Data flows in the AI ecosystem: the relationship between developers, providers and clients under GDPR and the AI act
Brolpito, Nicole (A.A. 2024/2025) Data flows in the AI ecosystem: the relationship between developers, providers and clients under GDPR and the AI act. Tesi di Laurea in Data protection law, Luiss Guido Carli, relatore Filiberto Brozzetti, pp. 85. [Master's Degree Thesis]
|
PDF (Full text)
Download (1MB) | Preview |
Abstract/Index
The rise of artificial intelligence in enterprise services. Legal and ethical challenges of data flows in the AI ecosystem. Research objectives and guiding questions. Methodological approach and analytical tools. The architecture of AI services and data relationships. Key stakeholders in AI services: developers, providers and clients. General architecture of AI services and cloud infrastructure. Data flow in cloud-based AI: FROM USER INPUT TO MODEL PROCESSING. Retrieval-augmented generation (RAG) as a PRIVACY-enhancing technology (PET). Contractual and regulatory framework governing AI data interactions. analyzing the first research question–does Microsoft, as the provider of copilot, indirectly transfer user data to OpenAI? THE ARCHITECTURE OF MICROSOFT 365 COPILOT AND OpenAI’s role. Microsoft azure OpenAI service, retrieval-augmented generation (RAG) and enterprise data processing. Transparency in Microsoft’s documentation and compliance with GDPR articles 12 to 15 and the AI act. Possible temporary exposure of data to OpenAI: legal interpretation of real-time processing without retention and comparison with case law on instantaneous data analysis. OpenAI’s model training and the potential indirect use of enterprise data. Analyzing the second research question–is Microsoft 365 copilot a tool for productivity or surveillance? The processing of employee data through copilot and ai’s role in performance monitoring. Applicability of article 4 of the workers' statute: is copilot a necessary work tool or a surveillance mechanism? GDPR and AI act compliance: the regulatory framework for AI-driven workplace tools. AI as a tool for productivity or a risk for employee autonomy. Considerations and final answer: copilot as a productivity tool or surveillance risk?
References
Bibliografia: pp. 81-85.
| Thesis Type: | Master's Degree Thesis |
|---|---|
| Institution: | Luiss Guido Carli |
| Degree Program: | Master's Degree Programs > Master's Degree Program in Digital Innovation and Sustainability (LM/SC – GIUR) |
| Chair: | Data protection law |
| Thesis Supervisor: | Brozzetti, Filiberto |
| Thesis Co-Supervisor: | Fernandes Da Silva Ranchordas, Sofia Hina |
| Academic Year: | 2024/2025 |
| Session: | Autumn |
| Deposited by: | Alessandro Perfetti |
| Date Deposited: | 27 Feb 2026 14:29 |
| Last Modified: | 27 Feb 2026 14:29 |
| URI: | https://tesi.luiss.it/id/eprint/45012 |
Downloads
Downloads per month over past year
Repository Staff Only
 |
View Item |
