EU data protection regulation emphasizing lawful basis, data minimization, access/erasure rights, and DPIAs—relevant when AI features process personal data.
The GDPR is not an “IT checkbox.” Engineering choices—what you log, fine-tune on, retrieve into prompts, and retain in vector stores—can trigger obligations.
Disclaimer
This is educational context, not legal advice. Partner with privacy counsel for processing agreements, transfers, and DPIAs when shipping customer-facing AI.