Ireland: Data Protection Commission issued statement following Meta's introduction of additional safeguards regarding Meta AI’s processing of personal data for Large Language Model training in the EU/EEA

Description

Data Protection Commission issued statement following Meta's introduction of additional safeguards regarding Meta AI’s processing of personal data for Large Language Model training in the EU/EEA

On 21 May 2025, the Data Protection Commission (DPC) issued a statement regarding Meta AI’s processing of personal data for Large Language Model (LLM) training in the EU/EEA. Following regulatory engagement initiated in March 2024, the DPC raised concerns over Meta’s proposed use of public content from Facebook and Instagram, leading to a temporary pause in June 2024. The DPC sought an Opinion from the European Data Protection Board (EDPB), which in December 2024 established criteria for assessing GDPR compliance in AI model training. Meta subsequently revised its approach, implementing enhanced safeguards, including updated transparency notices, an improved objection mechanism, extended user notification periods, and technical measures such as data de-identification and output filtering. The DPC continues to monitor compliance, requiring Meta to submit an evaluation report by October 2025, while reminding users to review privacy settings to manage data usage.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
platform intermediary: user-generated content, ML and AI development
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2024-06-14
under investigation

On 14 June 2024, the Data Protection Commission (DPC) announced that following the dialogue with Me…

2025-05-21
under investigation

On 21 May 2025, the Data Protection Commission (DPC) issued a statement regarding Meta AI’s process…