Opinion 28/2024 on certain data protection aspects related to AI models, adopted on 17 December 2024, provides guidance on the processing of personal data in the development and deployment of AI models. It clarifies when models can be considered anonymous, how legitimate interest may be used as a legal basis, and the consequences of unlawful data processing, supporting consistent GDPR application.
The OECD.AI Policy Navigator
Our policy navigator is a living repository from more than 80 jurisdictions and organisations. Use the filters to browse initiatives and find what you are looking for.
Opinion 28/2024 on certain data protection aspects related to AI models
-
National contact point
06 May 2026
OECD analyst
06 May 2026
About the policy initiative
Category:
- AI Policy Frameworks and Initiatives (intergovernmental or supranational)
Initiative type:
- Guidance/guidelines
Status:
- Active
Start Year:
- 2024
Target Sectors:
OECD AI Principles:
- 1.1 Inclusive growth, sustainable development and well-being
- 1.3 Transparency and explainability
- 1.5 Accountability
- 2.2 Fostering an inclusive AI-enabling ecosystem
- 2.3 Shaping an enabling interoperable governance and policy environment for AI
- 2.4 Building human capacity and preparing for labour market transformation
Other relevant urls:
—Official PDF:
European High Performance Computing Joint Undertaking (EuroHPC JU)
The European High Performance Computing Joint Undertaking (EuroHPC JU) is a joint initiative between the European Union, participating European countries and private partners. Its goal is to develop a world‑class supercomputing ecosystem in Europe by providing access to supercomputers, quantum computers, AI factories and research and innovation projects, implemented through coordinated infrastructure deployment, access calls and collaborative programmes.
Start year: 2026
Country/Organisation: European Union
Model Contractual Clauses for the Public Procurement of Non-High-Risk AI (MCC-AI-Light)
The MCC-AI-Light (Model Contractual Clauses for Non-High-Risk AI) is a working document published in February 2025 by the European Commission to support public administrations in procuring non-high-risk AI solutions.
Start year: 2025
Country/Organisation: European Union
European Health Data Space Regulation (EHDS)
The European Health Data Space (EHDS) Regulation, establishes a common EU framework for the use and exchange of electronic health data. Overseen by the European Commission, it covers both primary use, empowering patients to access and share their data across borders, and secondary use for research, innovation, and policy. Key priorities include interoperability, data protection, and a single market for electronic health record systems.
Start year: 2025
Country/Organisation: European Union
InvestAI
InvestAI is a European Commission initiative launched in 2025 to mobilise €200 billion of investment in artificial intelligence, including a new €20 billion European fund to finance AI gigafactories that provide large‑scale computing infrastructure for training very large AI models.
Start year: 2025
Country/Organisation: European Union
Artificial Intelligence Act (AI ACT)
The AI Act is the first-ever legal framework on AI. It seeks to address the risks of AI and position Europe to play a leading role globally. The Code of Practice helps industry comply with the AI Act legal obligations on safety, transparency and copyright of general-purpose AI models.
Start year: 2024
Country/Organisation: European Union
AI Innovation Package to Support Atificial Intelligence Startups and SMEs
The Commission has launched a package of measures to support European startups and SMEs in the development of trustworthy Artificial Intelligence (AI) that respects EU values and rules. The package comprises a broad range of measures to support AI startups and innovation, including a proposal to provide privileged access to supercomputers to AI startups and the broader innovation community. It also includes the decision to establish an AI Office within the Commis
Start year: 2024
Country/Organisation: European Union
European Data Governance Act (DGA)
The Data Governance Act aims to make more data available and facilitate data sharing across sectors and EU countries in order to leverage the potential of data for the benefit of European citizens and businesses.
Start year: 2023
Country/Organisation: European Union
Cedefop’s AI skills survey
Cedefop’s AI skills survey (2024) is an initiative examining the impact of artificial intelligence on jobs, skills and workplaces across EU Member States. Conducted between February and May 2024, it collects data from adult workers to map AI use, assess skill gaps and analyse labour market effects. The aim is to support policies promoting upskilling, reskilling and AI literacy in response to technological transformation.
Start year: 2023
Country/Organisation: European Union
European Centre for Algorithmic Transparency
The European Centre for Algorithmic Transparency (ECAT) contributes with scientific and technical expertise to the European Commission's exclusive supervisory and enforcement role of the systemic obligations on Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs) provided for under the Digital Services Act.
Start year: 2023
Country/Organisation: European Union