On June 27, 2024 the European Data Protection Board (EDPB) published the results of the AI Auditing project. The objective of this project is to map, develop and pilot tools that could help the assessment of compliance of AI systems and applications with the EU General Data Protection Regulation (GDPR). Specifically, it envisions to assist in the understanding and assessment of data protection safeguards in the context of the EU AI Act.
This project was launched in the framework of the EDPB's Support Pool of Experts program, which aims to increase the Data Protection Authorities' (DPAs) enforcement capacity by developing common tools and giving them access to a wide pool of experts, and at the initiative of the Spanish DPA.
The AI Auditing project resulted in a series of deliverables which include:
- A checklist for AI auditing, which suggests an approach that can be used by EU Data Protection Authorities (DPAs) to perform audits of AI systems to assess whether the impacts of those systems are in line with existing laws, and specifically with the GDPR, trust and safety best practices and societal expectations;
- A proposal for AI leaflets, which aims to facilitate compliance of AI systems with the GDPR and the EU AI Act through the provision of accessible information and to promote transparency, auditability and recourse to those buying, implementing or being impacted by AI systems; and
- A proposal for Algo-scores in the form of a visual system (labeling) that is designed to promote transparency, accountability and consumer choice.
Albeit directed to DPAs, these deliverables could also be useful tools for organizations to guide their GDPR and EU AI Act compliance efforts. Please note however that while these documents have been commissioned by the EDPB, they do not necessarily reflect the official position of the EDPB.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.