Processing of personal data in compliance with the law and generative artificial intelligence in the context of chatbots

With the advancement of technology, artificial intelligence is playing a significant role in many aspects of our daily lives. Artificial intelligence technologies offer revolutionary innovations in various sectors such as health, education, entertainment, law and finance, significantly increasing our quality of life. One of the widespread applications of these technologies is chatbot technology. Chatbot systems interact with users in various areas, from customer service to e-commerce, healthcare to education, making daily life easier. Particularly, generative AI, which has recently become prominent with its autonomous capabilities, stands out as an advanced type of chatbot that can produce creative outputs such as audio, video, images, and code, and can communicate with users in natural language. However, the widespread adoption of chatbot technologies also brings certain disadvantages, especially in terms of processing personal data. AI systems require large amounts of data to function effectively, and this data inevitably includes personal information. These systems can process a wide range of personal data, such as names, addresses, contact details, interests, and behaviors, during interactions with users. In the face of this rapidly evolving, data-driven technology, protecting personal data and ensuring that our legal system keeps up with these advancements is an essential requirement. This study will examine the personal data processed by generative AI in light of relevant legislation, court decisions, and doctrinal opinions; evaluate the reflections of data protection principles in generative AIsystems; and discuss the legal status of generative AI in the processes of personal data processing.