In this contribution we address the privacy concerns posed by the transfer of personal data in the use of Large Language Models (LLMs). In the first section we highlight the weaknesses of the current legal framework, provided by the “EU-US Data Privacy Framework”, with a brief analysis of the ECJ rulings “Schrems I” and Schrems II”, which affected both the legal framework established by the “Safe Harbour Privacy Principles” and the “Privacy Shield”. In the second section we offer a comparative overview of relevant decisions issued by EU national data protection authorities to assess how the EU legal framework is applied across different Member States, with a focus on those decision related to “Google Analytics”. In the third section we address LLMs and GDPR. At the end of the contribution, we detect open questions and potential paths for future research.
PRIVACY CONCERNS IN INTERNATIONAL DATA TRANSFER AND LLM
Costantini F.;
2025-01-01
Abstract
In this contribution we address the privacy concerns posed by the transfer of personal data in the use of Large Language Models (LLMs). In the first section we highlight the weaknesses of the current legal framework, provided by the “EU-US Data Privacy Framework”, with a brief analysis of the ECJ rulings “Schrems I” and Schrems II”, which affected both the legal framework established by the “Safe Harbour Privacy Principles” and the “Privacy Shield”. In the second section we offer a comparative overview of relevant decisions issued by EU national data protection authorities to assess how the EU legal framework is applied across different Member States, with a focus on those decision related to “Google Analytics”. In the third section we address LLMs and GDPR. At the end of the contribution, we detect open questions and potential paths for future research.I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.
