ICO Publishes Report on Data Protection Compliance of Generative AI Foundation Model and Calls for Evidence

ICO Publishes Report on Data Protection Compliance of Generative AI Foundation Model and Calls for Evidence

The UK Information Commissioner’s Office concluded that generative AI developers generally lack sufficient transparency regarding personal data usage in training. Regulators emphasize that algorithmic complexity does not excuse noncompliance, urging firms to clearly explain data collection and processing methods to ensure individuals are adequately informed. Significant weaknesses remain in assessing legitimate interests and fulfilling data subject rights. Because training datasets often obscure individual identities, developers struggle to process requests effectively. Consequently, the ICO mandates more accessible privacy notices and robust mechanisms for tracking rights exercises, holding organizations accountable for avoidable harms arising from poor data governance practices. This supervision highlights the urgent need for improved open data standards in AI development. By exposing current transparency gaps, the report provides a benchmark for ethical data handling. It signals that future regulatory scrutiny will extend to agentic AI, making clear, accessible data practices essential for maintaining public trust and legal compliance in emerging technologies.

Source: natlawreview.com
Published on 2026-10-23