Q1. Under EU GDPR, Article 22 applies when AI is used to make decisions that are:
Q2. A company trains an AI model using customer transaction data originally collected for billing purposes. Under GDPR, this is most likely:
Q3. When is a Data Protection Impact Assessment (DPIA) mandatory for an AI system?
Q4. Since 5 February 2026, how does UK GDPR's approach to solely automated significant decisions differ from EU GDPR's Article 22?
Q5. In the Apple Card / Goldman Sachs case, what was the outcome of the New York regulator's investigation?
Q6. Which GDPR lawful basis "only covers processing strictly necessary to perform a contract" — meaning training a general-purpose model on customer data rarely qualifies?
