The European Commission is proposing substantial revisions to the AI Act and GDPR, representing a pivotal moment for AI governance within the EU. The proposed reforms would broaden the scope for using personal data in AI training under the “legitimate interest” legal basis and introduce targeted exemptions for AI developers. These changes are intended to stimulate innovation and reinforce Europe’s position in the global AI sector.
However, these proposals have sparked considerable debate. Industry leaders welcome the increased flexibility, while privacy advocates caution that such measures could erode established data protection standards. The final outcome will have substantial implications for organizations developing or deploying AI within the EU, particularly regarding compliance obligations and risk management.
A final decision on these amendments is expected from the European Commission on 19 November 2025. We advice businesses to closely monitor these legislative developments and proactively review their data governance and compliance frameworks to ensure readiness for potential regulatory shifts.
#AIRegulation #GDPR #EUAIAct #DataProtection #LegalUpdate #RuneLexAIActExperts
Image by Vecteezy
RuneLex AI 
Leave a comment