Inferred data describes information about a person or entity derived from correlations, probabilities, patterns, or models rather than collected directly. Examples include estimated income, personality traits, and risk scores. section 3.18
AI-generated inferences can affect rights and access while remaining difficult to regulate. They may occupy a legal gray area, even where data-protection rules cover information that directly or indirectly identifies people. section 3.18
Responsible handling requires attention to:
- privacy and data-protection obligations section 3.18
- bias, data quality, transparency, explainability, auditability, and meaningful recourse section 3.18
- organizational accountability across the AI lifecycle, rather than compliance alone section 3.18
