The Irish Data Protection Commission (DPC) has published a report summarizing its supervisory activities over artificial intelligence products and services between 2021 and 2025.

As the lead supervisory authority for many technology companies, the DPC has observed an increase in its interventions related to AI. Between 2021 and 2025, it supervised the creation and deployment of approximately 180 artificial intelligence products and services, including large language models, facial recognition systems, and recommendation systems. The companies involved notably include Airbnb, Apple, Deepseek, Google, LinkedIn, Meta, Microsoft, OpenAI, Pinterest, TikTok, and X. This supervision involved the evaluation of thousands of documents related to compliance, technical and organizational measures, as well as risk assessments.

The report, entitled "Responsible innovation in artificial intelligence, insights from AI supervision by the Data Protection Commission (2021-2025)", highlights that significant improvements have been achieved in compliance regarding aspects such as legal basis, transparency, data minimization, and child protection. The DPC identifies as points of vigilance the use of legitimate interests as a legal basis for training AI models and the need for robust transparency in the face of complex processing. While the majority of cases resulted in recommendations, the authority states it is ready to intervene urgently when risks to individuals' rights are not sufficiently mitigated, thus encouraging early dialogue with data controllers.