn.com/abstract=721642 .

    Srinivasan, R., & Chander, A. (2021). Biases in AI Systems. Queue, 19.

    Sunstein, Cass R. (2005) Laws of Fear: Beyond the Precautionary Principle, Cambridge University Press.

    Trusilo, D. (2023). Autonomous AI Systems in Conflict: Emergent Behavior and Its Impact on Predictability and Reliability. Journal of Military Ethics, 22. https://doi.org/10.1080/15027570.2023.2213985.

    Solove, D. J. (2006). A Taxonomy of Privacy. University of Pennsylvania Law Review, 154(3), 477–564.https://doi.org/10.2307/40041279

    Gentili, Aurelio (2020), 'Fundamental Rights as a Part of Contract Law', European Business Law Review, Volume, 31 Issue 3, https://kluwerlawonline.com/journalarticle/European+Business+Law+Review/31.3/EULR2020021

     (EU) 2016/679. General Data Protection Regulation. Retrieved from: https://gdpr-info.eu/

    Meurisch, Christian ; Mühlhäuser, Max (2021). Data Protection in AI Services: A Survey. A Survey. ACM Computing Surveys, 54(2), 40:1-40:38.

    COM/2021/206 final, Artificial Intelligence Act (AI Act), Retrieved from

    https://ai-act-law.eu/

    European Union. (2012). Charter of Fundamental Rights of the European Union: Retrieved from: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:C2012/326/02

    BVerfG, Order of the First Senate of 15 December 1983 - 1 BvR 209/83 -, paras. 1-214, Retrieved from:

    https://www.bundesverfassungsgericht.de/SharedDocs/Entscheidungen/EN/1983/12/rs19831215_1bvr020983en.html

    Bureau of Economic Analysis, (2022), Retrieved from:

     https://www.bea.gov/system/files/2022-11/new-and-revised-statistics-of-the-us-digital-economy-2005-2021.pdf

    (EU) 2016/679 , General Data Protection Regulation, Retrieved from:

    https://gdpr-info.eu/