Laws, standards & frameworks

General Data Protection Regulation

GDPR

GDPRRegulation (EU) 2016/679

The EU's core law on personal data, applying since 25 May 2018. It covers any processing of personal data, whether or not AI is involved, and keeps applying alongside the AI Act.

Often confused with

EU AI Act

GDPR protects people's personal data in any processing. The AI Act regulates AI systems as products, by risk. When AI processes personal data, both apply at once.

Connected terms · 9

Controller Data Act Data protection authority Data protection principles Digital Omnibus European Data Protection Board Extraterritorial scope Personal data Processor