---
title: "EDPB Opinion 28/2024: Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models"
canonical: "https://dposchool.com/gdpr/guidance/edpb-opinion-28-2024"
source: "https://www.edpb.europa.eu/documents/opinion-of-the-board-art-64/opinion-282024-on-certain-data-protection-aspects-related-to_en"
source_note: "Only the document as published by the EDPB is authoritative."
text_as_of: "2026-10-28"
last_reviewed: "2026-10-29"
language: "en"
publisher: "DPO School"
---

EDPB opinion

# Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models

[Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/gdpr/about#review)

- **Reference:** EDPB Opinion 28/2024
- **Issued by:** EDPB
- **Status:** Final
- **First published:** 18 December 2024
- **Final version:** 18 December 2024
- **Provisions:** [Article 4(1)](https://dposchool.com/gdpr/article/4#4-1), [Article 6(1)(f)](https://dposchool.com/gdpr/article/6#1-f), [Article 5](https://dposchool.com/gdpr/article/5)

"First published" is the date the first version was published for consultation (start of the EDPB feedback period), or the publication date where there was no consultation; the plenary adoption is usually a day or a few days earlier.

## Note (not the official text)

Art. 64(2) opinion; date is EDPB publication date.

## Official source

- [EDPB Opinion 28/2024 on the EDPB website](https://www.edpb.europa.eu/documents/opinion-of-the-board-art-64/opinion-282024-on-certain-data-protection-aspects-related-to_en)

Checked against the official source on 28 October 2026.

Only the document as published by the EDPB is authoritative. This is reference material, not legal advice.

## Navigation

[GDPR Navigator](https://dposchool.com/gdpr) / [EDPB guidance](https://dposchool.com/gdpr/guidance) / EDPB Opinion 28/2024

[All EDPB guidance](https://dposchool.com/gdpr/guidance)

Studying the GDPR? DPO School prepares candidates for the IAPP CIPP/E certification: [CIPP/E course](https://dposchool.com/courses/cipp-e). More from [DPO School](https://dposchool.com).

## For AI agents

- Machine-readable index: https://dposchool.com/gdpr/llms.txt
- JSON API: https://dposchool.com/gdpr/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents