European Union — data protection and AI governance
Règlement Général sur la Protection des Données (RGPD), in force since 2018-05-25. Supervisory authority: Autorités nationales + EDPB.
Data protection
- Instrument
- Règlement Général sur la Protection des Données (RGPD)
- In force since
- 2018-05-25
- Authority
- Autorités nationales + EDPB
- Penalties
- 20M€ ou 4% CA mondial
- Key obligations
- Base légale art.6
- Droits étendus
- Privacy by design
- DPO
- DPIA
- Notification 72h
What the engine decides here
These three attributes are what an agent decision depends on in this jurisdiction. They are modelled, sourced and dated.
- Transfer regime
- Restricted
Moving data out is restricted: it requires a recognised destination, or an explicit mechanism when the destination is not one.
- Recognised destinations
- EUFRDEITESBENLATPTIEFISEDKPLCZROBGHRHUSKSILTLVEECYMTLUGRNOISLIADARCA_FEDILJPNZKRCHGBUY
- Localisation mandate
- Not modelled
- Automated decision rights
- Yes
- Verified on
- 2026-08-14
Three decisions, computed just now
Same actions, this jurisdiction's context. These answers come out of the engine as the page renders — the same function the API calls.
- ALLOW
Read an internal contract
Low-risk operation
- APPROVE
Send a customer record to US_FED
The transfer requires a mechanism
- DENY
Decide on a job application
Decision reserved for a human
Advisory decisions. StructureClerk decides; your infrastructure enforces.
AI governance
- Framework
- EU AI Act (amendé omnibus 2026)
- Status
- enacted
- Date
- 2024-08-01
- Key points
- Interdictions (fév. 2025)
- Obligations GPAI (août 2025)
- Transparence art. 50 (2 août 2026)
- Haut risque Annexe III reporté au 2 déc. 2027 (omnibus juin 2026)
- IA embarquée Annexe I reportée au 2 août 2028
Cybersecurity
- Framework
- NIS2 + CRA + DORA
- Key points
- Gestion risques
- Notification 24h/72h
- Supply chain
- Cyber Resilience Act
- DORA applicable depuis jan. 2025 (finance)
Do your agents operate in European Union?
The authority API makes these attributes executable: an ALLOW, APPROVE, DENY or ESCALATE decision before the agent acts, with signed evidence any third party can verify.