AI Agents and GDPR: legal basis, automated decisions and data controller qualification

AI Agents and GDPR: Which Legal Basis Applies?

AI agents and personal data: legal basis, automated decisions under Art. 22, data controller qualification, and the Digital Omnibus Art. 88c proposal. Three practical scenarios for businesses and professionals.

16 April 2026 · 16 min · NicFab
Image Credits: AI generated

AI Act: Deployers, AI Agents and Transparency Obligations — The State of Play in Spring 2026

Misinformation is circulating about deployer obligations. This post sets the record straight: definition of deployer (Art. 3(4)), actual obligations (Art. 26 for high-risk only), official materials on transparency (Art. 50), the Commission’s position on AI agents (AI Act Service Desk FAQ), correct deadlines (Art. 113), actual penalties (Art. 99) and an operational framework for businesses and professionals.

8 April 2026 · 12 min · NicFab
EU AI Act: Final Training Data Transparency Template Published

EU AI Act: Final Training Data Transparency Template Published

The European Commission today finalized its official template for AI training data transparency, providing the definitive framework for compliance with the EU AI Act. What’s confirmed today (July 24, 2025): Final template after extensive stakeholder consultation (430+ responses) Comprehensive disclosure requirements across all training phases Balanced approach protecting trade secrets while ensuring transparency Clear implementation timeline with enforcement starting August 2026 Key disclosure requirements: General Information: Model identification, modalities, training data size ranges, linguistic characteristics Data Sources: Public datasets, licensed content, web-scraped data (top 10% of domains), user data, synthetic/AI-generated training data Legal Compliance: Copyright reservation, respect, illegal content removal measures Critical timeline: ...

24 July 2025 · 1 min · NicFab