Cybersecurity Policy Report, Use of AI to Write Privacy Complaints Discouraged by Dutch DPA, (Sep 22, 2025)

By Tony Foley

Citing an uptick in complaints and inquiries that have been fully or partially prepared with the help of artificial intelligence tools, Datatilsynet, the Danish data protection authority, has cautioned citizens and businesses regarding issues related to the use of AI in this context.

In a news release today, Datatilsynet acknowledged that, for some, it can be helpful to let an AI tool prepare a complaint, often as support in formulating a complaint that otherwise might be abandoned because it seems unmanageable. However, the agency said, it is important to be aware that the use of AI tools can also present challenges.

Specifically, Datatilsynet said the use of AI tools presented a risk that personal data might be shared unintentionally. These tools work in a manner where the user’s information is processed to provide the requested service, but Datatilsynet added that it could be processed for the provider’s own purposes, including to further develop its AI tool. Accordingly, the agency said, individuals and businesses may end up sharing health information, civil registration numbers, information about an individual’s children, and other data with the AI tool provider. In creating a prompt, Datatilsynet said, information can become part of the AI tool’s dataset and in some cases included in responses to other users.

Datatilsynet further found that AI-generated complaints often tend to distort the content of the complaint, making mistakes and unnecessarily complicating both the facts of the case and the associated law. This may result in an answer that looks convincing and correct, but that, in fact, is neither. In cases where complainants are in doubt about the rules or their rights, they are often better off in contacting Datatilsynet directly.

Another issue identified by Datatilsynet is that some complainants have used AI tools to predict the outcome of their cases, giving them a biased opinion on how their cases will be assessed before they have actually been considered. The agency emphasized that AI tools cannot predict its decisions, which are always based on a concrete and professional assessment of the individual circumstances.

Datatilsynet recommended that businesses and individuals always formulate a complaint in their own words and describe what the complaint is about. If the agency is in doubt with respect to the substance of a complaint, it will reach out in writing or by phone for clarification. If a complainant chooses to use an AI tool, Datatilsynet said they should avoid entering confidential and sensitive personal data and other information they do not wish to be shared with or disclosed to the AI tool provider. Finally, the agency cautions that, even for tools that offer an opt out of information being collected for further training of the tool, in some cases, the provider may still collect, process, and disclose information about personal matters.

News: InternationalLegislation DataPrivacy AINews