One of the six grounds in GDPR Article 6 that make processing of personal data lawful: consent, contract, legal obligation, vital interests, public task and legitimate interests 1. For AI, each processing moment (training, retrieval, inference, logging) needs its own basis, recorded per dataset and stage.
- Developed in
- ch. 19, Lawful basis for training versus inference
- Chapters
- ch. 19, Privacy & AI
- Source
- 1 numbered reference, listed below
Where it is used
9 chapters of the Body of Knowledge use the term. Each link opens the first section that does.
- 01 · Definition The object of governance 1 mention
- 04 · The Stack Data governance across the stack 2 mentions
- 08 · Regulatory Map EU AI Act, post-Omnibus 3 mentions
- 11 · AI Defined Responsible-AI principle sets, engineered 1 mention
- 12 · Governance Program Policies across the lifecycle 3 mentions
- 14 · Development Data for training and testing 2 mentions
- 15 · Deployment The deployment decision 3 mentions
- 16 · Fairness & XAI Protected characteristics, proxies and the data you need to test 1 mention
- 19 · Privacy & AI Opening 4 mentions
Patterns that use this term
3 pattern pages use the term, most mentions first.
- Vendor / Model Due-Diligence Gate 2 mentions
- Dataset Admission Gate 1 mention
- Deactivation, Localisation & Retirement Runbook 1 mention
Related terms
Sources
- [1] Regulation (EU) 2016/679 (General Data Protection Regulation) (Arts. 4(1), 4(5), 4(7), 4(8), 4(12), 4(14), 5, 6, 9, 12(3), 22, 25, 28(2) and 28(4), 30, 33, 35; Recital 26). Publications Office of the EU (EUR-Lex). 2016-04-27. https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng (verified: primary)
Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .