Source directoryEuropean Data Protection Board (EDPB)Opinion 28/2024, adopted 17.12.2024

EDPB Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models

“EDPB Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models”. Publisher: European Data Protection Board (EDPB). Version used: Opinion 28/2024, adopted 17.12.2024. The Versatile AI Risk Assessment threat catalogue backs 3 of its 52 threats with this document, at 2 verified locations.

As of: July 2026 · Catalogue version 2026.07.17.3

Document details

Publisher: European Data Protection Board (EDPB)
Version used: Opinion 28/2024, adopted 17.12.2024
Year: not stated
Licence: not stated
Framework: GDPR

Open the original document at the publisher External link; the publisher’s version always takes precedence.

References in the catalogue (2)

Every row states the clause, its title, the exact location in the document and the threats that refer to it.

Clauses of this document with the threats that reference them
Clause	Title and location	Referencing threats
`EDPB Opinion 28/2024, Section 3.2`	EDPB Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models Section 3.2, especially paragraph 43 and paragraphs 44–58, pp. 14–18 (anonymity; extraction/model attacks)	Privacy Attacks Sensitive Information Disclosure
`EDPB Opinion 28/2024, Sections 3.3–3.4.2`	EDPB Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models Sections 3.3–3.4 and Section 3.4.2, especially paragraphs 124–132, pp. 32–33 (unlawful development and downstream use)	Supply Chain – Datasets

This page does not reproduce the text of the standards. It states the identifier, title and location of the clause; the wording itself is in the original document. The mappings are taxonomic and not evidence of compliance.

Threats referencing this document (3)

Grouped by topic. Every entry leads to the full threat page.

Privacy and Data Leakage

Supply Chain and Provenance

Supply Chain – Datasets

From the reference to the assessment

The full catalogue states the mitigations, the possible impact and every verified location for each threat. The live demo runs locally in your browser, with no sign-up.

Go to the threat catalogue Start the live demo

Cite this page

For reports, policies or internal documents; the link leads directly to this source page.

“EDPB Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models” (European Data Protection Board (EDPB)). References in the AI threat catalogue, Versatile AI Risk Assessment, as of July 2026.
https://www.versatile-ai-risk-assessment.com/en/wissensbasis/sources/edpb-opinion-28-2024/

← Back to the source directory