Bridging compliance and innovation: A comparative analysis of the EU AI Act and GDPR for enhanced organisational strategy

This paper conducts a comparative analysis of the GDPR and the EU AI Act, focusing on their approaches to innovation, compliance and risk management. It examines how the GDPR's data protection framework intersects with the AI Act's broader ethical considerations, highlighting their complementary roles in fostering responsible technology use. Key findings reveal that while both regulations aim to protect individuals and promote ethical practices, harmonising these frameworks is crucial for effective compliance, despite inherent differences between the two. The paper underscores the need for integrated strategies and adaptive policy-making, in a global context, to navigate the complex regulatory landscape, ensuring both innovation and accountability in AI development.