Interested Party
A person or entity affected by an AI system decision or activity.
How the laws define this
Both sources establish that the scope of impacted stakeholders extends beyond direct users to encompass non-interacting individuals affected by an artificial intelligence system. At their core, both definitions recognize that individuals who never directly interact with an AI service can still fall under recognized categories. They diverge, however, in their scope and regulatory application. ISO/IEC 42001:2023 adopts a broad, management-level perspective, defining an interested party as any person or organization that can affect, be affected by, or perceive itself to be affected by a decision or activity related to the AI system. In contrast, Provvedimento 11 April 2023 - Misure cautelari e ordine temporaneo contro ChatGPT (Garante per la protezione dei dati personali) applies a specific data protection standard, narrowing the focus to active users of the ChatGPT service and individuals whose personal data was identified in training corpora, classifying these persons specifically as data subjects entitled to rights under data protection law.
Synthesised from the 2 statutory definitions below. Each one is quoted in full, with its source.
How jurisdictions differ
What is distinctive in each definition, binding law in force first.
| Jurisdiction | Instrument | Status | What is distinctive |
|---|---|---|---|
| Italy | Provision April 11, 2023 - Precautionary Measures and Temporary Order Against ChatGPT (Data Protection Authority) | In Force | Expands to include non-users whose personal data appear in training data, granting them data subject rights under data protection law. |
| ISO | ISO/IEC 42001:2023 - Information technology — Artificial intelligence — Management system | In Force | Adds organizations and those who perceive themselves affected by AI decisions or activities. |
What it triggers
- In the Provision April 11, 2023 - Precautionary Measures and Temporary Order Against ChatGPT, these persons are data subjects entitled to rights under data protection law.source
- ISO/IEC 42001:2023 sets out this definition for organizations developing or deploying AI to govern risks and maintain artificial intelligence management systems.source
Definitions (2)
A person or organization that can affect, be affected by, or perceive itself to be affected by a decision or activity related to the AI system.
Includes both active users of the ChatGPT service and individuals who did not interact with the service but whose personal data were identified as included in training corpora; these persons are data subjects entitled to rights under data protection law.
Questions and answers
Who qualifies as an interested party under the Italian ChatGPT order?
It includes active users of ChatGPT and individuals whose personal data were identified in training corpora even if they did not interact with the service. These persons are data subjects entitled to rights under data protection law.
What does interested party mean in ISO/IEC 42001:2023?
It means a person or organization that can affect, be affected by, or perceive itself to be affected by a decision or activity related to the AI system. The standard uses this for AI management systems.
How do the definitions of interested party differ between Italy's order and ISO standard?
Italy's definition focuses on ChatGPT users and non-users with data in training sets as data subjects. The ISO standard widens it to persons or organizations perceiving themselves affected.