ARTICLE · 03 SEPTEMBER 2024

AI Act och GDPR: Dubbla riskbedömningar?

Advokatfirman Delphi

Contributor

Advokatfirman Delphi

Advokatfirman Delphi

Delphi is a progressive law firm with respected specialists in most areas within business law. By...

View firm profile

Explore more from Advokatfirman Delphi

När en organisation avser att använda någon typ av ny teknik som kan leda till en hög risk för individers rättigheter kan en konsekvensbedömning, data protection impact assessment (DPIA), enligt artikel 35 GDPR behöva göras.

SwedenTechnology

Linus Larsen

När en organisation avser att använda någon typ av ny teknik som kan leda till en hög risk för individers rättigheter kan en konsekvensbedömning, data protection impact assessment (DPIA), enligt artikel 35 GDPR behöva göras. Riskerna med personuppgiftsbehandlingen behöver bedömas och hanteras, och behandlingen ska kartläggas och beskrivas. Om risken bedöms vara fortsatt hög behöver även förhandssamråd med Integritetsskyddsmyndigheten begäras innan behandlingen kan inledas.

En liknande typ av proaktiv riskbedömning förekommer också i den nya AI-förordningen. Enligt artikel 27 p. 1 ska en fundamental rights impact assessment (FRIA) utföras innan så kallade högrisk-AI-system tas i bruk. Denna skyldighet gäller exempelvis för de flesta verksamheter som räknas som hög risk och räknas upp bilaga 3 till AI Act, samt mer generellt för statliga myndigheter och andra aktörer som utför offentlig verksamhet som driftsätter ett högrisk-AI-system.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

AI-förordningens transparenskrav – nya krav på företagens användning av AI

SwedenTechnology

Advokatfirman Vinge KB

Senaste nytt om AI-förordningen och ändringar genom digital omnibus

European UnionTechnology

Advokatfirman Cederquist KB

The Race To Own The AI Data Center Infrastructure Stack

SwedenTechnology

Konsert Strategy & IP

When Differentiation Becomes Strategy

SwedenTechnology

Konsert Strategy & IP

Tech Differentiation At Work

SwedenTechnology

Konsert Strategy & IP

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

Comparative Guide

Fintech

Comparative Guide

Blockchain & Crypto Assets

Comparative Guide

Artificial Intelligence

See more popular content from

TechnologyAdvokatfirman Delphi

The Race To Own The AI Data Center Infrastructure Stack

AI is fundamentally reshaping data center infrastructure through technical integration and market concentration. As power density requirements surge and cooling shifts from air to liquid, the traditional loosely-coupled infrastructure stack is evolving into tightly integrated systems designed specifically for AI workloads.

SwedenTechnology

Konsert Strategy & IP

Senaste nytt om AI-förordningen och ändringar genom digital omnibus

EU's AI Regulation entered into force in August 2024 and has been applied gradually, with significant transparency requirements taking effect on August 2, 2026. The Digital Omnibus amendments, finalized in summer 2026, introduce important changes including delayed implementation timelines for high-risk AI systems and new prohibitions on non-consensual intimate content generation.

European UnionTechnology

Advokatfirman Cederquist KB

AI-förordningens transparenskrav – nya krav på företagens användning av AI

Sedan den 2 augusti 2026 gäller huvuddelen av transparenskraven i artikel 50 i EU:s AI-förordning. Transparenskraven består i princip av fyra olika skyldigheter beroende på vilken typ av AI-system det handlar om och vad...

SwedenTechnology

Advokatfirman Vinge KB

Generative AI In Business Operations: 5 Legal Aspects To Keep An Eye On

As generative AI takes great strides forward in the business activities of more and more companies and organisations, there are several legal aspects to be aware of.

SwedenTechnology

关于欧盟《网络弹性法案》，您需要了解什么？

2024年10月10日，欧洲理事会正式通过了欧盟第2024/2847号条例，即带有数字元素的产品的横向网络安全要求法规...

European UnionTechnology

The AI Act – What Businesses Need To Know

On 13 March 2024, the European Parliament approved the world's first comprehensive regulation for the development and use of artificial intelligence...

European UnionTechnology

Final Reports With Technical Standards For DORA Published

On 17 January 2024, the European supervisory authorities published the final reports on the first round of technical standards for the Digital Operational Resilience Act...

SwedenTechnology

When Differentiation Becomes Strategy

Four strategic decisions that helped ‘Differon' turn technology differentiation into stronger revenue and margins...

SwedenTechnology

Konsert Strategy & IP

Cybersecurity Law Overview – April 2017

The following cybersecurity overview covers six jurisdictions (the US, the EU, Germany, France, Australia and Mexico).

SwedenTechnology

Mannheimer Swartling

Tech Differentiation At Work

To stay ahead, ‘SynthCo' realized they needed to fundamentally redefine their competitive approach. With margins under pressure and digitally savvy new players moving fast, traditional competitive...

SwedenTechnology

Konsert Strategy & IP

Credit Institutions Face Stricter Requirements Regarding ESG-Risk: What's New?

The Swedish Financial Supervisory Authority has announced its intention to comply with the European Banking Authority's (Guidelines on the management of environmental, social and governance risks.

SwedenFinance and Banking

Advokatfirman Delphi

Amendments To Swedish Companies Act Finally Enacted – Cheaper Notices To Attend General Meetings Now Open To All Public Companies

On 1 December, the Swedish Parliament resolved on the delayed legislative amendments to the Swedish Companies Act which, among other things, concern the mode of convening general meetings, on which we reported in previous newsletters (October 2009 and June 2010).

SwedenCorporate/Commercial Law

Advokatfirman Delphi