{"id":1074,"date":"2026-09-11T09:00:38","date_gmt":"2026-09-11T07:00:38","guid":{"rendered":"https:\/\/www.achilles-project.eu\/?p=1074"},"modified":"2026-09-30T12:33:02","modified_gmt":"2026-09-30T10:33:02","slug":"navigating-sensitive-personal-data-in-ai-under-the-gdpr","status":"publish","type":"post","link":"https:\/\/www.achilles-project.eu\/?p=1074","title":{"rendered":"Navigating sensitive personal data in AI under the GDPR"},"content":{"rendered":"<p>A new scientific publication by <strong>Julie Mannekens from KU Leuven\u2019s Centre for IT &amp; IP Law (CiTiP)<\/strong> examines an increasingly relevant data protection challenge: what happens when artificial intelligence systems process or infer <strong>special categories of personal data without this being intended?<\/strong><\/p>\n<p>The publication, <em>\u201cAddressing unintended processing of special categories of personal data in AI: between Article 9(1) and Article 9(2) GDPR\u201d<\/em>, explores the relationship between the general prohibition on processing special categories of personal data under <strong>Article 9(1) of the General Data Protection Regulation (GDPR)<\/strong> and the exceptions provided under <strong>Article 9(2)<\/strong>.<\/p>\n<p>As AI systems become increasingly sophisticated, they may derive or generate sensitive information that was not explicitly provided as input and whose processing was not originally intended. This raises important legal questions concerning the circumstances in which such processing falls within the scope of Article 9 GDPR and the implications for organisations developing and deploying AI systems.<\/p>\n<p>The publication contributes to the broader discussion on how existing data protection requirements can be effectively applied in the context of rapidly evolving AI technologies. These questions are particularly relevant to the <strong>ACHILLES project<\/strong>, which combines technical innovation with legal and ethical perspectives to support the development of AI systems that are lighter, clearer and safer.<\/p>\n<p>Through the involvement of <strong>KU Leuven<\/strong>, ACHILLES addresses legal, ethical and privacy-related considerations alongside its technological research, helping ensure that advances in AI are accompanied by a careful assessment of their implications for fundamental rights, data protection and regulatory compliance.<\/p>\n<p><a href=\"https:\/\/www.law.kuleuven.be\/citip\/blog\/addressing-unintended-processing-of-special-categories-of-personal-data-in-ai-between-article-91-and-article-92-gdpr\/\" target=\"_blank\" rel=\"noopener\"><strong>Read the full publication<\/strong><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A new scientific publication by Julie Mannekens from KU Leuven\u2019s Centre for IT &amp; IP Law (CiTiP) examines an increasingly relevant data protection challenge: what happens when artificial intelligence systems process or infer special categories of personal data without this being intended? The publication, \u201cAddressing unintended processing of special categories of personal data in AI: [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1077,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[3],"tags":[],"class_list":["post-1074","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Navigating sensitive personal data in AI under the GDPR - Achilles Project<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.achilles-project.eu\/?p=1074\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Navigating sensitive personal data in AI under the GDPR - Achilles Project\" \/>\n<meta property=\"og:description\" content=\"A new scientific publication by Julie Mannekens from KU Leuven\u2019s Centre for IT &amp; IP Law (CiTiP) examines an increasingly relevant data protection challenge: what happens when artificial intelligence systems process or infer special categories of personal data without this being intended? The publication, \u201cAddressing unintended processing of special categories of personal data in AI: [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.achilles-project.eu\/?p=1074\" \/>\n<meta property=\"og:site_name\" content=\"Achilles Project\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-11T07:00:38+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-30T10:33:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.achilles-project.eu\/wp-content\/uploads\/2026\/09\/Julie_Addressing-incidental-processing-of-sensitive-data-in-AI-development-and-operation_pic-1140x465-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"512\" \/>\n\t<meta