In practice
It is relevant wherever an AI system touches personal data, and is checked alongside the EU AI Act at the same Identify step rather than as a separate exercise.
GDPR
The EU's data protection regulation, covering how personal data may be collected, used and stored. Relevant wherever an AI system touches personal data, and checked alongside the EU AI Act at the same Identify step.
What it means for a business here
How We Audit
Checked at the Identify step, beside the AI Act.
Read How We AuditEU AI Act
The other regulation assessed at the same point.
Read EU AI ActThe rest of the glossary
Every term used across this site's training courses, its audit methodology and the two regulations behind them, in one place.
Back to the glossary