EDPB creates a task force on AI enforcement

The European Data Protection Board (EDPB) announced on 12 February that the Board has extended the scope of its ChatGPT task force to AI enforcement.

EDPB Chair Anu Talus said: “The GDPR is a legal framework that promotes responsible innovation. The GDPR has been designed to maintain high data protection standards while fully leveraging the potential of innovation, such as AI, to benefit our economy. The EDPB’s task force on AI enforcement and the future quick response team will play a crucial role in ensuring this balance, coordinating the DPAs' actions and supporting them in navigating the complexities of AI while upholding strong data protection principles.”

In December 2024, Italy’s Data Protection Authority, the Garante, fined OpenAI €15 million and ordered the company to carry out a six-month information campaign via the Italian media. The Garante first investigated OpenAI in 2023. The company agreed to take corrective measures, the temporary ban was lifted, and in May 2024 the EDPB issued its Report of the work undertaken by the ChatGPT Taskforce. During this time, OpenAI set up its European headquarters in Ireland, and Ireland’s Data Protection Authority (DPC) therefore became lead supervisory authority under the GDPR One-Stop-Shop.

PL&B’s 38th International Conference. The Good, The Bad and The Good Enough, in July 2025 has several sessions discussing AI issues from the data protection angle.