• The Croatian Personal Data Protection Agency (AZOP) published a document ‘Personal Data Protection and Artificial Intelligence’ covering the entire lifecycle of AI systems.
  • The guidelines emphasize that privacy protection is not an obstacle to technological progress but a necessary prerequisite for human-centric systems.
  • The document addresses the definition of roles of data controllers and processors, legal bases, and the principles of data protection by design and by default.
  • The guidelines analyze risks associated with large language models, attacks on AI systems, and privacy-enhancing technologies.
  • The document references the AI Act and highlights the importance of data protection impact assessments.