The National Data Protection Authority (ANPD) ordered the suspension of personal data processing by Meta. The goal of training the company's generative AI raises crucial questions about the limits of current legislation and the ethical use of these technologies. Furthermore, there is concern about the handling of data from over 102 million account holders in Brazil without proper compliance with the General Data Protection Law (LGPD).
The Meta case sheds light on the applicability of ANPD sanctions to any company that uses generative AI to process personal data. It is currently debated whether these measures are specific to large corporations or if they indicate a more stringent approach that could extend to other technology operators.
Since the implementation of the LGPD in September 2020, Brazilian companies have been striving to adapt to the new regulatory requirements. However, according to the Logicalis IT Trends Snapshot 2023 study, a global IT solutions and services company, only 36% stated they are fully compliant with the established standards.
In this scenario, businesses specializing in legal consulting for technology companies are seeking to understand how to ensure the responsible use of personal data without incurring similar penalties. SAFIE, a company founded in 2020 that offers legal infrastructure solutions, is one of them.Lucas Mantovani, Partner and Co-founder of SAFIEcan offer insights on how to take proactive steps to avoid regulatory risks, ensure AI practices are aligned with emerging legal standards, and comment on the future of privacy in Brazil.
Questions that can be addressed:
- What are the limits of current legislation regarding the use of personal data for AI training?
- Could what happened to Meta happen to any company or just those using generative AI?
- How can companies prevent this type of ANPD sanction?
- Is there a way to use personal data to train generative AI without breaking the law?
- What can we expect from the legislative landscape and authorities in the coming years regarding generative AI and personal data protection?
