Sources
Every check is based on these texts. Last checked: 15 October 2026. A lawyer review is still pending.
When the AI Act applies
- 2 Feb 2025: Banned AI uses and the AI literacy duty (Art. 4, Art. 5) apply.
- 2 Aug 2025: Rules for general-purpose AI models apply.
- 2 Aug 2026: Labelling duties (Art. 50) and most high-risk rules apply.
EU laws
AI Act Art. 4
Companies must make sure staff who use AI understand it well enough.
Official text (opens in a new tab)AI Act Art. 5
Lists banned AI uses, such as reading emotions of staff at work.
Official text (opens in a new tab)AI Act Art. 6 and Annex III
Defines high-risk AI, such as hiring tools and credit scoring.
Official text (opens in a new tab)AI Act Art. 50
People must know when they talk to an AI or see AI-made content.
Official text (opens in a new tab)GDPR Art. 5 and 6
Use personal data only for a clear purpose and with a legal basis.
Official text (opens in a new tab)GDPR Art. 9
Health data is special and needs extra protection.
Official text (opens in a new tab)GDPR Art. 13
Tell people how you use their data, including AI tools.
Official text (opens in a new tab)GDPR Art. 28
A service that handles personal data for you needs a data processing agreement.
Official text (opens in a new tab)GDPR Art. 32
Keep personal data secure.
Official text (opens in a new tab)GDPR Art. 88
Extra rules for employee data, set by each country.
Official text (opens in a new tab)
Tool terms
ChatGPT (OpenAI)
Business privacy and data processing terms for ChatGPT Team and Enterprise.
Official text (opens in a new tab)Link still to be confirmed by hand.
Microsoft 365 Copilot
How Copilot handles your data and the EU data boundary.
Official text (opens in a new tab)Gemini for Google Workspace
Google's privacy terms for AI in Workspace.
Official text (opens in a new tab)DeepL Pro
DeepL Pro data security and text deletion.
Official text (opens in a new tab)Canva
Canva privacy policy.
Official text (opens in a new tab)