AI Training Lawfulness

Lawful Basis for AI Training Data

Overview

The processing of personal data for AI model training constitutes a distinct processing operation requiring its own lawful basis under GDPR Art. 6(1). The EDPB Guidelines 04/2025 and the coordinated ChatGPT Taskforce findings establish that AI training creates unique lawful basis challenges: the scale of data collection, the difficulty of obtaining meaningful consent for open-ended AI training purposes, the tension between legitimate interest and data subject expectations, and the complexity of determining lawfulness for web-scraped and third-party datasets. This skill provides the comprehensive lawful basis assessment framework for AI training data processing, addressing each Art. 6(1) basis as applied to ML training contexts.

Fundamental Principles

AI Training as Personal Data Processing

The EDPB has confirmed that AI model training constitutes processing of personal data under Art. 4(2) GDPR when:

1. Training datasets contain personal data (directly or indirectly identifiable natural persons)
2. The model is trained on data that includes personal data, even if the intent is to learn general patterns
3. The resulting model retains the capability to generate or reproduce personal data from training sets
4. Personal data is used in any pipeline stage: collection, cleaning, annotation, augmentation, validation, testing

The controller cannot avoid GDPR obligations by claiming the model has "learned" rather than "stored" personal data. The processing occurs at the point of training, regardless of whether the model can later reproduce specific records.

Purpose Specification for AI Training

Art. 5(1)(b) requires that personal data be collected for specified, explicit, and legitimate purposes. For AI training, this means:

• "Training an AI model" is insufficiently specific — the controller must articulate the specific capability being developed
• "Improving our services" through AI training must be disaggregated into concrete purposes
• Each purpose must be documented before training begins, not retroactively justified
• The purpose must be communicated to data subjects in privacy notices per Arts. 13-14

Lawful Basis Analysis for AI Training

Art. 6(1)(a) — Consent

Requirements for Valid AI Training Consent

Consent Challenges in AI Training

1. Granularity problem: AI training often uses all available data — difficult to obtain specific consent for each data element's use in training
2. Withdrawal complexity: Once a model is trained on personal data, true erasure requires model retraining or verified machine unlearning
3. Purpose evolution: Foundation models and transfer learning mean the model may be repurposed — original consent may not cover downstream uses
4. Scale impracticality: Obtaining consent from millions of data subjects whose data appears in web-scraped training corpora is practically impossible
5. Power imbalance: When AI service use requires consent to training (e.g., "use our AI assistant and your conversations train our model"), consent may not be freely given

When Consent Works for AI Training

• Users explicitly opt into a research programme where AI model training is a primary purpose
• Users contribute data to a specific AI system with clear disclosure (e.g., "your feedback trains this recommendation engine")
• Fine-tuning on user-provided data where the user understands and consents to the training purpose

Art. 6(1)(b) — Contract Necessity

AI training can rely on contractual necessity only when:

• The AI model training is genuinely necessary for performing the contract with the data subject
• The data subject has entered into a contract that requires AI-powered features
• The training cannot be separated from the service delivery

Limitations per EDPB:

• General improvement of AI systems through aggregate training is not "necessary" for any individual contract
• Training a general-purpose model that benefits future users is not necessary for the current data subject's contract
• Fine-tuning based on individual user interactions may qualify if the personalised model is part of the contracted service

Art. 6(1)(f) — Legitimate Interest

This is the most commonly relied-upon basis for AI training. The EDPB requires a rigorous three-part assessment:

Part 1: Legitimate Interest Identification

The controller must identify a specific, real, and lawful interest:

Part 2: Necessity Assessment

Part 3: Balancing Test

Factors weighing in favour of the controller:

• Training data is publicly available (but this alone is not decisive)
• Model serves a beneficial purpose (fraud prevention, medical research)
• Strong technical safeguards applied (differential privacy, access controls)
• Data subjects can exercise opt-out rights effectively
• Training data is pseudonymised before use

Factors weighing in favour of data subjects:

• Data was not collected with AI training in mind — processing is far from original expectations
• Large-scale data collection from diverse sources without data subjects' awareness
• Special category data is present or can be inferred from training data
• Children's data is present in the training corpus
• No practical opt-out mechanism exists
• Model may memorize and regurgitate personal data
• Web scraping bypasses data subjects' choices about data sharing

EDPB Position on Legitimate Interest for AI Training

The EDPB Guidelines 04/2025 establish that:

1. Legitimate interest for AI training is not automatically available — it requires case-by-case assessment
2. Web scraping of personal data for AI training faces a particularly high bar
3. The scale of data collection is a relevant factor — larger datasets require stronger justification
4. The controller must demonstrate necessity: evidence that personal data is required rather than anonymised or synthetic alternatives
5. Effective opt-out mechanisms are expected as a minimum safeguard
6. The balancing test should consider the cumulative impact of multiple AI developers scraping and training on the same data subjects' data