Consent

Consent in AI governance refers to the documented, informed agreement from individuals before collecting, processing, or using their personal data for AI applications. Organizations must obtain valid consent that is freely given, specific, and can be withdrawn, which is a foundational requirement under regulations like GDPR and other privacy frameworks. Consent management becomes critical for enterprises because it establishes legal accountability, builds customer trust, and ensures AI systems respect individual autonomy when handling sensitive information.

1 item

Corporate PolicyEU2026-09-02

Mistral Default Opt-In for Training Data Creates GDPR Exposure on Non-Enterprise Tiers

Mistral AI has updated its data policy so that user conversations and uploaded documents are used for model training by default on its Vibe consumer and standard API tiers. Enterprise customers on the Vibe Enterprise plan are opted out by default, with admin-level controls to manage opt-in. The split configuration requirement between Vibe and API surfaces creates separate compliance exposure that must be managed independently.

Mistral AI training data opt-out GDPR data governance vendor policy change enterprise AI policy consent