Any AI system that processes personal data must comply with GDPR’s transparency and consent requirements, especially when used for profiling or automated decision-making.