AI Myths, Debunked by the ICO

January 28, 2025

By Olena Nechyporuk

AI Myths, Debunked by the ICO

The ICO has published a list of the most pertinent AI Myths:

#1: People have no control over their personal data being used to train AI

People absolutely have a right to object to how their data is being used, and to file a complaint with their data protection authority.

#2: AI developers can use people’s data without being transparent about it

Any company aiming to use people's data to train their AI models MUST be transparent about this.

#3: Data protection doesn’t apply if AI developers did not intend to process people’s personal data

The law applies in all circumstances, and no AI model is exempt from the law - any personal data must be used lawfully.

#4: AI models themselves do not come with data protection risks

Some AI models do contain and store personal data; it has been identified that some models also make it possible to identify individuals via the personal data they have access to.

#5: AI development should be exempt from the law

There is no reason for AI to have 'sweeping exemptions' - data protection applies in all instances.

#6: Existing regulation is not fit for cutting-edge tech like AI

Data protection laws enable AI models to be built correctly - with a view of incorporating people's privacy from the beginning. Organisations need to make sure their product is safe and all the possible risk mitigated.

Read more