Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 23 SEPTEMBER 2025

WilmerHale's Guide To AI And GDPR

WilmerHale
WilmerHale
Contributor
WilmerHale

WilmerHale

WilmerHale's London office was established more than 40 years ago. With lawyers qualified in the...

View firm profile
Explore more from WilmerHale

The rise of AI and its widespread availability offer significant growth opportunities for businesses. However, companies developing and using AI must implement robust governance frameworks...

United StatesPrivacy
Dr. Martin Braun
Dr. Martin Braun
Anne Vallery
Anne Vallery
Itsiq Benizri
Itsiq Benizri
Author LinkedIn connections

The rise of AI and its widespread availability offers significant growth opportunities for businesses. However, it necessitates a robust governance framework to ensure compliance with regulatory requirements, especially under the EU AI Act (see our Guide to the AI Act) and the EU GDPR.

The reason GDPR compliance is so important is that (personal) data is a key pillar of AI. For AI to function effectively, it requires good-quality and abundant data so that it can be trained to identify patterns and relationships. Additional personal data is often gathered during deployment and incorporated into AI to assist with individual decision-making.

This guide discusses GDPR compliance throughout the AI development lifecycle and when using AI.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California's Fall 2026 Privacy Roundup: Expanded CCPA Deletion Rights And More

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...
United StatesPrivacy
McDermott Will & Schulte
McDermott Will & Schulte
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

Eleventh Circuit Developments: Decisions On Florida And Georgia Social Media/Minor Laws And New Alabama Law

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

PTAB/USPTO Update - October 2026

The USPTO has released new templates and guidance for AIA trial proceedings, announced key appointments including a Chief AI Officer, and published updated procedures for patent applications and subject matter eligibility declarations. Director Squires delivered multiple addresses emphasizing the constitutional importance of intellectual property rights while the agency expanded its community engagement efforts and international collaboration through WIPO's Global IP Assignment Platform pilot program.
United StatesIntellectual Property
WilmerHale
WilmerHale
Article

SEC Approves FINRA’s New “Outside Activities” Rule

The Securities and Exchange Commission has approved FINRA Rule 3290, which will replace existing rules governing outside business activities and private securities transactions for registered persons. This new rule narrows the scope to focus on investment-related activities while maintaining similar supervisory obligations for member firms. Understanding the key changes and implementation requirements will be critical for broker-dealers as they update their compliance policies and procedures.
United StatesFinance and Banking
WilmerHale
WilmerHale
Article

23x5 Trading Comes To US Exchanges: What Firms Should Know Before Launch

US national securities exchanges are preparing to launch 23x5 trading by December 6, 2026, marking the most significant expansion of trading hours in decades. This comprehensive analysis examines the regulatory approvals, operational infrastructure changes, investor protection mechanisms, and issuer considerations necessary to support overnight equity trading from Sunday through Thursday evenings.
United StatesFinance and Banking
WilmerHale
WilmerHale
Article

SEC 2027 Exam Priorities: Familiar Priorities, Evolving Markets

The SEC Division of Examinations has released its fiscal year 2027 examination priorities, signaling continued focus on investment adviser fiduciary obligations, broker-dealer financial responsibility, and Regulation Best Interest while adapting to evolving market practices. Private credit, artificial intelligence governance, and retail investor protection emerge as prominent areas of scrutiny, with examiners expected to probe valuation practices, conflicts of interest, and technology controls across regula
United StatesFinance and Banking
WilmerHale
WilmerHale
Article

PTAB/USPTO Update - September 2026

The USPTO has released its latest economic impact report on IP-intensive industries, announced a new community engagement office in North Carolina, and issued several administrative updates including relief for Japanese applicants affected by a severe earthquake. The Patent Trial and Appeal Board has also designated new precedential and informative decisions addressing obviousness-type double patenting and Markush groupings.
United StatesIntellectual Property
WilmerHale
WilmerHale
Article

The SEC’s Transfer Agent Modernization Proposal: Implications For Onchain Recordkeeping

The SEC has proposed a comprehensive overhaul of transfer agent regulations that would formally recognize distributed ledger technology and blockchain-based recordkeeping systems within the existing regulatory framework. This modernization effort imposes enhanced operational, safeguarding, and compliance obligations while establishing technology-neutral standards that could significantly impact tokenization initiatives and digital asset market infrastructure.
United StatesFinance and Banking
WilmerHale
WilmerHale
Article

Washington Attorney General Publishes First Data Privacy Report

Washington Attorney General Nick Brown released the state's first Data Privacy Report, examining how the modern data economy incentivizes personal information collection and retention. The report catalogs resulting harms and recommends that lawmakers strengthen privacy protections, enforcement, and public education while highlighting Washington's continued lack of a comprehensive consumer privacy statute despite inspiring other states' privacy laws.
United StatesPrivacy
WilmerHale
WilmerHale