Skip to content

All Topics

The primary way in. Every topic gathers the exact provisions, paragraphs, findings and sections tagged with it — across all content types.

⌕
Personal Data 16024

Information relating to identified or identifiable natural persons

9150263625961175
Processing 8002

Any operation performed on personal data

309226321552523
Controllers 7028

Entities that determine purposes and means of processing

242022111713573
Supervisory Authorities 6776

National data protection authorities and their powers

356412391187498
Supervision 5174

Oversight and enforcement by supervisory authorities

17891414879809
Law Enforcement 3836

Processing for law enforcement purposes

16961540200196
Data Controller 3834

The entity that determines purposes and means of processing personal data

1862828771300
Public Authority 3649

Government bodies and their data processing activities

2410471256250
Consent 3471

Freely given, specific, informed indication of data subject wishes

1843732518169
Processing Agreement 3153

Contract between controller and processor defining processing terms

280016710058
Monitoring 3023

Systematic observation and tracking of individuals

1157744545256
IP Address 2214

Internet protocol addresses as personal data

128264017789
Public Sector 1940

Processing by public authorities

782447243237
Types of Special Categories of Personal Data 1890

A dedicated topic is needed to comprehensively cover the specific types and definitions of special categories of personal data, including racial/ethnic origin, political opinions, religious beliefs, genetic data, biometric data, health data, and criminal convictions.

1134337189134
Security 1850

Technical and organizational measures to protect personal data

1024309251137
Processors 1791

Entities that process data on behalf of controllers

728529260214
Identification 1787

Methods and processes for identifying individuals

996375178153
Special Categories of Data 1570

Sensitive data requiring enhanced protection (health, biometric, etc.)

721393218128
Telecommunications 1569

Processing by telecom providers and eprivacy

73048719057
Healthcare 1540

Processing of health data and medical information

59848832288
Human Resources 1534

Processing of employee and HR data

890242196162
Transparency 1376

Openness about data processing activities

604375135108
Right of Access 1330

Data subject right to access their personal data

10101429835
Minors 1260

Special protections for children under GDPR

8841279370
Social Media 1154

Social networking platforms and privacy considerations

542251198118
Liability 1133

Legal responsibility for GDPR violations and damages

961503433
Healthcare 1130

Processing in healthcare and medical context

52534315040
International Transfer 1129

Transfer of personal data outside the EU/EEA

442295184105
Data Breaches 1118

Security incidents involving unauthorized access to personal data

44930623759
Certification 1013

Data protection certification mechanisms

792848025
Accountability 1004

Principle of demonstrating GDPR compliance

31531421064
Insurance 974

Processing by insurance companies

4353978130
Scientific Research 955

Processing for scientific research purposes

52820211559
Right of Access Procedures 954

This new topic is needed because Article 15 GDPR deserves dedicated coverage for its specific procedures, requirements, timelines, formats, and exceptions related to the right of access by data subjects.

734964846
Marketing 945

Use of personal data for marketing and advertising purposes

35923914888
Health Data 940

Processing of health and medical data

35825721740
Legitimate Interest 901

Processing necessary for legitimate interests pursued by controller or third party

5631317264
Profiling 872

Automated processing to evaluate personal aspects

5161417947
Artificial Intelligence 853

AI systems and their implications for data protection

587888774
Codes of Conduct 838

Industry codes of conduct for data protection

5711319122
Data Processor 730

The entity that processes personal data on behalf of the controller

250168133128
Representatives 707

Representatives of controllers not established in the EU

3921435959
Automated Decision-Making 703

Processing involving automated decisions without human involvement

3671408244
Privacy by Design & Default 690

This topic is essential as it specifically addresses Article 25 GDPR requirements for implementing data protection principles through design and default settings, covering both technical and organizational measures that must be embedded into processing systems from inception.

4371603831
Direct Marketing 675

Processing for marketing and advertising purposes

30315711945
Integrity and Confidentiality Principle 675

While security and beveiliging topics exist, there is no dedicated topic for the integrity and confidentiality principle specifically as articulated in GDPR Article 5(1)(f), which is a distinct foundational principle requiring separate coverage.