property=\"og:image:height\" content=\"333\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Michela Zuddio\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Michela Zuddio\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/?p=1074#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/?p=1074\"},\"author\":{\"name\":\"Michela Zuddio\",\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/#\\\/schema\\\/person\\\/211daa38934f5ecd34782e282d2bccfa\"},\"headline\":\"Navigating sensitive personal data in AI under the GDPR\",\"datePublished\":\"2026-09-11T07:00:38+00:00\",\"dateModified\":\"2026-09-30T10:33:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/?p=1074\"},\"wordCount\":255,\"image\":{\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/?p=1074#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.achilles-project.eu\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Julie_Addressing-incidental-processing-of-sensitive-data-in-AI-development-and-operation_pic-1140x465-2.png\",\"articleSection\":[\"news\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/?p=1074\",\"url\":\"https:\\\/\\\/www.achilles-project.eu\\\/?p=1074\",\"name\":\"Navigating sensitive personal data in AI under the GDPR - Achilles Project\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/?p=1074#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/?p=1074#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.achilles-project.eu\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Julie_Addressing-incidental-processing-of-sensitive-data-in-AI-development-and-operation_pic-1140x465-2.png\",\"datePublished\":\"2026-09-11T07:00:38+00:00\",\"dateModified\":\"2026-09-30T10:33:02+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/#\\\/schema\\\/person\\\/211daa38934f5ecd34782e282d2bccfa\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/?p=1074#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.achilles-project.eu\\\/?p=1074\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/?p=1074#primaryimage\",\"url\":\"https:\\\/\\\/www.achilles-project.eu\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Julie_Addressing-incidental-processing-of-sensitive-data-in-AI-development-and-operation_pic-1140x465-2.png\",\"contentUrl\":\"https:\\\/\\\/www.achilles-project.eu\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Julie_Addressing-incidental-processing-of-sensitive-data-in-AI-development-and-operation_pic-1140x465-2.png\",\"width\":512,\"height\":333},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/?p=1074#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.achilles-project.eu\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Navigating sensitive personal data in AI under the GDPR\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/#website\",\"url\":\"https:\\\/\\\/www.achilles-project.eu\\\/\",\"name\":\"Achilles Project\",\"description\":\"Human-Centred Machine Learning: Lighter, Clearer, Safer\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.achilles-project.eu\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.achilles-project.eu\\\/#\\\/schema\\\/person\\\/211daa38934f5ecd34782e282d2bccfa\",\"name\":\"Michela Zuddio\",\"url\":\"https:\\\/\\\/www.achilles-project.eu\\\/?author=2\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Navigating sensitive personal data in AI under the GDPR - Achilles Project","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.achilles-project.eu\/?p=1074","og_locale":"en_US","og_type":"article","og_title":"Navigating sensitive personal data in AI under the GDPR - Achilles Project","og_description":"A new scientific publication by Julie Mannekens from KU Leuven\u2019s Centre for IT &amp; IP Law (CiTiP) examines an increasingly relevant data protection challenge: what happens when artificial intelligence systems process or infer special categories of personal data without this being intended? The publication, \u201cAddressing unintended processing of special categories of personal data in AI: [&hellip;]","og_url":"https:\/\/www.achilles-project.eu\/?p=1074","og_site_name":"Achilles Project","article_published_time":"2026-09-11T07:00:38+00:00","article_modified_time":"2026-09-30T10:33:02+00:00","og_image":[{"width":512,"height":333,"url":"https:\/\/www.achilles-project.eu\/wp-content\/uploads\/2026\/09\/Julie_Addressing-incidental-processing-of-sensitive-data-in-AI-development-and-operation_pic-1140x465-2.png","type":"image\/png"}],"author":"Michela