Israel’s Privacy Protection Authority (PPA) has released draft guidance on the application of the Privacy Protection Law to artificial intelligence (AI) applications. The draft primarily clarifies how privacy law applies throughout the development and use of AI systems, as well as to the data they generate.
The draft sets out several key compliance expectations. It requires organizations to disclose to individuals that they are interacting with AI. Such notification must include what data is being processed in the interaction and how it is processed. Organizations are also expected to adopt a strong accountability framework by implementing Privacy-by-Design principles, appointing designated privacy officers for AI matters, conducting Privacy Impact Assessments (DPIAs), and establishing internal policies for generative AI use.
The draft sets out several key compliance expectations. It requires organizations to disclose to individuals that they are interacting with AI. Such notification must include what data is being processed in the interaction and how it is processed. Organizations are also expected to adopt a strong accountability framework by implementing Privacy-by-Design principles, appointing designated privacy officers for AI matters, conducting Privacy Impact Assessments (DPIAs), and establishing internal policies for generative AI use.
Read more...