Algorithmic discrimination under the AI Act and the GDPR
This EPRS briefing examines the legal interplay and potential tensions between the EU Artificial Intelligence Act and the General Data Protection Regulation regarding algorithmic discrimination and the processing of special categories of personal data. It highlights scenarios where AI causes discrimination, analyzes the provisions allowing sensitive data processing for bias monitoring, and discusses main challenges including the GDPR's restrictive nature and the need for legislative reform or further guidance.
Summary and content fields are drawn from the document text and are pending editorial review.
Who issued it
Who it governs
Members and staff of the European Parliament, policymakers, and researchers seeking to understand the regulatory intersection of EU AI and data protection laws.
What the document contains
This document covers the legal interplay between the EU AI Act and the GDPR concerning algorithmic discrimination, the processing of special categories of personal data for bias detection, and specific application scenarios such as generative AI, autonomous vehicles, job recruitment, and credit scoring.
It does not provide binding judicial rulings or enforceable regulatory decisions, serving instead as an analytical research briefing for parliamentary members.
- The EU AI Act aims to mitigate discrimination and bias in high-risk AI systems while the GDPR governs the protection of personal data.
- Article 10(5) of the AI Act permits the processing of special categories of personal data for bias monitoring and correction under strict conditions.
- Legal uncertainty exists because the GDPR appears more restrictive regarding the processing of sensitive personal data than the AI Act anticipates.
- When the AI Act and GDPR collide, the GDPR prevails, requiring compliance with principles such as data minimization and robust cybersecurity measures.
- Addressing these regulatory frictions may require future legislative reform or further interpretive guidance.
· AI systems and algorithmic discrimination: Some scenarios · Algorithmic discrimination and special categories of personal data · Main challenges
How it scores
Each score is backed by a quote verified against the document text. Editorial review has not yet confirmed them.
Accountability
0/5Clear responsibility for AI outcomes
screening score · 2026-10-23
Fairness
4/5Non-discrimination and equitable treatment
One of the AI Act' s main objectives is to mitigate discrimination and bias in the development, deployment and use of 'high-risk AI systems'.
AT A GLANCE
screening score · 2026-10-23
Human Dignity
2/5Respect for the inherent worth of persons
Some AI systems may cause discrimination, and harm individuals' fundamental rights.
AI systems and algorithmic discrimination: Some scenarios
screening score · 2026-10-23
Human Oversight
0/5Humans remain in control of consequential decisions
screening score · 2026-10-23
Privacy
4/5Protection of personal data and private life
The concept of special categories of personal data is defined in Article 9 GDPR
Algorithmic discrimination and special categories of personal data
screening score · 2026-10-23
Transparency
0/5Openness about how AI systems work and are used
screening score · 2026-10-23
Enforcement
1/5Consequences and compliance mechanisms with real force
The legal uncertainty this creates might need to be addressed through legislative reform or further guidance.
AT A GLANCE
screening score · 2026-10-23
Impact Assessment
3/5Required assessment of an AI system's risks/impacts before or during use
When determining whether a system is qualified as high-risk (Article 6 AI Act), the emphasis is on a given system's scope and the specific task it performed.
Algorithmic discrimination and special categories of personal data
screening score · 2026-10-23