PDPC mandates explicit notifications for using personal data in generative AI training.
Organizations using personal data to train generative AI models must now provide AI-specific notifications rather than relying on general product development clauses. The PDPC prohibits firms from denying services to users who refuse to have their data used for AI training, though no specific notification format or opt-out mechanism has been prescribed.
Why it mattersLawyers must advise clients to audit their privacy notices and potentially implement transparency tools like chatbot information cards to comply with these new PDPC requirements.