Mercoledì 22 maggio 2024, ore 13.00 – 14.00

Centro Nexa su Internet & Società
Politecnico di Torino, via Boggio 65/a, Torino (1° piano)

Suonare al citofono Portineria – Seguire le indicazioni lungo il percorso

(Per maggiori informazioni su come raggiungerci clicca qui)

Stanza virtuale: https://didattica.polito.it/VClass/NexaEvent

With the development of AI systems, that require immense amounts of data, personal data regulation is of strategic importance: considered as a legal matter as much as an economical field, different stakeholders are engaging actively in sometimes conflicting interpretations of what the law says, or what it should say.

An established corpus of law studies has extensively developed the matter of privacy and its translation into law as the protection of “personal data”. Its history in the European Union is one of convergence and harmonization between all member states’ legal traditions, culminating into the General Data Protection Regulation of 2016.

Another domain of research, invested by sociologists and social scientists, is that of digital labor: the production and annotation of data for AI training and correction. Work platforms, subcontractors, but also unknowing users are participating actively in all sorts of tasks that are essential to the production of AI systems. Companies such as Google, OpenAI and Meta openly admit to scraping texts, photos and videos off the internet, transforming, a posteriori, information relevant to personal data protection into personal data production.

This presentation will give a brief oversight of a different definition of regulation, understood not as what the law says, but as the resulting effective pact between all stakeholders that interpret the law and apply it a certain way. In this perspective, the actors that are central to the personal data regulation, and thus AI production in the EU, are Data Protection Authorities. There are 27 national authorities, and two european agencies that centralize them. The difficult process of agreeing on the application of the GDPR is prolonged into the sphere of AI production: how do they acknowledge the perspective of personal data protection in AI production?