Artificial Intelligence and the Challenges of Personal Data Protection Rules with a Control Approach; Alternative Legal Regime

Artificial intelligence is built on technologies such as machine learning and deep learning neural networks, whose performance relies on a vast amount of high-quality data. Personal data is an indispensable resource for the development of artificial intelligence and the improvement of the efficiency of AI algorithms. Personal data is attributed to individuals and part of an individual's rights and obligations in the analog space can, depending on the case, have a close connection with its proper processing, which ensures the benefits for the data subject and prevents harm against them. Before the advent of artificial intelligence, the volume of personal data processing was relatively small and limited compared to AI; thus, the General Data Protection Regulations (2016) has mandated duties for each instance of personal data processing for the controller and has also determined rights for the data subject regarding each instance of personal data processing. However, considering the technical nature of artificial intelligence, the application of these rules to the algorithmic processing of personal data is fraught with difficulties. This article examines the challenges of the GDPR in protecting personal data under the processing of AI systems and analyzes legislative solutions for protecting personal data in the field of artificial intelligence. The major question of this article is, what is the legislative solution to overcome the challenge of personal data protection in algorithmic processes? This research is conducted using a descriptive-analytical method.