3511758037
Video Surveillance 653

Use of cameras for monitoring and recording individuals

491863024
Education 630

Processing in educational institutions

446825131
Retention Period 628

The duration for which personal data may be stored

28417410931
Cookies 598

Online tracking technologies and consent requirements

17016411289
Pseudonymization 590

Processing data in a pseudonymized manner

3341533327
Recipient 590

A person or body to which personal data are disclosed (Art 4(9) GDPR).

352898551
Biometric Data 584

Processing of biometric data for identification

20513511156
Biometric Data 542

Unique physical characteristics used for identification

19613311245
Notification Obligation 527

Duty to report data breaches to authorities and affected individuals

16815713627
Accuracy 526

Principle that personal data must be accurate and up to date

381643528
Privacy Impact Assessment 504

Data protection impact assessments (DPIA)

1891188148
DPIA 499

Data Protection Impact Assessment - systematic evaluation of processing risks

1911218541
Employees 499

Employee data protection and workplace privacy

2721126029
Right to be Forgotten 480

Right to have personal data erased under certain conditions

307753925
AI Value Chain Actors and Roles 474

The content focuses on responsibilities distributed across different actors in the AI value chain. A dedicated topic for understanding the various actors, their roles, and how they interact would be valuable for comprehensive AI Act compliance.

399302716
Storage Limitation 471

Principle that data should not be kept longer than necessary

2111348418
Professional Secrecy 464

Confidentiality obligations for data protection personnel

267726441
Criminal Data 460

Processing of criminal convictions and offences

380362113
Fines 450

Administrative fines imposed for GDPR violations

2191045441
Genetic Data 427

Processing of genetic and hereditary data

300771914
Anonymization 413

Irreversible removal of identifying information from data

2131263318
Fairness & Transparency 399

Fairness and transparency are co-principles with lawfulness in Article 5(1)(a) GDPR and are inseparable from the concept of lawful processing, deserving dedicated coverage.

167807550
Access Controls 393

Access management and authentication

1471088924
Encryption 359

Encryption and cryptographic measures

143777432
High-Risk AI Classification 357

The content specifically addresses classification rules for high-risk AI systems under the AI Act, which is a distinct regulatory concept requiring its own dedicated topic beyond the general 'AI Risk Assessment' category.

3543
Privacy Shield 303

Former EU-US data transfer framework (invalidated)

126726614
Right to Object 301

Data subject right to object to processing

119817013
Privacy by Design 299

Embedding data protection into system design from the outset

141723527
Privacy by Default 279

Ensuring highest privacy settings apply by default

135713026
Information Provision Modalities and Communication Methods 257

The content focuses on how information should be communicated to data subjects (transparent, clear, accessible modalities), which is distinct from the content of information itself and deserves its own topic covering communication methods and accessibility requirements.

125682925
Statistics 255

Statistical purposes and statistical processing

119674114
Meaningful Human Review and Decision-Making 254

The content on human oversight emphasizes the need for meaningful human review and decision-making authority, which deserves its own dedicated topic to distinguish it from general oversight mechanisms.

2251555
Authority Cooperation 253

This new topic is needed because the AI Act establishes specific cooperation and coordination mechanisms between AI providers/deployers and competent authorities that are distinct from general compliance obligations and warrant dedicated coverage.

2252143
Conformity Assessment for AI Systems 253

Provider obligations typically include conformity assessment procedures and documentation requirements, which is a specific compliance mechanism under the AI Act that warrants dedicated coverage.

2521
Annex III Amendments 251

This new topic is needed because amendments to Annex III represent specific regulatory changes to the AI Act's classification framework that warrant dedicated tracking and analysis separate from general AI Act compliance.

233963
Authority Powers for Fundamental Rights Protection 248

This new topic is needed because the content specifically addresses the powers and authorities granted to competent authorities to protect fundamental rights in AI systems, including inspection, intervention, and corrective action powers that are not adequately covered by existing topics.

100664824
Provider Obligations for AI Systems 248

The content specifically addresses obligations imposed on providers of high-risk AI systems, which is a distinct and important category of requirements that deserves its own dedicated topic for better organization and searchability.

2261291
Lawful Basis 246

This topic is essential as Article 6 GDPR provides the specific legal bases that determine whether processing is lawful, which is the core requirement of the 'Lawfulness of processing' content.

69655647
Material scope (GDPR) 239

What processing the GDPR applies to — and the exclusions: purely personal or household activity, law enforcement, EU institutions (Article 2 GDPR).

18831116
Archiving 231

Archiving in the public interest

156361512
AI Risk Assessment 217

The AI Act employs a risk-based regulatory approach to determine which practices are prohibited, requiring assessment and classification of AI system risks, which is distinct from general DPIA and needs dedicated coverage.

1931364
Anonymization 214

Processing anonymized data that cannot be re-identified

90682115
Data Subject Rights Exercise Modalities and Procedures 213

This content specifically addresses the transparent communication and practical modalities for how data subjects can exercise their GDPR rights, which is not adequately covered by existing topics focused on individual rights in isolation.

99633218
Data Portability 212

Right to receive and transfer personal data in structured, machine-readable format

90701514
Notified Body Independence 205

Notified bodies must maintain strict independence and impartiality standards, which are critical operational obligations that warrant a dedicated topic for detailed coverage.

12445168
Notified Bodies for AI Systems 204

This topic is needed to comprehensively cover the role, responsibilities, and obligations of notified bodies in the AI Act conformity assessment framework, including their designation, accreditation, and operational requirements.

2013
Competent Authorities Designation and Powers under DSA 194

The content is titled 'Competences' from the DSA and discusses the allocation and scope of authority powers under the Digital Services Act. This requires a dedicated topic covering DSA-specific competent authority designation, powers, and responsibilities.

1922
Prior Consultation 192

Consultation with supervisory authority before processing

77712114
Scientific Panel Independence 183

A specific topic is needed to address the independence and impartiality requirements that are critical for scientific panels to maintain credibility and objectivity in their advisory role.

12129158
DSA Scope and Digital Services Coverage 177

The content is from the DSA (Digital Services Act), not the AI Act. A dedicated topic for DSA scope is needed to distinguish it from AI Act scope provisions and to properly categorize DSA-specific regulatory coverage.

1761
Joint Controllers 175

Multiple controllers jointly determining purposes and means

926296
Territorial scope (GDPR) 172

When the GDPR applies geographically: establishment in the Union, targeting (offering goods or services), and behavioural monitoring by non-EU controllers (Article 3 GDPR).

7754287
Conformity Body Notification 170

This new topic is needed because the content specifically addresses the application and notification procedures for conformity assessment bodies under the AI Act, which is a distinct regulatory mechanism not adequately covered by existing topics.

170
NIS2 Addressees and Responsible Entities 169

The 'Addressees' section of NIS2 specifically identifies and defines the entities and authorities to whom the directive applies and who bear responsibility for compliance. This requires a dedicated topic covering the identification, classification, and designation procedures for all addressees under NIS2.

169
GPAI Systemic Risk 168

This new topic is needed because the content specifically addresses the classification and identification of general-purpose AI models that present systemic risk, which is a distinct regulatory category under the AI Act that requires dedicated coverage separate from general high-risk AI classification.

1662
AI Office Establishment and Role 149

The AI Office is a new institutional body created by the AI Act with specific establishment procedures, roles, responsibilities, and governance structures that warrant dedicated coverage distinct from general procedural frameworks.

1481
AI Act Procedures 148

The 'Procedure' section of the AI Act establishes the overarching procedural framework and mechanisms for implementing and enforcing the regulation. This topic is needed to capture the procedural architecture that underpins all compliance, assessment, and enforcement activities under the AI Act.

