EDPB backs Global Privacy Assembly on AI imagery and privacy protection

Brussels, 23 February - EDPB Chair Anu Talus signed a Joint Statement on AI-Generated Imagery and the Protection of Privacy on behalf of the EDPB. The statement was coordinated by the Global Privacy Assembly's (GPA) International Enforcement Cooperation Working Group (IEWG). It represents the united position of 61 authorities worldwide. This reflects the Board’s commitment to contributing to the global dialogue on data protection, as outlined in the fourth pillar of its work programme 2026-2027. The statement addresses serious concerns about AI systems generating realistic images and videos of identifiable individuals without consent. While AI offers benefits, recent developments, especially AI image and video generation on social media, enable non-consensual intimate imagery, defamatory depictions, and other harmful content featuring real individuals. The co-signatories are especially concerned about potential harms to children and other vulnerable groups. These harms include cyber-bullying and/or exploitation, highlighting the critical need for protective measures in the evolving digital landscape. The co-signatories remind organisations developing and using AI content generation systems that these systems must be developed and used in compliance with applicable legal frameworks, including data protection and privacy rules. Although specific legal requirements vary by jurisdiction, fundamental principles should guide all organisations developing and using AI content generation systems. These principles include implementing robust safeguards and ensuring meaningful transparency. They also involve providing effective and accessible mechanisms to protect individuals. Furthermore, addressing specific risks to children is a crucial component of these guiding principles for AI content generation. The harms from non-consensual generation of intimate, defamatory, or harmful content depicting real individuals are significant. They warrant urgent regulatory attention from authorities worldwide. The co-signatories are committed to addressing this global risk and will join efforts. To achieve this, they aim to share information on their approaches to tackling these pressing concerns. Finally, the co-signatories call on organisations to engage proactively with regulators. They must implement robust safeguards from the outset to protect privacy and fundamental rights. Organisations must ensure that technological advancements do not come at the expense of privacy, dignity, safety, and other fundamental rights. This is especially crucial for the most vulnerable members of our global society.