Does the AI Act on artificial intelligence replace the GDPR?

ANSWER

No, the AI Act expressly provides that where personal data are processed directly, the GDPR applies. As a rule, the AI Act does not affect the application of the GDPR, except in two cases:

• processing of special category data in the context of bias research and corrective actions
• purpose change (Article 6(4) GDPR) in connection with processing data within regulatory sandboxes.