Safety

GDPR

The EU's data protection law. It sets rules for how organisations collect, store, and use people's personal data, with real penalties for getting it wrong.

GDPR in three ideas A GDPR badge next to three principles: a lawful reason, collect only what you need, respect people's rights. GDPR EU data law • A lawful reason to hold data • Collect only what you need • Respect people's rights

GDPR is the European Union's data protection law. It governs how any organisation, in the EU or dealing with EU residents, may collect and use personal data. Three plain ideas sit under it: have a good reason to hold data, collect only what you need, and respect people's rights over their own data.

For AI at work it matters because what you paste into a tool may be personal data. Know your organisation's policy before you share it. (This is general information, not legal advice.)

Often confused with: A blanket ban on data. GDPR does not forbid using data; it sets rules for using it responsibly and lawfully.

See it in a lesson: AI at work: safety and privacy

Further reading

All terms