Skip to content

AI

Artificial intelligence (AI) is a rapidly evolving and highly relevant field. The General Data Protection Regulation (GDPR) and the AI Act, among others, regulate the area and can contribute to safe, efficient and ethical development and use of AI.

The AI Act is the EU's general regulation on artificial intelligence (AI). It aims to regulate the development and use of AI in the Union.

Read the AI Act in its entirety (europa.eu)

Introducing a risk-based approach

The regulation introduces a risk-based approach where different AI systems are classified based on their potential risk to society and individuals' rights – unacceptable risk, high risk, limited risk and minimal risk. The purpose is to create a safe and ethically sustainable environment for AI innovation, while protecting citizens' rights and freedoms.

Timeline for when the rules will apply

The AI Act came into force on August 1, 2024. From February 2, 2025, AI systems with unacceptable risk are prohibited.

On August 2, 2025, the requirements for AI models for general purposes will apply, and on August 2, 2026, most of the rules in the AI Act will apply.

The AI Act and GDPR apply simultaneously

The AI Act and the General Data Protection Regulation (GDPR) will apply simultaneously. The GDPR applies when personal data is processed in the context of developing or using AI. When training an AI model, it is not uncommon for personal data to be processed and therefore the GDPR applies.

 

Latest update: 30 June 2025
Page labels AI