Abstract

The article analyses the concept of a risk-based approach in EU legislation on the basis of the proposed Regulation of the European Parliament and of the Council laying down harmonized rules on artificial intelligence (Artificial Intelligence Act) and amending certain Union legislative acts, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). The article outlines the interdependence of the provisions of the two acts and the obligations of personal data controllers arising from them.