AI and the Art. 30 GDPR Records of Processing
AI systems processing personal data must be included in the Art. 30 GDPR records of processing. What the rule requires, and where gaps commonly arise.
Read more →KomplAI blog
GDPR & AI
GDPR and AI: legal bases, automated decisions under Art. 22, when a DPIA is required and data-subject rights in a model context — evidence, not guesswork.
Employee Data and AI: Section 26 BDSG in Practice
How Section 26 BDSG limits the use of AI in recruitment and workforce analytics, and why necessity and co-determination remain decisive factors.
Read more →Art. 32 GDPR: Documenting TOMs Properly
Art. 32 GDPR requires appropriate TOMs based on risk. What this means in practice, typical gaps, and how to document compliance.
Read more →AI Providers as Processors: Art. 28 GDPR Explained
When AI providers process personal data, you need an Art. 28 contract. What must be included and where the typical gaps lie.
Read more →Legal Basis for AI Training: Art. 6 GDPR
Training AI models with personal data requires a lawful basis under Art. 6 GDPR. We examine legitimate interest, purpose change and typical common gaps.
Read more →Art. 22 GDPR: Limits on Automated Decisions
Art. 22 GDPR: when automated decisions and AI profiling are lawful – covering obligations, exceptions and typical compliance gaps in practice.
Read more →DPIA for AI Systems: When Art. 35 GDPR Applies
AI systems almost always trigger a data protection impact assessment under the GDPR. What Art. 35 GDPR requires and where the typical gaps lie in practice.
Read more →