Tension between generative AI’s appetite for data and limitations of EU privacy law on information collection is among the most critical issues for policymakers.