EDPB Opinion 28/2024, para 114: corrective measures can reach the whole dataset (EDPB Opinion 28/2024, adopted 17 December 2024, para 114)
If a licence is found unlawful, the regulator's menu includes deleting the dataset and, in the extreme, the model. That risk lands on the buyer too, which is why buyers ask holders for proof of lawfulness.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“These may include, for instance, issuing a fine, imposing a temporary limitation on the processing, erasing part of the dataset that was processed unlawfully or, where this is not possible, depending on the facts at hand, having regard to the proportionality of the measure, ordering the erasure of the whole dataset used to develop the AI model and/or the AI model itself.”
Where it was read
Also read from the same source
- EDPB Opinion 28/2024, para 66: the legitimate interest test must be assessed and documented (EDPB Opinion 28/2024, adopted 17 December 2024, para 66)
- EDPB Opinion 28/2024, para 92: a privacy notice is not enough to create expectations (EDPB Opinion 28/2024, adopted 17 December 2024, para 92)
- EDPB Opinion 28/2024, para 101: masking and substituting personal data (EDPB Opinion 28/2024, adopted 17 December 2024, para 101(c))
- EDPB Opinion 28/2024, para 102: a waiting period and an unconditional opt-out (EDPB Opinion 28/2024, adopted 17 December 2024, para 102(a)-(b))
- EDPB Opinion 28/2024, para 129: the next party must check where the data came from (EDPB Opinion 28/2024, adopted 17 December 2024, para 129)
- EDPB Opinion 28/2024, para 134: a claim of anonymity must be shown (EDPB Opinion 28/2024, adopted 17 December 2024, para 134)
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide