AI and Personal Data Protection: Shaping the Future Regulatory Framework

Abstract

The project focuses on the intersection of the proposed AI Liability Directive, AI Act, and GDPR and NISII directive in shaping a regulatory framework for AI technologies. Emphasizing liability and harm prevention, the AI Liability Directive aligns with GDPR’s objectives of safeguarding personal data amid AI’s pervasive processing capabilities. However, in order to achieve consistency of legal regulation, it is necessary to harmonize these legal acts with each other. In turn, addressing AI’s role in cybercrime, the NIS II Directive advocates for AI’s use in cybersecurity, yet lacks specific guidelines, leaving interpretation open. The research focuses on key elements influencing data protection, including transparency under the AI Liability Directive’s “duty of care”. The research aims for a thorough examination of the interplay between AI liability, data protection, and cybersecurity, providing actionable insights for future regulatory improvements.