Ensuring compliance with data protection law when using GenAI: The case of higher education institutions

Abstract

European universities using GenAI, such as ChatGPT, for administrative services must comply with the General Data Protection Regulation. This includes managing personal data carefully, ensuring transparency, and adhering to principles like data minimisation and accuracy to protect privacy and uphold students’ rights.