The EU AI Act is expected to play a crucial role in the global development of AI Governance frameworks. We are compiling on this page a continuously updated list of FPF Resources dedicated to the EU AI Act, as well as to its relationship to the EU GDPR and other privacy and data protection law.
Last updated: April 7, 2026
Blog series – Red Lines Under the EU AI Act
- Understanding ‘Prohibited AI Practices’ and their Interplay with the GDPR, DSA (Blog 1)
- Understanding Manipulative Techniques and the Exploitation of Vulnerabilities (Blog 2)
- Unpacking Social Scoring as a Prohibited AI Practice (Blog 3)
- Unpacking the Prohibition of Individual Risk Assessment for the Prediction of Criminal Offences (Blog 4)
- Understanding the ban of the untargeted scraping of facial images and facial recognition databases (Blog 5)
- Unpacking the prohibition of emotion recognition in the workplace and education institutions (Blog 6)
- Understanding the prohibition of biometric categorization for certain sensitive characteristics (Blog 7)
- Restricting Real-time Remote Biometric Identification Systems for Law Enforcement Purposes (Blog 8)
Infographics
- FPF and OneTrust Publish the Updated Infographic on Conformity Assessment under the EU AI Act
- The EU AI Act: Governance Architecture and Implementation Framework
- The EU AI Act: A Comprehensive Implementation & Compliance Timeline
- The EU AI Act timeline of implementation in a Snapshot
Analysis and Reports
- FPF and OneTrust publish the Updated Guide on Conformity Assessment under the EU AI Act (April 2025) – The updated resource provides a step-by-step roadmap for organizations seeking to understand whether they must conduct a CA. It is designed to support organizations navigating their obligations under the AIA and build internal processes that reflect the Act’s overarching accountability.
- FPF and OneTrust released a collaboration on Conformity Assessments under the proposed EU AI Act: A Step-by-Step Guide and accompanying Infographic (November 2023) – Prepare for compliance with the now agreed upon AI Act by learning what a Conformity Assessment (CA) is, and when and how a CA should be performed.
- “Understanding the EU Data Strategy Architecture – Common Threads, Points of Juncture, Incongruities” – Report from the 2023 Brussels Privacy Symposium, co-organized by FPF and VUB’s Brussels Privacy Hub, where experts extensively discussed the interplay between the GDPR and the new wave of EU legislative acts in the digital realm, including the AI Act.
- Introduction to the Conformity Assessment Under the Draft EU AI Act, and How it Compares to DPIAs – A key obligation of the agreed upon EU AI Act imposed on high-risk AI systems is Conformity Assessments (CAs), and this FPF blog post provides a comparison between the requirements of CAs and the GDPR’s DPIAs.
- Automated Decision-Making (ADM) Under the GDPR: Practical Cases from Courts and Data Protection Authorities – FPF’s report analyzes real-life cases under the GDPR involving ADM. Read our analysis to learn current ADM enforcement precedents, which share commonalities with the EU AI Act’s provisions.
- GDPR and the AI Act Interplay: Lessons from FPF’s ADM Case-Law Report – FPF’s blog post explores the interplay of the FPF ADM Case-Law Report & the proposed AI Act text.
- The First Japan Privacy Symposium: G7 DPAs Discussed their Approach to Reign in AI, and other Regulatory Priorities – At FPF and S&K Brussels’s Japan Privacy Symposium in Tokyo in June, G7 Data Protection Authorities discussed the interaction of data protection and privacy law with AI. Read FPF’s VP for Global Privacy Dr. Gabriela Zanfir-Fortuna’s overview of the G7’s privacy and AI regulation perspectives on the blog.
- How Data Protection Authorities are De Facto Regulating Generative AI – An overview of Data Protection Authorities’ (DPAs) investigations into generative AI and how the statement on generative AI by G7 DPAs impact key data protection concerns across jurisdictions.
Recordings
- LinkedIn Live: Beyond Borders: The Global Dynamics of the EU AI Act – FPF VP for Global Privacy Dr. Gabriela Zanfir-Fortuna and Dan Nechita, Head of Cabinet for MEP Dragos Tudorache, European Parliament, discuss the Act’s key elements, including the areas of ongoing debate and the Act’s far-reaching impact for international lawmakers and companies operating both within and outside the EU.
- LinkedIn Live: Unpacking the EU AI Act: A Deep Dive into the Landmark Agreement – FPF’s VP for Global Privacy Dr. Gabriela Zanfir-Fortuna and Vincenzo Tiani, Partner at PANETTA Law Firm and Vrije Universiteit Brussel (VUB) researcher, discuss the global impact of the EU’s marathon 36+ hours negotiation that ended with a landmark political agreement on the EU AI Act.
FPF Statements
- Statement on the passage of the EU AI Act, by the CEO of the Future of Privacy Forum, Jules Polonetsky.
FPF members receive regular in-depth analyses of global privacy and U.S. Federal & State privacy legislation trends and developments, like the EU AI Act. To learn more about becoming a member, download FPF’s member value overview or contact [email protected]