Back to the database
Record STMT-W4BB7DALegally binding

Recital 10 | AI Act

Recital 10 | AI Act Service Desk

Regulation State lawEuropean Unionin force

Recital 10 of the AI Act clarifies that the regulation does not affect existing EU data protection laws, including Regulations (EU) 2016/679 and (EU) 2018/1725, Directive (EU) 2016/680, and Directive 2002/58/EC. It ensures that data subjects retain all their rights, guarantees, and protections—such as those related to automated decision-making and profiling—when AI systems process personal data. Furthermore, the AI Act's harmonised rules are designed to facilitate the effective implementation and exercise of these existing data protection rights and remedies.

Summary and content fields are drawn from the document text and are pending editorial review.

Who issued it

European ParliamentLegislature
Lead issuer
Council of the European UnionGovernment
Co-issuer
Legal forceLegally binding
Under whose authorityState law
Judged fromfull text

Who it governs

General publicRegulatorsCompaniesAI developers and providersAI deployers and users

Regulators, legal professionals, AI developers, and AI deployers who need to understand how the AI Act interacts with existing EU data protection laws.

Sectors
Cross-sector

What the document contains

What's covered

The relationship between the AI Act and existing EU data protection frameworks, ensuring that data protection rights and obligations remain fully applicable and unimpeded when AI systems process personal data.

What's missing

Specific operational compliance steps, technical definitions of AI, or enforcement mechanisms outside of referencing existing data protection authorities.

Key takeaways
  • The AI Act does not affect the application of existing Union law governing the processing of personal data.
  • Providers and deployers must still comply with their existing data controllers' or processors' obligations under data protection law.
  • Data subjects maintain all of their rights and guarantees under EU data protection law, including protections against solely automated individual decision-making and profiling.
  • The regulation's harmonised rules facilitate the exercise of data subjects' rights and remedies guaranteed under EU data protection law.
IssuedNot recorded
Length1,672 words
FormatNot recorded
Scoperegional

How it scores

Pending review

Each score is backed by a quote verified against the document text. Editorial review has not yet confirmed them.

Accountability

0/5

Clear responsibility for AI outcomes

screening score · 2026-10-23

Fairness

0/5

Non-discrimination and equitable treatment

screening score · 2026-10-23

Human Dignity

0/5

Respect for the inherent worth of persons

screening score · 2026-10-23

Human Oversight

2/5

Humans remain in control of consequential decisions

rights related to solely automated individual decision-making, including profiling

Recital 10

screening score · 2026-10-23

Privacy

4/5

Protection of personal data and private life

The fundamental right to the protection of personal data is safeguarded in particular by Regulations (EU) 2016/679

Recital 10

screening score · 2026-10-23

Transparency

0/5

Openness about how AI systems work and are used

screening score · 2026-10-23

Enforcement

0/5

Consequences and compliance mechanisms with real force

screening score · 2026-10-23

Impact Assessment

0/5

Required assessment of an AI system's risks/impacts before or during use

screening score · 2026-10-23

Topics

data_protection privacy fundamental_rights gdpr automated_decision_making