France’s Commission Nationale de l’Informatique et des Libertés (CNIL) has published a new set of recommendations on the use of legitimate interest as a legal basis under the GDPR for training AI technologies with personal data, particularly in the context of web scraping. These recommendations follow the opinion issued by the European Data Protection Board (EDPB) in December 2024, which acknowledged that legitimate interest may serve as a valid legal basis for this type of processing, provided certain conditions are met. The CNIL’s guidance aims to clarify these conditions further, providing practical examples of appropriate safeguards and highlighting specific circumstances in which legitimate interest may be applicable.
Click here for the official article/release
Disclaimer
The Legal Wire takes all necessary precautions to ensure that the materials, information, and documents on its website, including but not limited to articles, newsletters, reports, and blogs (“Materials”), are accurate and complete. Nevertheless, these Materials are intended solely for general informational purposes and do not constitute legal advice. They may not necessarily reflect the current laws or regulations. The Materials should not be interpreted as legal advice on any specific matter. Furthermore, the content and interpretation of the Materials and the laws discussed within are subject to change.
