Core concepts
Extraterritorial scope
Both lawsAI Act Art. 2 · GDPR Art. 3
Both laws reach beyond EU borders. The AI Act applies to non-EU providers placing systems on the EU market, and to non-EU providers and deployers whose system's output is used in the EU. GDPR applies to organisations outside the EU that offer goods or services to people in the EU or monitor their behaviour.