The European Commission has proposed changes to how personal data can be used in artificial intelligence (AI) systems. These changes would allow companies to process personal data for AI development and operation based on a "legitimate interest," a legal concept that allows data processing without explicit consent in certain situations. The proposals are currently being reviewed by the Council of the European Union, with Ireland holding the presidency during this period. A group of European data protection advocates has raised concerns about the proposed changes, arguing that they favor corporate interests over individuals' privacy rights. Max Schrems, a well-known digital rights activist and founder of the group NOYB, called the proposals "digital expropriation," suggesting that any personal data Europeans have shared online or collected by AI companies would be freely available for corporate use. He warned that this shift would primarily benefit large technology firms that have amassed vast amounts of European data and could lead to a transfer of valuable knowledge from EU companies to the United States or China, which he criticized as a flawed industrial policy. Ireland's Council of Civil Liberties has also expressed strong opposition, calling the proposed amendments "insanity." Dr. Johnny Ryan, who leads the council's enforcement unit, pointed out that the existing enforcement of the General Data Protection Regulation (GDPR) is already weak but warned that the new rules would eliminate important safeguards that protect personal data. He emphasized that the GDPR is a key legal framework in Europe designed to protect individuals' privacy and that weakening it could have serious consequences. Tánaiste Simon Harris, Ireland's deputy prime minister, acknowledged the need to balance technological progress with the right to privacy. When asked whether Ireland's presidency was prioritizing AI innovation over privacy, he said AI systems cannot be self-regulated and suggested looking to ideas from Canadian Prime Minister Mark Carney, who has proposed a global regulatory body for AI. Harris noted that Europe has been more strict on data protection than other regions and stressed the importance of finding the right balance between innovation and privacy. Harris suggested that the focus should be on the positive outcomes of AI, such as improving public services and advancing medical research, but warned against a "wild west" scenario with no regulation. Dr. Ryan, however, argued that Ireland already has a responsibility to enforce the GDPR on technology companies based in the country and that creating a new global regulatory framework is not the right approach to address current concerns. He highlighted specific issues, such as parents' worries about their children's online exposure and the rapid pace of technological change, and warned that removing privacy protections would essentially give big tech companies a "free pass" to operate without limits.