Data Rights at Machine Speed: Navigating DSARs in the AI Era

AI tools have triggered a significant shift in how individuals exercise their rights under the GDPR. DPOs and privacy teams receive broad Data Subject Access Requests generated at scale by AI tools.

This new reality presents operational challenges, requiring privacy functions to fulfill their legal obligations while efficiently managing unprecedented demands and operational strain. This session offers a practical compass for that judgment call.

Panelists will examine the challenges privacy teams face when confronted with AI-driven requests. The discussion will unpack the legal validity of excessive and unclear DSARs under EU case law and EDPB guidelines.

Finally, the session will focus on concrete solutions for managing this influx while adhering to DSARs under the GDPR. 

What you will learn:

• How to evaluate the legal validity of AI-generated DSARs under the GDPR and avoid the common pitfall of treating volume or tone as a shortcut to refusal.
• When an AI-generated DSAR could be considered manifestly unfounded or excessive, and just as importantly, when it clearly is not.
• Practical strategies and operational workflows to manage administrative burdens without compromising compliance with data subject rights.

Sponsored by Uber