Episode 6 of 10
GDPR-proof AI: four checks
Ask every AI supplier four things: does it run in an EU region, is your data kept out of training, is there a data processing agreement, and is access set per role.
Check yourself
You compare two AI tools for emails to clients. Which questions do you put to both suppliers?
These four decide where your data goes and who can see it. Speed, price or one certificate do not.
Show text
02 · Basic
AI and the rules
The AI Act, Article 4 AI literacy and GDPR-proof AI in plain language: what a company of 10 to 100 people has to arrange, and what it does not.
0:39Ep. 1What is the AI Act?
0:39Ep. 2The four risk classes
0:40Ep. 3AI literacy: Article 4
0:37Ep. 4How to show it
0:41Ep. 5The AI register
0:36Ep. 6GDPR-proof AI: four checks
0:38Ep. 7'EU-hosted' is not the whole answer
0:39Ep. 8DPIA: when you need one
0:37Ep. 9Oversight that actually works
0:36Ep. 10An AI policy on one page
After this series you can:
- You place an AI use in a risk class and spot when it moves to high risk.
- You arrange per role what people learn about AI and who approves, and you record it.
- You put the four privacy questions to an AI supplier and spot when a DPIA is needed.