> For the complete documentation index, see [llms.txt](https://docs.assenteo.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.assenteo.com/ai-and-data-protection/gdpr-and-ai.md).

# GDPR and AI

Regardless of the risk category of your AI system, GDPR must be followed if your business has any users in the EU/ EEA.

The following elements of GDPR are often particularly relevant to businesses deploying any sort of AI system: 

* lawful basis for processing;
* purpose limitation and storage limits;
* special category data processing restrictions;
* automated decision-making;
* profiling and inference of sensitive data
* data protection impact assessments;
* data transfers.

**Data Mapping**

Data mapping is useful to understand how the data flows through your AI system and interacts with data protection legislation. 

Data mapping involves: 

* Mapping how your business interacts with personal data during the lifecycle of the AI system you provide/ deploy: Training data → model outputs → deployment. 
* Relating each stage to the rights individuals have under GDPR (information/notice, access, rectification, erasure, restrict processing, data portability, objection). 
* Ensuring that these rights are preserved at each stage .

**Data Mapping in Practice**

Practical steps your business can take to ensure your AI use remains compliant with data privacy laws:

* Map your business’s processing of all personal data, including that of users and internal employees
* Review your AI disclosure processes
* Review your internal AI education policy
* Ensure that sufficient human oversight is taking place
* Consider appointing a DPO to help ensure compliance with the legislation
* Consider appointing a Privacy Partner to help ensure equal regulatory compliance and business strategy


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.assenteo.com/ai-and-data-protection/gdpr-and-ai.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.