Irish DPC issues statement on LinkedIn's AI Training plans

The Irish Data Protection Commission (DPC) has announced that it has concluded its review of LinkedIn's plans to use the personal data of its EU/EEA members to train proprietary artificial intelligence (AI) models, beginning in early November 2025. The DPC identified several risks and recommended measures to mitigate potential negative impacts on users' data protection rights.

As a result of the DPC's intervention, LinkedIn has agreed to adopt significant changes, including improving transparency notices and reducing the scope and time period for which the personal data would be used. LinkedIn also agreed to implement stronger protections for users under 18 and to introduce filters to prevent the collection of potentially sensitive information, such as trade union-related content shared in certain groups. The company also supplied more detailed documentation, including its Legitimate Interest Assessment and Data Protection Impact Assessment.

While the DPC has not approved LinkedIn's data use, it stated that the additional measures sufficiently addressed its concerns, making further regulatory intervention unnecessary at this time. The DPC requires LinkedIn to submit a report within five months on the efficacy of its safeguards and will continue to actively monitor the processing. 

Additional legal analysis by Pinsent Masons.

Training Announcement: The BCS Foundation Certificate in AI examines the challenges and risks associated with AI projects, such as those related to privacy, transparency and potential biases in algorithms that could lead to unintended consequences. Explore the role of data, effective risk management strategies, compliance requirements, and ongoing governance of the AI lifecycle and become a certified AI Governance professional. Find out more.