Desafíos actuales de la Inteligencia Artificial

70 Desafíos actuales de la Inteligencia Artificial 5. CONCLUSIONS This contribution argues that, beyond the recent hype around generative AI and the adoption of the AI Act, AI systems have long been subject to important legal limitations. This has been the case in France and across Europe. Given the centrality of (personal) data for the development and use of AI systems, data protection rules have been instrumental in regulating them. As discussed here, national data protection authorities such as France’s CNIL have been playing a major role in regulating al- gorithmic practices. Under the AI Act, their competence will be expanded but more resourc- es are probably needed for effective enforcement. In addition, competition and copyright laws have also, and will continue to substantially impact the development and use of AI systems. Yet, regulatory gaps remain and are sometimes filled by courts. In France, the Conseil con- stitutionnel has even applied the Declaration of the Rights of Man and of the Citizen of 1789 to fill such a gap. Establishing a constitutional right to access administrative documents, the court specified how universities must reveal the criteria and potential algorithmic methods used to evaluate student applications. 67 Despite the enthusiasm around the AI Act, legislation is therefore not a panacea but must sometimes be complemented by constitutional rules and principles. 6. REFERENCES AUTORITEIT PERSOONSGEGEVENS, “Dutch DPA imposes a fine of 290 million euro on Uber because of transfers of drivers’ data to the US”, 26 August 2024, https://www. autoriteitpersoonsgegevens.nl/en/current/dutch-dpa-imposes-a-fine-of-290-million-euro- on-uber-because-of-transfers-of-drivers-data-to-the-us . AUTORITEIT PERSOONSGEGEVENS, “AP: scraping bijna altijd illegaal”, 1 May 2024, https://autoriteitpersoonsgegevens.nl/actueel/ap-scraping-bijna-altijd-illegaal. AUTORITE DE LA CONCURRENCE, “Avis 24-A-05 du 28 juin 2024 relatif au fonc- tionnement concurrentiel du secteur de l’intelligence artificielle générative”, https://www. autoritedelaconcurrence.fr/sites/default/files/integral_texts/2024-06/avisIA.pdf . rules applicable to ChatGPT. Its mandate included the exchange of information, the coordination of external communication by different data protection authorities in their enforcement activities, and the identification of issues for which a common approach is needed in the context of their different enforcement actions regarding ChatGPT. This taskforce published a report in May 2024, which also mentioned the significant importance of providing further guidance on the interactions between the GDPR and the AI Act (EDPB, “Report of the work undertaken by the ChatGPT Taskforce”, 23 May 2024, https://www.edpb.europa.eu/system/files/2024-05/ edpb_20240523_report_chatgpt_taskforce_en.pdf) . However, because the investigations mentioned above are still ongoing, the report only contains preliminary views on certain aspects of the cases. 67 Conseil constitutionnel, décision n°2020-834 QPC du 3 avril 2020, ECLI:FR:CC:2020:2020.834.QPC.