DefinitionIn forcev1.0.0

Personal data

The AI Act deliberately creates no separate concept here and refers to the GDPR. Your GDPR records and your AI Act file must therefore cover the same data.

The official source remains authoritative. This is general information about obligations and not legal advice. See this object on the map

Address and citation

This object has an address of its own that is never renamed or reused. Store the identifier in your own file, not the title or the link.

Identifier: praxikon:eu:ai-act:definition:definitie-persoonsgegevens
Payload hash (sha256): 5f531533c5f033ec83c79b8dbe127db1de6e7a95344d8a02855f2838f3d57b0e

Citation line

Praxikon, "Personal data", praxikon:eu:ai-act:definition:definitie-persoonsgegevens@1.0.0, dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.1.0 (schema 1.4.0), effective_at 2026-08-08T00:00:00.000Z, known_at 2026-08-14T00:00:00.000Z, sha256 5f531533c5f033ec83c79b8dbe127db1de6e7a95344d8a02855f2838f3d57b0e

Version: 1.0.0
Legal time (effective_at): 8 August 2026
Knowledge time (known_at): 8 August 2026
Closed on: Not closed
Application date: 1 August 2024
Topics: definitions

Review status: Placed against the official source (8 August 2026). Next check due by 4 February 2027. The check date is the knowledge date of this version; no later recheck has been recorded.

What this object links to

Every relation appears below as a path: from the source with its locator, through the conditions and exceptions of the object carrying the relation, to the consequence. A locator belongs to a statement in the data and not to a relation, so the source is the source anchor of the carrying object.

What this object is about

2 of 2 shown

The object is about this role. Undifferentiated: it does not follow that the duty rests on this role.

Source
Official fact on this object, with its locator.
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 3(50)
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
Via
No condition or exception recorded on this object.
Consequence
- ActorDeployer
  praxikon:eu:ai-act:actor:deployer
- ActorProvider of an AI system
  praxikon:eu:ai-act:actor:provider

What this object states

Official fact

Attributable to a named primary source, with a locator. Where they differ, the official source prevails.

Article 3(50) defines personal data as personal data as defined in Article 4, point (1), of Regulation (EU) 2016/679.
- Locator: Article 3(50)praxikon:eu:ai-act:source:reg-eu-2024-1689Open official source

Our interpretation

Our own reading. It can change without the law changing, and it is not the position of a supervisory authority.

The cross-reference looks dull but has a practical effect: there is no room for a separate AI Act reading of what constitutes personal data. Where the AI Act does open space, such as Article 10(5) permitting processing of special categories to detect and correct bias in high-risk systems, GDPR safeguards apply in full and additional conditions attach. Organisations that keep AI governance and privacy in separate files end up with conflicting descriptions of the same processing, precisely when a supervisor asks for both.
- Locator: Article 3(50)praxikon:eu:ai-act:source:reg-eu-2024-1689Open official source

Recommended step

A practical step we consider appropriate. Not an obligation following from the Regulation.

Link every AI system in your AI register to the corresponding processing activity in your GDPR record, using one shared identifier, so that a single change updates both files.
- Locator: Article 3(50)praxikon:eu:ai-act:source:reg-eu-2024-1689Open official source

When this applies

No condition recorded on this object.

When this does not apply

No exception recorded on this object.

Referring to this object

Citation block

Copy this reference into your advice, article or file. The identifier, the version and the hash keep the statement findable later, even once the dataset has moved on.

Reference

Praxikon, "Personal data",
praxikon:eu:ai-act:definition:definitie-persoonsgegevens@1.0.0,
dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.1.0 (schema 1.4.0),
effective_at 2026-08-08T00:00:00.000Z, known_at 2026-08-08T00:00:00.000Z,
sha256 5f531533c5f033ec83c79b8dbe127db1de6e7a95344d8a02855f2838f3d57b0e,
https://www.praxikon.com/en/verkenner/definition/definitie-persoonsgegevens
(https://www.praxikon.com/api/v1/entities?id=praxikon%3Aeu%3Aai-act%3Adefinition%3Adefinitie-persoonsgegevens&effective_at=2026-08-08&known_at=2026-08-08&lang=en, accessed 2026-08-23)

Short form

praxikon:eu:ai-act:definition:definitie-persoonsgegevens@1.0.0 (sha256 5f531533)

BibTeX

@misc{praxikon-eu-ai-act-definition-definitie-persoonsgegevens-1-0-0,
  author       = {{Praxikon}},
  title        = {Personal data},
  year         = {2026},
  version      = {1.0.0},
  number       = {praxikon:eu:ai-act:definition:definitie-persoonsgegevens},
  howpublished = {AI Act Change \& Evidence Graph, dataset 2.1.0, schema 1.4.0},
  note         = {effective_at 2026-08-08T00:00:00.000Z; known_at 2026-08-08T00:00:00.000Z; sha256 5f531533c5f033ec83c79b8dbe127db1de6e7a95344d8a02855f2838f3d57b0e},
  url          = {https://www.praxikon.com/en/verkenner/definition/definitie-persoonsgegevens},
  urldate      = {2026-08-23},
  language     = {en}
}

CSL JSON

[
  {
    "id": "praxikon:eu:ai-act:definition:definitie-persoonsgegevens@1.0.0",
    "type": "dataset",
    "title": "Personal data",
    "container-title": "AI Act Change & Evidence Graph",
    "publisher": "Praxikon",
    "version": "1.0.0",
    "number": "praxikon:eu:ai-act:definition:definitie-persoonsgegevens",
    "URL": "https://www.praxikon.com/en/verkenner/definition/definitie-persoonsgegevens",
    "language": "en",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          8
        ]
      ]
    },
    "accessed": {
      "date-parts": [
        [
          2026,
          8,
          23
        ]
      ]
    },
    "note": "dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.1.0; schema 1.4.0; effective_at 2026-08-08T00:00:00.000Z; known_at 2026-08-08T00:00:00.000Z; sha256 5f531533c5f033ec83c79b8dbe127db1de6e7a95344d8a02855f2838f3d57b0e; retrieved_from https://www.praxikon.com/api/v1/entities?id=praxikon%3Aeu%3Aai-act%3Adefinition%3Adefinitie-persoonsgegevens&effective_at=2026-08-08&known_at=2026-08-08&lang=en; licence https://www.praxikon.com/nl/legal/terms"
  }
]

How to verify a reference later is set out in the methodology. Terms

For agents and integrations

This page and the machine output come from the same object and the same two time axes.

Open as JSON Open as JSON-LD Read the methodology