EU regulators have launched an investigation into Google’s AI model, PaLM2, over concerns about potential violations of the bloc’s strict data privacy rules. Ireland’s Data Protection Commission is examining whether the AI system poses a “high risk” to the rights and freedoms of individuals under GDPR, marking another step in the EU’s heightened scrutiny of AI technologies.
Google’s AI model, PaLM2, has come under investigation by European Union regulators over concerns related to the bloc’s stringent data privacy rules. Ireland’s Data Protection Commission (DPC) announced it has opened an inquiry to assess whether the model’s data processing poses a “high risk to the rights and freedoms of individuals” within the EU, in line with the General Data Protection Regulation (GDPR).
The DPC, acting as Google’s lead regulator in the EU due to its European headquarters in Dublin, is focusing on how the AI model handles personal data. PaLM2, a large language model, powers various Google services, such as email summarisation. According to the commission, they are specifically investigating whether Google has adequately assessed the risks posed by the model’s data processing activities.
Google responded, stating, “We take seriously our obligations under the GDPR and will work constructively with the DPC to answer their questions.”
This investigation is part of a broader EU-wide effort to scrutinise AI systems and their compliance with data protection laws. Other tech giants have also faced scrutiny in recent months. Elon Musk’s platform, X (formerly Twitter), was ordered by the Irish regulator to cease processing user data for its AI chatbot, Grok, following legal action. Additionally, Meta halted plans to use content from European users to train its large language model after “intensive engagement” with the Irish regulator.
EU regulators have been increasingly vigilant regarding AI’s impact on privacy. In 2023, Italy’s data protection authority temporarily banned OpenAI’s ChatGPT over data privacy breaches, requiring the company to meet specific demands to reinstate the service.
As the EU strengthens its oversight of AI technologies, companies like Google are under growing pressure to ensure that their AI models comply with GDPR requirements and protect user privacy.