GDPR

The General Data Protection Regulation (GDPR) is a European Union law, in force since 2018, that governs how organizations collect, process, and protect the personal data of people in the EU.

GDPR sets requirements such as a lawful basis for processing, data-subject rights, and breach notification, and applies to organizations outside the EU that handle EU residents’ data.

For AI systems, it shapes how personal data may be used in training and inference, and underlies contractual terms like data processing agreements and data residency.