The Information Commissioner joins the joint efforts of the supervisory authorities of the European Union to protect the fundamental rights and freedoms of individuals when using tools based on generative artificial intelligence (such as ChatGPT, DALL-E, Google Gemini, DeepSeek, etc.). As part of the coordinated cooperation, the Information Commissioner will examine whether there are circumstances that require the introduction of inspection procedures against providers of such artificial intelligence systems, including providers in Slovenia.
At its plenary session on 11 February 2025, the European Data Protection Board (EDPB) reiterated the need for cooperation and coordination between supervisory authorities in the supervision procedures of providers of artificial intelligence systems and decided to cooperate within the framework of a working group on the supervision of AI systems in order to intervene quickly in sensitive cases.
The Information Commissioner, as part of the EDPB, is closely monitoring technological developments in the field of generative artificial intelligence and the responses of the European and wider international community to them. As the size and complexity of large language models increase exponentially, so too do their capabilities. Introducing such solutions without careful consideration of how these artificial intelligence systems affect individuals and society as a whole can have far-reaching consequences.
The Information Commissioner is particularly attentive to the impacts of (generative) artificial intelligence on vulnerable groups; in addition to children, this includes the elderly, who, on the one hand, are more often unaware of the risks of such technologies, and at the same time, their dependence on them in performing everyday tasks can result in some elderly people being deprived of access to certain services (for example, when a personal conversation is replaced by a chatbot or chatbot), either because they do not know how to use such technologies at all or simply do not trust them.
Individuals are advised to use such tools based on generative artificial intelligence with caution and responsibility. It is important to be aware that the providers of these, although attractive, tools often process personal data in third countries, i.e. outside the EU, where much lower standards of personal data protection may apply. Therefore, IP recommends using services that are committed to respecting the General Data Protection Regulation. Also, before providing their personal data, the user should think very carefully about whether the tool really needs their personal data and should share it as little as possible. We must be particularly careful when disclosing sensitive data (for example, data on health status, political or religious affiliation, etc.).
Before disclosing your personal data, for example by asking a question to an artificial intelligence (so-called prompt ), ask yourself whether your personal data will be used to further train the model and how you can exercise your rights, especially the right to erasure. Companies usually provide this information in their Privacy Policy and Terms of Use or Terms of Service.