What happened
The Iberoamerican Data Protection Network (RIPD) unanimously approved a set of international standards detailing how data protection rules apply to AI systems. The standards require transparency, lawful bases for using public data in AI training, and grant individuals rights to know and contest AI-driven decisions.
Why it matters for trust and compliance
- Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
- The new standards provide a risk‑based framework for applying data‑protection principles to AI, influencing regulators, legislators and companies across Iberoamerica.
Who is affected
controller processor data broker platform developer deployer
Recommended actions
- Check that privacy notices describe the practices this addresses.
- Revisit retention schedules and data minimisation for the data involved.
- Inventory AI or automated decision systems in scope and their assessments.
- Confirm handling of sensitive data categories meets the stricter rules.