Data governance and AI: Five Data Protection Authorities Commit to Innovative and Privacy-Protecting AI
At the AI Action Summit in Paris (6-11 February 2025), the Australian, Korean, Irish, French and UK data protection authorities signed a joint declaration to reaffirm their commitment to establishing data governance that fosters innovative and privacy-protective AI.
![](/sites/cnil/files/styles/contenu_generique_visuel/public/2025-02/ai-data-governance.png?itok=N7LUEXrO)
As part of the Paris AI Action Summit, the South Korean Data Protection Authority (PIPC) and the CNIL co-organised an event in collaboration with the OECD. On that occasion, the three other authorities participating in the event, the Office of the Australian Information Commissioner (OAIC), the Information Commissioner’s Office (ICO - UK) and the Data Protection Commission (DPC - Ireland) signed a joint declaration.
Building a Reliable Governance Framework for Trusted AI
This initiative aims to promote an artificial intelligence (AI) governance framework that provides legal certainty for stakeholders and safeguards for individuals, including in terms of transparency and respect for fundamental rights.
The declaration highlights the many opportunities offered by AI in various fields such as innovation, research, economy and society. It also warns of several risks relating to personal data protection and privacy, algorithmic discrimination and bias, disinformation and AI hallucinations.
To ensure AI is compliant with current regulations, the authorities advocate incorporating data protection principles by design of AI systems, establishing robust data governance and anticipating risk management.
The statement also highlights the increasing complexity of data processing via AI in areas such as health and public services, public security or human resources and education. It also highlights the diversity of actors involved and the need for a regulatory framework adapted to technological evolutions.
Faced with the challenges posed by AI, the commitments of the authorities
In this joint declaration, the main commitments of the authorities are:
- clarify legal bases for the processing of data by AI;
- share information and establish appropriate security measures;
- monitor the technical and societal impacts of AI by involving various actors;
- encourage innovation while reducing legal uncertainty;
- strengthen cooperation with other competent authorities (consumer protection, competition, intellectual property).