
AI and the Law Episode 15 - Privacy in the age of generative AI
May 15, 2025
Dr. Tom West, Program Director and Legal Officer at Privacy International, dives into the pressing challenges generative AI poses to individual privacy rights. He discusses the Italian Data Protection Authority's intervention with Chat GPT and DeepSeek, analyzing GDPR's effectiveness and transparency issues. Tom draws parallels between competition law and privacy concerns, highlighting power dynamics in big tech. He also shares insights from environmental law that could inform AI regulation, advocating for impact assessments and public participation.
AI Snips
Chapters
Transcript
Episode notes
Privacy International's Global Mission
- Privacy International defends global privacy rights and challenges intrusive practices by companies and governments.
- Dr Tom West focuses on corporate exploitation, workplace surveillance, GDPR challenges, and digital health legal work.
GDPR's Elasticity Tested By Generative AI
- GDPR was drafted to be technologically neutral and can apply to generative AI, but its application is being tested by novel challenges.
- New laws like the EU AI Act may still be needed to address specific gaps as the technology and understanding evolve.
Regulators Enforce Transparency And Rights
- Italian DPA fined OpenAI for GDPR breaches including lack of lawful basis, transparency failures, age checks, and inaccuracy concerns.
- Public awareness and clearer communication are essential so people can exercise GDPR rights against AI systems.

