AI Act & GDPR: Bridging Two Regulatory Frameworks

The EU AI Act introduces a new regulatory framework for artificial intelligence, but many of its underlying principles are already familiar to privacy and compliance professionals. Accountability, transparency, risk assessment, data governance, documentation, and effective oversight are central to both the AI Act and the GDPR.

This session will explore the parallels between the two frameworks and demonstrate how established GDPR governance structures can provide a foundation for AI compliance. It will examine how concepts such as data protection impact assessments, privacy by design, records of processing activities, and clearly defined organisational responsibilities relate to the AI Act’s requirements for risk management, technical documentation, human oversight, and post-market monitoring.