Tagged
Generative AI
GDPR counts an AI agent reading personal data past its permissions as a breach
When an AI agent reaches personal data that it, or the user it acts for, is not authorised to reach, GDPR counts it as…
8 Oct 2026
The EU KIDS Act would regulate general AI chatbots, not customer-support bots
The EU KIDS Act, proposed on 17 September 2026 and not yet law, would regulate AI chatbots that minors can reach and th…
30 Sep 2026
The AI Act's AI literacy duty still applies to companies whose staff use ChatGPT
Article 4 of the EU AI Act still requires companies whose staff use AI tools such as ChatGPT to build their AI literacy…
25 Sep 2026
Your AI agent's tool list is the recipient list your privacy policy has to name
Giving a language model tools means the model decides at run time which companies receive personal data. GDPR Article 1…
21 Sep 2026
Fine-tuning rarely makes you a model's provider under the AI Act. The threshold is a third of the base model's compute.
The AI Act has two provider roles, and a fine-tune almost never moves the second one to you. Shipping an AI feature und…
18 Sep 2026
Most SaaS AI features are not high-risk under the AI Act. Hiring and credit tools need a check.
Most SaaS features are not high-risk under the EU AI Act. Two things make a system high-risk: it is, or is built into,…
10 Sep 2026
Adding AI to your app? Add these three disclosures to your privacy policy.
Calling an LLM API adds three things to what GDPR Article 13 makes you disclose: the model vendor becomes a recipient o…
19 Aug 2026
Scraping the whole internet is the easy case. Your small, targeted scrape is not.
The EDPB's draft Guidelines 03/2026 cover web scraping for generative AI, and they reach the team that re-uses someone…
3 Aug 2026
Article 50 applies on 2 August 2026, and your model vendor cannot carry it for you
Article 50 of the EU AI Act applies from 2 August 2026. The delay you read about in June covered high-risk uses such as…
30 Jul 2026