Checklist before your first AI project

Five points from my guide on AI and the GDPR. Not legal advice.

The five points

1. Which kinds of data will the AI see?
2. Is there a data processing agreement with the provider?
3. Where is the data processed?
4. At which step does a person approve?
5. Does the use fall under an obligation from the EU AI Act?

How to use it

Go through the list with the person who knows the process. Settle whatever is still open before the first live run.