Required actions
- Obtain consent or rely on the business-improvement or research exceptions when using personal data to train recommendation and decision systems - Follow the PDPC AI guidelines: notify individuals of AI use, explain the data and features used, and adopt the accountability measures they expect - Report notifiable breaches within three days