GDPR & AI
The AI Act's High-Risk Deadline Has Moved
The EU AI Act's rules for standalone high-risk AI systems, originally due 2 August 2026, were pushed back to 2 December 2027 by Regulation (EU) 2026/1744, in force since 27 July 2026.
GDPR & AI
Training AI on your data is still processing
Using personal data to train an AI model counts as processing under GDPR, so the same lawful basis and data protection principles still apply.
GDPR & AI
Italy was the first to ban a leading chatbot.
Italy's data protection authority temporarily banned ChatGPT in March 2023 over GDPR concerns, the first such action against a major generative AI tool.
GDPR & AI
GDPR regulates AI systems that process personal data.
Any AI system that processes personal data must comply with GDPR’s transparency and consent requirements, especially when used for profiling or automated decision-making.