1471
Political Opinions 148

Processing of political views and affiliations

90171712
Right to Restriction 145

Right to restrict processing of personal data

8630138
Audit Logs 141

Logging and auditing of processing activities

38353433
AI Standards 132

This new topic is needed to specifically address the role of harmonised standards and standardisation deliverables in the AI Act framework, including their development, adoption, and use in demonstrating compliance with AI system requirements.

912498
Religious Beliefs 126

Processing of religious or philosophical beliefs

8220126
Notified Body Reporting and Notification Obligations 123

The content addresses specific reporting and notification obligations of notified bodies to authorities and other stakeholders, which is a distinct operational requirement deserving separate coverage.

55421311
GDPR Subject-Matter and Objectives 122

This content is specifically about the introductory provisions establishing the subject-matter and objectives of the GDPR, which is a distinct topic from general scope/definitions that deserves its own classification for regulatory framework documentation.

50491310
Market Surveillance and Control of AI Systems 122

This new topic is needed to comprehensively cover the specific procedures, mechanisms, and authorities involved in market surveillance and control of AI systems under the AI Act, which is a distinct regulatory domain not fully captured by existing topics.

11255
Digital Services Coordinator 113

While 'digital-services-coordinators-dsa' exists, a more specific topic on the establishment, institutional framework, and foundational role of DSCs would better capture the comprehensive nature of this content about competent authorities and their designation.

113
AI Act Territorial Scope 112

The scope section of the AI Act includes specific provisions on territorial applicability and which providers are subject to the regulation regardless of their location, warranting a dedicated topic.

112
Cloud Computing 112

Use of cloud services and associated data protection requirements

51201912
Child Consent 111

This new topic is needed because the content specifically addresses the unique conditions and requirements for obtaining valid consent from children in the context of information society services, which is distinct from general consent requirements and requires specialized treatment of age verification, parental involvement, and child-specific safeguards.

41401310
Digital Services Coordinators under DSA 109

This new topic is needed because Digital Services Coordinators are a distinct institutional role under DSA with specific designation procedures, responsibilities, and powers that warrant dedicated coverage separate from general competent authorities.

109
AI Act Requirements 107

The content specifically addresses 'Compliance with the requirements' from the AI Act, which warrants a dedicated topic for AI Act-specific requirements that goes beyond general compliance and risk assessment topics.

1052
Article 19 GDPR - Notification of Rectification, Erasure or Restriction 106

This specific GDPR provision addresses the controller's obligation to notify data subjects and third parties about rectification, erasure, or restriction of processing. It is a distinct procedural requirement that deserves its own dedicated topic for comprehensive coverage of notification obligations under Article 19.

5731115
Post-Market Monitoring for AI Systems 106

Risk management systems require ongoing post-market monitoring to identify and respond to risks that emerge during real-world deployment. This is a distinct and critical component that warrants its own topic.

9754
VLOP/VLSE Framework 103

The content title specifically focuses on 'Very large online platforms and very large online search engines' as a distinct regulatory category under the DSA. A dedicated topic covering the comprehensive regulatory framework, definitions, and comparative analysis of these two service categories would provide better organization and clarity than distributing this information across multiple existing topics.

103
Delegation of Powers 100

The content specifically addresses 'Exercise of the delegation' which is a distinct procedural topic covering how delegated powers are exercised, implemented, and managed within the AI Act framework. This topic is not adequately covered by existing topics and deserves its own dedicated classification.

973
Committee Procedure under AI Act 99

The content specifically addresses 'Committee procedure' as a distinct procedural mechanism under the AI Act. This topic is not adequately covered by existing topics and requires its own dedicated entry to capture the specific procedural rules, voting mechanisms, composition requirements, and decision-making processes of regulatory committees established under the AI Act framework.

9621
Inspection Access Rights and Cooperation Obligations 92

A dedicated topic is needed to address the specific rights of inspectors to access facilities, systems, and documents, and the corresponding obligations of AI providers and deployers to cooperate with inspections.

2928275
AI Incident Notification 89

The AI Act establishes specific procedures for notifying authorities about serious incidents and anomalies in high-risk AI systems, which requires dedicated coverage distinct from general information duties and incident reporting.