Zuddio","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Michela Zuddio","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.achilles-project.eu\/?p=1074#article","isPartOf":{"@id":"https:\/\/www.achilles-project.eu\/?p=1074"},"author":{"name":"Michela Zuddio","@id":"https:\/\/www.achilles-project.eu\/#\/schema\/person\/211daa38934f5ecd34782e282d2bccfa"},"headline":"Navigating sensitive personal data in AI under the GDPR","datePublished":"2026-09-11T07:00:38+00:00","dateModified":"2026-09-30T10:33:02+00:00","mainEntityOfPage":{"@id":"https:\/\/www.achilles-project.eu\/?p=1074"},"wordCount":255,"image":{"@id":"https:\/\/www.achilles-project.eu\/?p=1074#primaryimage"},"thumbnailUrl":"https:\/\/www.achilles-project.eu\/wp-content\/uploads\/2026\/09\/Julie_Addressing-incidental-processing-of-sensitive-data-in-AI-development-and-operation_pic-1140x465-2.png","articleSection":["news"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.achilles-project.eu\/?p=1074","url":"https:\/\/www.achilles-project.eu\/?p=1074","name":"Navigating sensitive personal data in AI under the GDPR - Achilles Project","isPartOf":{"@id":"https:\/\/www.achilles-project.eu\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.achilles-project.eu\/?p=1074#primaryimage"},"image":{"@id":"https:\/\/www.achilles-project.eu\/?p=1074#primaryimage"},"thumbnailUrl":"https:\/\/www.achilles-project.eu\/wp-content\/uploads\/2026\/09\/Julie_Addressing-incidental-processing-of-sensitive-data-in-AI-development-and-operation_pic-1140x465-2.png","datePublished":"2026-09-11T07:00:38+00:00","dateModified":"2026-09-30T10:33:02+00:00","author":{"@id":"https:\/\/www.achilles-project.eu\/#\/schema\/person\/211daa38934f5ecd34782e282d2bccfa"},"breadcrumb":{"@id":"https:\/\/www.achilles-project.eu\/?p=1074#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.achilles-project.eu\/?p=1074"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.achilles-project.eu\/?p=1074#primaryimage","url":"https:\/\/www.achilles-project.eu\/wp-content\/uploads\/2026\/09\/Julie_Addressing-incidental-processing-of-sensitive-data-in-AI-development-and-operation_pic-1140x465-2.png","contentUrl":"https:\/\/www.achilles-project.eu\/wp-content\/uploads\/2026\/09\/Julie_Addressing-incidental-processing-of-sensitive-data-in-AI-development-and-operation_pic-1140x465-2.png","width":512,"height":333},{"@type":"BreadcrumbList","@id":"https:\/\/www.achilles-project.eu\/?p=1074#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.achilles-project.eu\/"},{"@type":"ListItem","position":2,"name":"Navigating sensitive personal data in AI under the GDPR"}]},{"@type":"WebSite","@id":"https:\/\/www.achilles-project.eu\/#website","url":"https:\/\/www.achilles-project.eu\/","name":"Achilles Project","description":"Human-Centred Machine Learning: Lighter, Clearer, Safer","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.achilles-project.eu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.achilles-project.eu\/#\/schema\/person\/211daa38934f5ecd34782e282d2bccfa","name":"Michela Zuddio","url":"https:\/\/www.achilles-project.eu\/?author=2"}]}},"_links":{"self":[{"href":"https:\/\/www.achilles-project.eu\/index.php?rest_route=\/wp\/v2\/posts\/1074","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.achilles-project.eu\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.achilles-project.eu\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.achilles-project.eu\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.achilles-project.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1074"}],"version-history":[{"count":3,"href":"https:\/\/www.achilles-project.eu\/index.php?rest_route=\/wp\/v2\/posts\/1074\/revisions"}],"predecessor-version":[{"id":1082,"href":"https:\/\/www.achilles-project.eu\/index.php?rest_route=\/wp\/v2\/posts\/1074\/revisions\/1082"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.achilles-project.eu\/index.php?rest_route=\/wp\/v2\/media\/1077"}],"wp:attachment":[{"href":"https:\/\/www.achilles-project.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1074"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.achilles-project.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1074"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.achilles-project.eu\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1074"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}