EDPS and 61 data protection authorities issue joint warning on AI-generated imagery
Data protection authorities from 61 jurisdictions, led by the European Data Protection Supervisor, have issued a joint statement highlighting privacy and child safety risks linked to AI tools capable of generating realistic images of identifiable individuals without consent.
The European Data Protection Supervisor, together with data protection and privacy authorities from 61 jurisdictions, has released a joint statement addressing the growing use of AI systems that generate realistic images and videos of identifiable individuals.
The statement focuses on tools that can create synthetic depictions without the consent of the person portrayed. According to the signatories, recent advances in generative AI, particularly when integrated into social media and online platforms, have increased the risk of non-consensual intimate imagery, defamatory representations and other forms of harmful content.
Authorities highlight that children and other vulnerable groups are especially exposed to such risks. They note that the creation and distribution of non-consensual intimate imagery may amount to a criminal offence in several jurisdictions.
The joint statement reminds organisations that AI content-generation systems must comply with applicable data protection and privacy legislation. This includes obligations relating to the lawful processing of personal data, transparency, accountability and safeguards against misuse.
The signatories call on organisations to implement technical and organisational measures to prevent abuse of personal data in AI-generated imagery. They also urge companies to ensure transparency about system capabilities and potential uses, and to provide clear and accessible mechanisms for rapid removal of harmful content. Where children are concerned, authorities stress the need for stronger protections and age-appropriate information.
The EDPS and participating authorities indicate that coordinated responses may follow, including enforcement action, policy development and public awareness initiatives. They encourage organisations developing or deploying such technologies to engage proactively with regulators and to ensure that innovation aligns with fundamental rights protections.
