Journal №1-2 (2025)
Governing Artificial Intelligence through Data Protection: The Strategic Role of Independent Authorities in the Age of Algorithmic Power
∘ Ginevra Cerrina Feroni ∘

Artificial Intelligence (AI) represents not only a technological shift but also a constitutional challenge. As AI systems become more involved in social, economic and legal decisions, the role of Data Protection Authorities (DPAs) is becoming increasingly important. This short essay, based on the speech held by the Vice President of the Italian Data Protection Authority, Prof. Cerrina Feroni at the 33^rd European Conference of Data Protection Authorities, examines the structural interdependence between AI and personal data, placing data protection at the core of AI governance. Drawing from the experience of the Italian DPA and comparative international examples, it analyses four critical areas: legal bases, data transfers, automated decision-making, and protection of vulnerable individuals, where DPAs are establishing the normative boundaries of AI systems. It further suggests that DPA’s role might benefit from evolution from reactive enforcers to proactive institutional actors engaged in system design, audit, and risk classification. This essay tentatively suggests that the legitimacy, legal certainty, and democratic accountability of AI governance may be best served by the central involvement of independent supervisory authorities.

See in detail: 

---