Employee Data and AI: Section 26 BDSG in Practice
How Section 26 BDSG limits the use of AI in recruitment and workforce analytics, and why necessity and co-determination remain decisive factors.
Read more →KomplAI blog
GDPR & AI
GDPR and AI: legal bases, automated decisions under Art. 22, when a DPIA is required and data-subject rights in a model context — evidence, not guesswork.
Art. 32 GDPR: Documenting TOMs Properly
Art. 32 GDPR requires appropriate TOMs based on risk. What this means in practice, typical gaps, and how to document compliance.
Read more →AI Providers as Processors: Art. 28 GDPR Explained
When AI providers process personal data, you need an Art. 28 contract. What must be included and where the typical gaps lie.
Read more →Legal Basis for AI Training: Art. 6 GDPR
Training AI models with personal data requires a lawful basis under Art. 6 GDPR. We examine legitimate interest, purpose change and typical common gaps.
Read more →Art. 22 GDPR: Limits on Automated Decisions
Art. 22 GDPR: when automated decisions and AI profiling are lawful – covering obligations, exceptions and typical compliance gaps in practice.
Read more →DPIA for AI Systems: When Art. 35 GDPR Applies
AI systems almost always trigger a data protection impact assessment under the GDPR. What Art. 35 GDPR requires and where the typical gaps lie in practice.
Read more →