AI Dictionary › Regulation

GDPR

The GDPR (EU General Data Protection Regulation, 2016/679) is the European law governing personal data processing. For workplace AI use it is the most immediately relevant rule: whenever customer, employee or candidate data passes through an AI model, GDPR applies.

Definition

The critical points in AI use: the legal basis for processing, where the data is processed (non-EU providers require transfer safeguards), whether the provider uses your data to train its models (to be contractually excluded), the data subject's right not to be subject to purely automated decisions with significant effects (art. 22), and the obligation to notify data breaches within 72 hours.

The practical rule for teams: never put identifiable personal data into prompts on consumer tools; use enterprise versions with a Data Processing Agreement, or anonymize first. GDPR and the AI Act add up, they don't replace each other.

Related terms

• EU AI Act
• Privacy by Design
• Data Governance
• AI-agnostic
• AI Content Moderation

More in Regulation

• AI Content Moderation
• Privacy by Design
• Deepfake
• AI Watermarking
• Copyright and AI
• Data Governance
• ISO/IEC 42001
• NIST AI RMF

Put it into practice

• Real scenario: apply this concept with an instant AI verdict.
• Daily gym: short drills to train dictionary concepts.
• Playoff game: challenge other players, elimination-style.

📱 Download the Android app (beta) iOS coming soon

Say what you mean. Get what you need.

Grace Certified, the AI coach that trains and certifies your prompt engineering, by Agora Intelligence.