Interplay between the AI Act and the EU digital legislative framework
This study explores how the Artificial Intelligence Act relates to other crucial pieces of EU digital legislation, such as the GDPR, the Data Act, and the Cyber Resilience Act. It assesses overlaps and gaps between these acts, and shows that, while each of them is individually well targeted, their interplay creates significant regulatory complexity. Finally, it provides reflections and suggestions for possible evolutions of the AI Act and EU digital legislation as a whole, keeping in mind the objective of ensuring that Europe can establish a competitive AI industry.
Summary and content fields are drawn from the document text and are pending editorial review.
Who issued it
Who it governs
Policymakers, regulators, researchers, and industry stakeholders seeking to understand and optimize the regulatory interplay between the AI Act and the wider EU digital framework.
What the document contains
The document addresses the relationship and interplay between the European Union's Artificial Intelligence Act and other horizontal or sector-specific EU digital legislation including the GDPR, the Data Act, the Data Governance Act, the Digital Services Act, the Digital Markets Act, the Cybersecurity Act, the Cyber Resilience Act, the NIS2 Directive, and the New Legislative Framework. It evaluates overlaps, gaps, and inconsistencies in regulatory requirements, institutional governance, and compliance mechanisms.
Not stated
- The AI Act sits at the heart of the EU's digital regulatory strategy but intersects with a complex corpus of existing legislation.
- While individual instruments like the GDPR, Data Act, and Cyber Resilience Act are well targeted, their interplay creates significant regulatory complexity.
- The study identifies structural tensions between product safety logic in the AI Act and fundamental rights protections.
- Governance architecture involving the AI Office and national bodies presents risks of regulatory fragmentation without robust coordination.
- Policy recommendations are provided for short, medium, and long-term actions to streamline the regulatory landscape and support competitiveness.
· LIST OF ABBREVIATIONS · LIST OF FIGURES · LIST OF TABLES · EXECUTIVE SUMMARY · INTRODUCTION TO THIS STUDY · A DEEPER LOOK AT THE AI ACT · THE AI ACT’S INTERPLAY WITH OTHER DIGITAL LEGISLATION · EU LEVEL GOVERNANCE – THE ROLE OF THE AI OFFICE · REFLECTIONS ON FUTURE AI LEGISLATION IN THE EU · REFERENCES · ANNEX - OVERVIEW OF THE AI ACT INTERPLAY WITH EU DIGITAL LEGISLATIONS
How it scores
Each score is backed by a quote verified against the document text. Editorial review has not yet confirmed them.
Fairness
2/5Non-discrimination and equitable treatment
Article 10(5) AI Act allows the processing of special categories of personal data for bias monitoring, detection and correction
3.2.1
screening score · 2026-10-23
Human Dignity
2/5Respect for the inherent worth of persons
protection of health, safety, fundamental rights enshrined in the Charter, including democracy, the rule of law and environmental protection
2.2
screening score · 2026-10-23
Human Oversight
2/5Humans remain in control of consequential decisions
assign human oversight to persons with necessary competence, training, and authority
2.3.1
screening score · 2026-10-23
Transparency
3/5Openness about how AI systems work and are used
The Act also introduces requirements for algorithmic transparency, as well as obligations for Very Large Online Platforms
3.2.4
screening score · 2026-10-23
Impact Assessment
4/5Required assessment of an AI system's risks/impacts before or during use
Article 27 AI Act requires deployers of high -risk systems to perform a Fundamental Rights Impact Assessment
3.2.1
screening score · 2026-10-23