Irreversibility and Technical Finality

Human action and human supervision

Technical robustness and safety

Government-exclusive AI

Fines up to 70 Mio. EUR or 15% of total worldwide annual turnover for the preceding financial year (whichever is higher).

Fines up to 35 Mio. EUR or 7% of total worldwide annual turnover for the preceding financial year (whichever is higher).

Fines up to 20 Mio. EUR or 4% of total worldwide annual turnover for the preceding financial year (whichever is higher).

Fines up to 5 Mio. EUR or 1% of total worldwide annual turnover for the preceding financial year (whichever is higher).

Regulations require transposition into national law

Directives apply automatically without national implementation

Regulations apply directly in Member States

Directives can never create rights for individuals

The cost of repairing the defective product itself

Damage to property other than the defective product itself 

Personal injury or death

Economic loss (e.g. due to a missed business opportunity)

In the consumer’s favour

Randomly

In the trader’s favour

According to platform policy

The new EU Road Traffic Act is harmonising driving rules within the EU 27 

There is EU law dealing with technical requirements for automated vehicles marketed in the EU

Some member states have enacted national road traffic rules based on the vehicle’s degree of autonomy 

For safety reasons, automated driving is mandatory for citizens aged over 80 

An exchange of declarations in writing

A sufficiently determinate offer 

An acceptance corresponding to the offer

An answer to the offer within one business day

AI systems intended to be used as safety components in the management and operation of critical digital infrastructure.

AI systems for recommending movies and music

AI systems included in medical devices

AI-powered horoscope generators

Principle of Purpose Limitation

Principle of Integrity and Confidentiality

Principle of Data Harmonization

Principle of Data Autonomy 

The GDPR applies to the processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union, regardless of whether the processing takes place in the Union or not.

The GDPR applies to the processing of personal data of data subjects who are in the Union by a controller or processor not established in the Union, where the processing activities are related to the monitoring of their behavior as far as their behavior takes place within the Union.

The establishment principle is a fundamental part of the Data Protection Impact Assessment.

The GDPR applies to the processing of personal data of data subjects who are in the Union by a controller or processor not established in the Union, where the processing activities are related to the offering of goods or services to data subjects within the European Union.