Artificial intelligence and the AI Act - challenges for data protection officers

The European AI Act (EU AI Regulation) defines binding rules for the use of artificial intelligence and is also highly relevant for data protection officers in Germany. The aim is to make AI systems safe, transparent and human-centered. The AI Act categorizes AI applications according to their risk: from minimal to unacceptable. High-risk AI, such as facial recognition or automated decision-making, is subject to particularly strict requirements.

Data protection officers must ensure that the use of AI complies with the requirements of the GDPR: data protection impact assessments, transparency obligations and the protection of personal data are key tasks. The AI Act brings additional review obligations with regard to fairness, non-discrimination and explainability of AI decisions.

For data protection officers, this means a growing responsibility to advise companies on the implementation of legally compliant AI solutions and to monitor compliance with European standards.