EDPB Guidelines on virtual voice assisstants

Guidelines 02/2021 on virtual voice assistants

The document provides guidelines on the application of GDPR and e-Privacy Directive for Virtual Voice Assistants (VVAs). From ePD perspective, the guidelines specify that "(i)nsofar the VVA data is processed in order to execute the user’s requests, i.e. as strictly necessary in order to provide a service requested by the user, data controllers are exempted from the requirement of prior consent under Article 5(3) e-Privacy Directive. Conversely, such consent as required by Article 5(3) e-Privacy Directive would be necessary for the storing or gaining of access to information for any purpose other than executing users’ request."