
EU AI Act vs GDPR — The Overlap Question
You are GDPR compliant. Your AI system still has a compliance problem — here is exactly what overlaps, what doesn’t, and what your GDPR programme

You are GDPR compliant. Your AI system still has a compliance problem — here is exactly what overlaps, what doesn’t, and what your GDPR programme

€35 million. Or 7% of global turnover. Whichever is higher. Here is the penalty structure in full — and the parts most summaries get wrong.

Image AI-generated. All text human-written The EU AI Act has generated plenty of noise — risk categories, fines, governance frameworks. Underneath it, one basic question

Image AI-generated. All text human-written. There’s a compliance flyer doing the rounds with a red-alert headline: “On 2 August 2026, the EU AI Act becomes

Image AI-generated. All text human-written. A post I came across recently (part of an ongoing EU AI Governance series) makes a point that a lot

Image AI-generated. All text is human-written. Before any AI governance framework can be built, one question has to be answered first: is your AI system

Image AI-generated. All text human-written. Before any organisation can build a credible AI governance program, one question has to be answered first: is your AI

Image AI-generated. All text human-written. For years, AI governance sat comfortably inside IT and data science teams, treated as a technical checklist rather than a

Image AI-generated. All text human-written. The EU Artificial Intelligence Act (Regulation (EU) 2024/1689) regulates AI systems using a risk-based approach: the greater the potential harm

Image AI-generated. All text human-written. Many companies rushed AI into production long before they built any governance around it. That approach was tolerable in 2023,

Image AI-generated. All text human-written. For most of 2025, the EU AI Act existed for many organisations as a compliance project with a distant horizon