EU AI Act
The EU regulation laying down harmonised rules on artificial intelligence, with obligations that scale with the risk of the AI system (Regulation (EU) 2024/1689).
It entered into force on 1 August 2024 and applies in stages: the prohibitions since 2 February 2025, the rules for general-purpose AI models since 2 August 2025, and the remaining obligations, including those for high-risk systems, in later stages. It sits alongside the GDPR rather than replacing it: when a vendor starts sending personal data to an AI provider, the GDPR’s rules on processors and transfers still apply.
Source: Regulation (EU) 2024/1689 ↗
Related terms
ClauseTrail watches vendors' subprocessor lists, DPAs, privacy policies, terms and AI terms, and tells your team what changed and by when to object.