GDPR / Data Privacy (in AI)
TL;DR
Data protection requirements when using AI systems.
What does this mean?
The GDPR (General Data Protection Regulation) sets clear requirements for how personal data is handled in AI systems. Organizations must ensure that AI applications operate in compliance with data protection law.
How it works
Before deploying AI, you answer: which data is being processed? Where is it stored? Who has access? Is there a legal basis? Are retention periods defined?
Example
An AI chatbot that processes customer data must run on GDPR-compliant servers (in the EU), delete data after retention periods expire, and provide a privacy policy.
Why it matters
GDPR violations can be costly (up to 4% of annual revenue). Data privacy must be built in from the start — not treated as an afterthought.
Related terms