COMPEL Glossary / gdpr
GDPR
The General Data Protection Regulation (GDPR) is the European Union's comprehensive data protection law that governs how personal data of EU residents is collected, processed, stored, and transferred, imposing strict requirements for lawful basis, consent, data minimization, purpose limitation, individual rights (access, deletion, portability), data protection impact assessments, and breach notification.
What this means in practice
For organizations developing and deploying AI systems, GDPR creates significant obligations because AI typically requires large volumes of data, including personal data, and automated decision-making about individuals triggers additional protections including the right to explanation and the right to human intervention. In COMPEL, GDPR compliance is assessed under the Governance pillar during Calibrate and forms a primary regulatory constraint that shapes the governance architecture designed during the Model stage, with cross-border implications addressed in Module 4.3.
Why it matters
GDPR creates significant obligations for AI systems because automated decision-making about individuals triggers additional protections including the right to explanation and the right to human intervention. Organizations developing AI must ensure lawful basis for data processing, implement data minimization, enable individual rights, and conduct data protection impact assessments. Non-compliance penalties can reach 4% of global annual turnover.
How COMPEL uses it
GDPR compliance is assessed under the Governance pillar during Calibrate, evaluating current data protection practices against regulatory requirements. During Model, GDPR constraints shape the governance architecture design, influencing data handling, consent management, and explainability requirements. Module 4.3 addresses cross-border GDPR implications for organizations operating across jurisdictions, and the Evaluate stage audits compliance status.
Related Terms
Other glossary terms mentioned in this entry's definition and context.