In an era of increasingly powerful AI systems, the question arises as to whether artificial intelligence might render the role of the data protection officer obsolete. After all, at least at first glance, it appears to be a suitable advisory tool for data protection issues and even seems capable of training employees on the handling of personal data.
However, the response of the law is unequivocal: The GDPR requires that the appointment of the data protection officer must be made \u201con the basis of professional qualifications and, in particular, expertise in the field of data protection law and data protection practices.\u201d This, together with the specific wording of art.\u00a038 (\u201cto maintain\u00a0his or her\u00a0expert knowledge\u201d), implies that the expertise of a natural person is required.
Even aside from the clear wording of the GDPR, the AI Act imposes strict documentation and monitoring obligations in the theoretical case of deploying an autonomous \u201cAI DPO\u201d. In the end, such an AI system would in turn be subject to the requirement for human oversight, meaning that the role of the data protection officer could not be eliminated, after all.
In general, it can be said that an AI tool certainly has the potential to make the data protection officer\u2019s work more effective. However, human oversight remains indispensable, both legally and in practice.
An AI tool cannot, therefore, be used to circumvent the obligation to appoint a data protection officer. In the end, fines can be (and have already been) imposed for non-compliance.<\/p>\n\n\n\n
Dr. Lukas Mezger (Unverzagt Law)<\/p>\n","protected":false},"excerpt":{"rendered":"
In an era of increasingly powerful AI systems, the question arises as to whether artificial intelligence might render the role of the<\/p>\n