While the GDPR has provided a good practices framework for data protection, it is largely insufficient in terms of ethics for Artificial Intelligence. We often say “no Data, no AI”. But even worse with poor quality data: it is not possible to get reliable AI.