Data Protection Authority
EDPS has revised guidance on the use of generative AI by EU institutions, bodies, offices, and agencies.
29th October 2025
The European Data Protection Supervisor (EDPS) has published a updated guidelines on the use of generative AI and processing of personal data by EU institutions, bodies, offices, and agencies (EUIs). The update reflects the fast-moving technological landscape and the evolving challenges posed by generative AI systems.
The updated guidelines builds on feedback from EUIs and are intended to provide clearer and instructions for responsible development and deployment of generative AI.
The guidelines include, among other, an updated definition of generative AI, guidance on determining the EUIs roles and information about the lawful basis of processing and the data subjects' rights when generative AI is used.
The EDPS issues the guidelines as a data protection supervisory authority, not as a marked surveillance authority under the EU AI act.
For further information see the EDPS website.