Data Protection

Data protection encompasses the technical, legal, and organizational measures organizations implement to safeguard personal and sensitive information from unauthorized access, theft, or misuse. For enterprise AI governance, data protection is critical because AI systems often process large volumes of data, and inadequate safeguards can lead to regulatory violations under frameworks like GDPR, CCPA, and other privacy laws. Strong data protection practices reduce the risk of breaches, ensure customer trust, and help organizations demonstrate compliance with evolving data privacy requirements that increasingly intersect with AI deployment.

1 item

EnforcementEU2026-07-29

Italy's Garante Fines Character.AI Operator €158,000 for Data Protection and Age-Control Failures, Signaling Broader EU Enforcement Risk for Consumer AI Platforms

Italy's data protection authority, the Garante, fined Character Technologies, the U.S.-based operator of the generative AI platform Character.AI, €158,000 for violations of data protection rules. The enforcement action centers on failures related to age verification, lawful basis for processing, and user data controls on a consumer-facing AI service. The decision is one of the first EU data protection enforcement actions to target a generative AI platform directly.

Character.AI Italy Garante GDPR enforcement age verification data protection consumer AI EU privacy