The initiative revolves around Article 88bis of the Digital Omnibus, a set of proposals developed by the European Commission to simplify existing rules on privacy, data protection, and AI while maintaining a high level of protection. The article says that “the processing of personal data in the context of the development and operation of an AI system or of an AI model may be carried out for a legitimate interest of the controller of a third party.”