{"id":123122,"date":"2024-08-11T07:05:00","date_gmt":"2024-08-11T05:05:00","guid":{"rendered":"https:\/\/ceadigilaw.org\/blog\/the-regulatory-dichotomy-gdpr-and-the-ai-act\/"},"modified":"2024-08-11T07:05:00","modified_gmt":"2024-08-11T05:05:00","slug":"the-regulatory-dichotomy-gdpr-and-the-ai-act","status":"publish","type":"post","link":"https:\/\/ceadigilaw.org\/ar\/blog\/the-regulatory-dichotomy-gdpr-and-the-ai-act\/","title":{"rendered":"The regulatory dichotomy: the GDPR and the AI Act"},"content":{"rendered":"<div lang=\"en\" dir=\"ltr\">\n<p><span style=\"color: #000000\"><strong><a style=\"color: #000000\" href=\"\/en\/members\/antonio-tejeda-encinas\/\" target=\"_blank\" rel=\"noopener\">Antonio Tejeda Encinas<\/a><\/strong>. Lawyer. President of the Euro-American Committee of Digital Law &#45; <strong><a style=\"color: #000000\" href=\"\/en\/\" target=\"_blank\" rel=\"noopener\">CEA Digital Law<\/a><\/strong><\/span><\/p>\n<p><span style=\"color: #000000\">Within the vast and intricate web of European regulation, the General Data Protection Regulation (GDPR) and the EU Artificial Intelligence Act (AI Act) stand out as two pillars that reflect the sophistication and global reach of European Union law. Both seek to protect EU citizens and to ensure that technologies and business practices are aligned with European values, yet their approaches and the criteria that determine when they apply are markedly different.<\/span><\/p>\n<p><span style=\"color: #000000\"><strong>The extraterritorial scope of the GDPR<\/strong><\/span><\/p>\n<p><span style=\"color: #000000\">The GDPR, which took effect in May 2018, transformed the data protection landscape by laying down strict rules on how the personal data of EU residents must be handled. Its extraterritorial application rests on two main criteria:<\/span><\/p>\n<p><span style=\"color: #000000\"><strong>The establishment criterion:<\/strong> <\/span><br \/>\n<span style=\"color: #000000\">Under this criterion, the GDPR applies where a company has an \u2018establishment\u2019 in the EU and processes personal data in the context of its activities in the Union. The term \u2018establishment\u2019 is interpreted broadly here, covering any physical presence that involves the effective conduct of business within the EU.<\/span><\/p>\n<p><span style=\"color: #000000\"><strong>The targeting criterion:<\/strong> <\/span><br \/>\n<span style=\"color: #000000\">The GDPR also applies to companies outside the EU that offer goods or services to individuals in the Union or monitor their behaviour. Monitoring may include online tracking through cookies or marketing techniques that analyse user behaviour.<\/span><\/p>\n<p><span style=\"color: #000000\">At its core, the GDPR protects individuals\u2019 fundamental rights over their data, ensuring that any entity processing the data of EU citizens does so within a clear and accountable framework.<\/span><\/p>\n<p><span style=\"color: #000000\"><strong>The extraterritorial scope of the AI Act<\/strong><\/span><\/p>\n<p><span style=\"color: #000000\">By contrast, the AI Act, which entered into force on 1 August 2024, takes a broader and in many respects more aggressive approach. Designed to regulate the use of artificial intelligence technologies that may have an impact in the EU, it applies regardless of whether the provider or developer of the AI intended to target the European market.<\/span><\/p>\n<p><span style=\"color: #000000\">This approach stems from the transformative and potentially disruptive nature of AI. The EU wants to ensure that any AI system operating within its jurisdiction meets high standards of transparency, ethics and safety, whatever the developer\u2019s original intention.<\/span><\/p>\n<p><span style=\"color: #000000\"><strong>The AI Act\u2019s protectionist approach<\/strong><\/span><\/p>\n<p><span style=\"color: #000000\">The AI Act\u2019s protectionist stance may seem strict, but it reflects the EU\u2019s clear intention to lead the world in the regulation of artificial intelligence. By requiring any AI system with an impact in the EU to comply with its rules, the EU protects not only its citizens but also its market and its ethical values. This approach may have several consequences:<\/span><\/p>\n<p><span style=\"color: #000000\"><strong>Incentives for responsible innovation:<\/strong> <\/span><br \/>\n<span style=\"color: #000000\">By setting high standards, the EU could foster innovation within an ethical and safe framework. Companies that meet these standards could benefit from a more accessible European market.<\/span><\/p>\n<p><span style=\"color: #000000\"><strong>Challenges for non-EU companies:<\/strong> <\/span><br \/>\n<span style=\"color: #000000\">AI companies outside the EU could face significant difficulties in complying with these rules, which could limit the availability of certain services or technologies on the European market.<\/span><\/p>\n<p><span style=\"color: #000000\"><strong>A position of global leadership:<\/strong> <\/span><br \/>\n<span style=\"color: #000000\">The EU could consolidate its position as a global leader in AI regulation, setting precedents that other regions might follow and thereby promoting safer and more ethical AI worldwide.<\/span><\/p>\n<p><span style=\"color: #000000\">Ultimately, understanding these differences is crucial for global businesses. While the GDPR focuses on consent and intention in the processing of data, the AI Act broadens the scope towards the preventive regulation of emerging technologies. This dichotomy highlights not only the sophistication of EU law but also its leadership in shaping a global environment in which technology serves humanity responsibly and ethically.<\/span><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Antonio Tejeda Encinas. Lawyer. President of the Euro-American Committee of Digital Law &#45; CEA Digital Law Within the vast and intricate web of European regulation, the General Data Protection Regulation (GDPR) and the EU Artificial Intelligence Act (AI Act) stand out as two pillars that reflect the sophistication and global reach of European Union law. [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":112090,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"wds_primary_category":0,"wds_primary_cea_women":0,"footnotes":""},"categories":[1126,1132],"tags":[],"cea_women":[],"class_list":["post-123122","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-inteligencia-artificial-ar","category-proteccion-de-datos-y-privacidad-ar"],"acf":[],"_links":{"self":[{"href":"https:\/\/ceadigilaw.org\/ar\/wp-json\/wp\/v2\/posts\/123122","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ceadigilaw.org\/ar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ceadigilaw.org\/ar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ceadigilaw.org\/ar\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/ceadigilaw.org\/ar\/wp-json\/wp\/v2\/comments?post=123122"}],"version-history":[{"count":0,"href":"https:\/\/ceadigilaw.org\/ar\/wp-json\/wp\/v2\/posts\/123122\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ceadigilaw.org\/ar\/wp-json\/wp\/v2\/media\/112090"}],"wp:attachment":[{"href":"https:\/\/ceadigilaw.org\/ar\/wp-json\/wp\/v2\/media?parent=123122"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ceadigilaw.org\/ar\/wp-json\/wp\/v2\/categories?post=123122"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ceadigilaw.org\/ar\/wp-json\/wp\/v2\/tags?post=123122"},{"taxonomy":"cea_women","embeddable":true,"href":"https:\/\/ceadigilaw.org\/ar\/wp-json\/wp\/v2\/cea_women?post=123122"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}