Dunno if anyone can point me to an IP lawyer, or if this is a currently-theoretical-only question: According to GDPR, can a company/individual demand that an AI company provide them with a list of all ingested data, and confirm that it has been purged (my knowledge of how AI works tells me this isn't possible without rebuilding a model). If this is the case, I suspect we're going to see a LOT of AI companies hit by class actions in the EU by rights holders shortly, because what AI does is...
literally "processing" data (under GDPR), and so companies have to prove that they aren't using data beyond the intended purpose (by definition coloring 99% of current AI model building as illegal) and can delete the data (which is impossible without them throwing away billions of dollars of models)
@adanufgail A recent example that might interest is X suspending it's Grok AI training due to exchanges with the Irish data protection commission that they sit under https://www.dataprotectionreport.com/2024/08/recent-regulatory-developments-in-training-artificial-intelligence-ai-models-under-the-gdpr/