GDPR
Also known as: General Data Protection Regulation
GDPR (General Data Protection Regulation) is the EU’s data-protection law. It sets the rules for handling personal data — directly relevant to any AI system that touches PII.
- Lawful basis for processing personal data.
- Rights: access, erasure, portability.
- Real penalties for non-compliance.
The AI angle: if your model reads, stores, or infers about personal data, GDPR applies. Privacy-by-design isn't a nice-to-have; it's a legal requirement.