Privacy Protection in the Age of Artificial Intelligence: An Analytical Study of the European Legal Framework
Keywords:
Artificial Intelligence, Privacy, Data Protection, European AI ActAbstract
This study analyzes privacy protection in the context of artificial intelligence through the European legal framework, particularly the 2024 AI Act and the GDPR. It examines the constitutional foundations that establish data protection as an autonomous fundamental right and analyzes the AI Act’s risk-based regulatory structure. The interaction and complementarity between the two instruments in enhancing privacy safeguards are also explored. The research concludes that the European model integrates rights-based protection with operational technical requirements, strengthening overall privacy protection.
Downloads
References
-Alexandra Ziaka, Businesses’ Corporate Responsibility For A Human Rights-Centred Artificial Intelligence, SCHOOL OF LAW, UNIVERSITY OF ESSEX, Angleterre, 2018- 2019.
-Brkan, Maja, "The Essence of the Fundamental Rights to Privacy and Data Protection: Finding the Way Through the Maze of the CJEU's Constitutional Reasoning", German Law Journal, Vol. 20, No. 6 (2019).
-Brkan, Maja, "The Concept of Essence of Fundamental Rights in the EU Legal Order: Peeling the Onion to its Core", European Constitutional Law Review, Vol. 14, No. 2 (2018),
-De Hert, Paul & Gutwirth, Serge, "Data Protection in the Case Law of Strasbourg and Luxemburg: Constitutionalisation in Action", in Gutwirth, S., Y. Poullet, P. De Hert, J. Nouwt & C. De Terwangne (eds.), Reinventing Data Protection?, Springer Science, Dordrecht, 2009.
-Veale, Michael & Zuiderveen Borgesius, Frederik, "Demystifying the Draft EU Artificial Intelligence Act: Analysing the Good, the Bad, and the Unclear Elements of the Proposed Approach", Computer Law Review International, Vol. 22, No. 4 (2021),
-Mittelstadt, Brent D., Allo, Patrick, Taddeo, Mariarosaria, Wachter, Sandra & Floridi, Luciano, "The Ethics of Algorithms: Mapping the Debate", Big Data & Society, Vol. 3, No. 2 (2016),
-Nisevic, Maja, Cuypers, Arno & De Bruyne, Jan, "Explainable AI: Can the AI Act and the GDPR Go Out for a Date?", in Proceedings of the 2024 International Joint Conference on Neural Networks (IJCNN), IEEE, 2024.
-Charter of Fundamental Rights of the European Union, 2012 O.J. (C 326) 391
-Explanations relating to the Charter of Fundamental Rights of the European Union (2007 Version), Official Journal of the European Union, 14.12.2007, No C 303, pp. 17-35
-Treaty on European Union (TEU) [consolidated version].
-Treaty on the Functioning of the European Union (TFEU) [consolidated version]
-Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act), O.J. L, 2024/1689.
-Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR), 2016 O.J. (L 119) 1.
-Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, 1995 O.J. (L 281) 31.
-Council of Europe Convention for the Protection of Individuals with regard to -Automatic Processing of Personal Data (Convention 108), 28 January 1981, ETS No. 108
-European Convention for the Protection of Human Rights and Fundamental -Freedoms (ECHR), 4 November 1950, ETS No. 5.
-ECJ, Joined Cases C-293/12 and C-594/12, Digital Rights Ireland Ltd v Minister for Communications, Marine and Natural Resources, ECLI:EU:C:2014:238, Judgment of 8 April 2014, [2015] Q.B. 127.
-ECJ, Case C-362/14, Maximillian Schrems v Data Protection Commissioner, ECLI:EU:C:2015:650, Judgment of 6 October 2015, [2016] Q.B. 527.
-ECJ, Case C-203/15, Tele2 Sverige AB v Post-och telestyrelsen and Secretary of State for the Home Department v Tom Watson and Others, ECLI:EU:C:2016:970, Judgment of 21 December 2016, [2017] Q.B. 771.
-ECJ, Joined Cases C-465/00, C-138/01 and C-139/01, Rechnungshof v Österreichischer Rundfunk and Others and Christa Neukomm and Joseph Lauermann v Österreichischer Rundfunk, ECLI:EU:C:2003:294, Judgment of 20 May 2003.
-ECJ, Case C-131/12, Google Spain SL and Google Inc. v Agencia Española de Protección de Datos (AEPD) and Mario Costeja González, ECLI:EU:C:2014:317, Judgment of 13 May 2014, [2014] Q.B. 1022.
-European Data Protection Board (EDPB) and European Data Protection Supervisor (EDPS), "Joint Opinion 5/2021 on the Proposal for a Regulation of the European Parliament and of the Council Laying Down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act)", 18 June 2021.
-European Commission, First Report on the Implementation of the Data Protection Directive (95/46/EC), COM (2003) 265 final, Brussels, 15 May 2003.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Journal of Legal Studies and Researches
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
