Joint Statement on AI-Generated Imagery and the Protection of Privacy (23 Februar 2026): the APDP among the 61 signatory data protection authorities

On 23 February 2026, 61 personal data protection authorities from around the world, including the Monaco Personal Data Protection Authority (APDP), published a "Joint Statement on AI-Generated Imagery and the Protection of Privacy" (hereinafter the "Joint Statement") coordinated by the International Enforcement Cooperation Working Group of the Global Privacy Assembly (GPA)*.

*The Global Privacy Assembly (GPA) is an international cooperation body bringing together independent public authorities responsible for personal data protection. It adopts non-binding joint resolutions and declarations, contributing to the harmonisation of international standards in the field of privacy protection.

Context of the Joint Statement

The Joint Statement was published "in response to serious concerns about artificial intelligence (AI) systems that generate realistic images and videos depicting
identifiable individuals without their knowledge and consent".

Data protection authorities highlight the risks associated with "AI image and video generation integrated into widely accessible social media platforms [enabling] the creation of non-consensual intimate imagery, defamatory depictions, and other harmful content featuring real individuals".

They are "especially concerned about potential harms to children and other vulnerable groups, such as cyber-bullying and/or exploitation".

Fundamental principles for organisations that develop and use AI content generation systems

The Joint Statement sets out fundamental principles that should guide organisations developing and using AI content generation systems, including:

• "Implement robust safeguards to prevent the misuse of personal information and generation of non-consensual intimate imagery and other harmful materials,
  particularly where children are depicted."
• "Ensure meaningful transparency about AI system capabilities, safeguards, acceptable uses and the consequences of misuse."
• "Provide effective and accessible mechanisms for individuals to request the removal of harmful content involving personal information and respond rapidly to such requests."
• Address specific risks to children through implementing enhanced safeguards and providing clear, age-appropriate information to children, parents, guardians and educators."

The Joint Statement can be viewed in its entirety here

* * *

The Principality of Monaco does not currently have a specific legal framework for artificial intelligence. Organisations that develop and use AI-generated content in a harmful manner may be held liable under Law No. 1.565 of 3 December 2024 on the protection of personal data and the Criminal Code.

* * *