Cybersecurity Policy Report, Report on AI Privacy Risks Issued by EU Privacy Board, (Apr 11, 2025)
By Tony Foley
The European Data Protection Board (EDPB) has issued a report on the privacy risks associated with artificial intelligence large language models (LLMs) that it said offered a comprehensive risk management methodology for LLM systems with a number of practical mitigation measures for common privacy risks in such systems.
The report discusses how privacy risks emerge across different LLM models, outlines the criteria for identifying and classifying risks, risk treatment strategies and mitigation measures, evaluating residual risks after mitigation, and reviewing and maintaining risk management activities, among other items.
The report, developed in the context of the EDPB’s Support Pool of Experts program at the request of the Croatian data protection authority, also provides use case examples on the application of the risk management framework in the following real-world scenarios:
A virtual assistant (chatbot) for customer queries;
An LLM system for monitoring and supporting student progress; and
An AI assistant for travel and schedule maintenance.
News: InternationalLegislation DataSecurity DataPrivacy AINews