Undoubtedly, one of the most discussed topics in the final days of 2023 was the provisional agreement of the European Union on the Artificial Intelligence Act (AI Act). Its significance is anticipated to endure throughout 2024, solidifying its position as a central topic of conversation. While the text is yet to be formally adopted and could undergo some modifications, the foundational framework of the world's first global regulation of AI has been set.

Simultaneously, the European Commission has released a Q&A on the AI Act, covering various aspects, including the need for regulating AI usage, the scope and application of the Act, the impact of regulations on protecting fundamental rights and potential sanctions for violations.

In light of this significant development, the upcoming months will be crucial for stakeholders to carefully consider and ensure compliance with the provisions outlined in the Act. Additionally, it is essential to recognise the interplay between the AI Act and the General Data Protection Regulation (GDPR). Despite some distinctions, many of the AI Act’s risk management obligations cover similar topics as those in the GDPR but in a more detailed manner. This creates a harmonious relationship that empowers Data Protection Authorities (DPAs) to interpret the GDPR consistently with the requirements of the forthcoming AI Act, particularly in areas such as impact assessment, data governance, and human oversight. Therefore, it is likely that DPAs will soon begin enforcing the requirements of the EU AI Act.