General Data Protection Regulation

The EU regulation governing the processing of personal data, including provisions relevant to AI such as data protection by design, the right to explanation and automated decision-making restrictions.

Europe's strict privacy law that affects AI by controlling how personal data can be collected, used and stored. If your AI uses people's data, GDPR has a lot to say about how you do it.

GDPR has direct implications for AI governance, particularly around data processing, automated decision-making and individual rights. Organisations must ensure their AI systems comply with GDPR requirements wherever EU personal data is involved.