The AI: Complex Algorithms and effective Data Protection Supervision project aims at helping Data Protection Authority questions regarding two aspects: the evaluation of bias in AI through tools and the effective implementation of data subjects’ rights.

The EDPB launched the project in the context of the Support Pool of Experts programme at the request of the German Federal Data Protection Authority (DPA).

Project completed by the external expert Dr. Kris SHRISHAK in March 2024.

Objective

This project helps all parties understand and assess bias and implementation of data subjects’ right in the AI context. In particular, it may help DPA by clarifying methods or tools for bias evaluation and implementation of data subjects’ rights.

The AI: Complex Algorithms and effective Data Protection Supervision project includes two deliverables:

Since the entry into force of the GDPR, data protection authorities (DPAs) have closely cooperated to adopt a growing number of one-stop-shop decisions on the right of access, as  shown  by  the  large  volume  of  decisions available in the EDPB register on this matter. The one-stop-shop case digest provides useful examples on the exercise of the right of access in various contexts, for instance in the event of fake profiles or accounts which impersonate data subjects. It summarises how DPAs interpret the different components of the  right  of  access  in  different  cases. The case digest also refers to the available guidance at EU level, and in particular, EDPB Guidelines 01/2022 on data subject rights - Right of access, adopted on 28 March 2023. Relevant cases before the Court of Justice of the EU are also mentioned.

The EDPB commissioned the one-stop-shop case digest as part of the Support Pool of Experts programme, which aims to support cooperation among DPAs by providing expertise and tools related to enforcement.

Project conducted by external expert Prof. Dr. Hanne Marie Motzfeldt and completed in November 2024.

 

Objective

Thematic one-stop-shop case digests are drafted on the basis of one-stop-shop decisions taken from the EDPB’s public register (based on Article 60 of the GDPR). Such case digests complement the EDPB's public register by selecting and presenting the most important decisions on a given theme and providing an overview and aggregate results of relevant decisions on this theme.