AI Agents and GDPR: legal basis, automated decisions and data controller qualification

AI Agents and GDPR: Which Legal Basis Applies?

AI agents and personal data: legal basis, automated decisions under Art. 22, data controller qualification, and the Digital Omnibus Art. 88c proposal. Three practical scenarios for businesses and professionals.

16 April 2026 · 16 min · NicFab
AI Agents and AI Act: when a deployer becomes a provider through customisation, integration or rebranding

AI Agents: When a Deployer Becomes a Provider

AI agents under the AI Act: when customisation, integration or rebranding triggers reclassification from deployer to provider under Article 25. Decision table, compliance checklist and first 5 actions.

13 April 2026 · 13 min · NicFab
Image Credits: AI generated

AI Act: Deployers, AI Agents and Transparency Obligations — The State of Play in Spring 2026

Misinformation is circulating about deployer obligations. This post sets the record straight: definition of deployer (Art. 3(4)), actual obligations (Art. 26 for high-risk only), official materials on transparency (Art. 50), the Commission’s position on AI agents (AI Act Service Desk FAQ), correct deadlines (Art. 113), actual penalties (Art. 99) and an operational framework for businesses and professionals.

8 April 2026 · 12 min · NicFab