8441
GDPR Article 5 Principles of Processing 84

This content specifically addresses the foundational principles of personal data processing under GDPR Article 5, which encompasses multiple related but distinct principles that warrant a dedicated topic for comprehensive coverage of this critical regulatory framework.

4325133
Right to Rectification 84

Right to have inaccurate personal data corrected

4320129
Technical Documentation for AI Systems 84

The AI Act imposes specific technical documentation requirements for AI systems, particularly high-risk AI systems. This dedicated topic would cover the mandatory documentation of system design, functionality, performance, testing, and operational parameters required for AI Act compliance.

7464
Notified Body Responsibilities and Operational Obligations 83

This new topic is needed to capture the specific operational obligations, responsibilities, and procedural requirements that notified bodies must fulfill when conducting conformity assessments and maintaining their designation.

4214139
Unacceptable Risk AI Systems 83

The content specifically addresses unacceptable-risk AI systems as a distinct category of prohibited practices, warranting a dedicated topic for this specific classification and its requirements.

641072
DSA Terms and Conditions Requirements 79

This new topic is needed to specifically address the requirements for terms and conditions documents under the DSA, including transparency, accessibility, and mandatory content requirements for digital service providers.

79
Market Surveillance Corrective Actions and Enforcement 78

This topic addresses the specific enforcement and corrective actions available to authorities during market surveillance, including withdrawal, suspension, and remedial measures, which are distinct from general corrective action procedures.

541382
AI Record-Keeping 77

The AI Act imposes specific record-keeping obligations for AI systems that are distinct from general GDPR record-keeping. A dedicated topic would capture AI-specific documentation, logging, and record retention requirements that differ from traditional data protection record-keeping.

65642
Right to Erasure 76

Right to be forgotten and data erasure

3819145
Human Oversight 75

This new topic is needed because human oversight is a specific and distinct requirement under the AI Act that deserves dedicated coverage, encompassing mechanisms for human control, intervention, and review of AI system operations and decisions.

3620143
Documentation Keeping for AI Systems 70

While 'record-keeping-ai' exists, a more specific topic focused on documentation keeping as a distinct concept would better capture the AI Act's specific requirements around maintaining, organizing, and preserving documentation throughout an AI system's lifecycle, including technical, compliance, and operational documentation.

6172
Interim Measures under AI Act 70

This new topic is needed to specifically address interim measures provisions in the AI Act, which allow authorities to take temporary protective actions against high-risk AI systems that pose immediate risks to fundamental rights, safety, or public security, pending full compliance assessment or corrective actions.

6244
Risk Management System 68

This new topic is needed because risk management systems are a distinct and mandatory requirement under the AI Act, encompassing systematic processes for identifying, assessing, mitigating, and monitoring risks throughout an AI system's lifecycle, which is not adequately covered by existing topics.

51743
Authority Access Rights to AI Systems and Documentation 67

This new topic would specifically address the rights and procedures for competent authorities to access AI systems, facilities, documentation, and data during oversight activities, which is a critical component of the cooperation framework but not fully captured by existing topics.

6151
Notified Body Information Obligations 66

This specific topic is needed to comprehensively cover the distinct information obligations that notified bodies must fulfill under the AI Act, including their duties to disclose assessment findings, report non-compliance, notify authorities of incidents, and provide transparent information to stakeholders.

56432
AI Act Material Scope 64

The material scope defines which types of AI systems and activities fall within the regulation's coverage, including specific exclusions and definitional boundaries that merit dedicated coverage.

64
Data Portability 62

Right to receive and transfer personal data

26151110
Notified Body Assessment Procedures 62

The content extensively covers the operational procedures and methodologies that notified bodies must follow when conducting conformity assessments, which deserves its own dedicated topic.

341953
Implementation Guidelines 60

This content is specifically about Commission guidelines for implementing the AI Act. A dedicated topic would capture guidance documents, interpretive materials, and practical implementation support materials from the European Commission.

481011
Data Governance for AI 59

The AI Act's section on 'Data and data governance' requires specific provisions for managing training data, validation data, and test data in AI systems. This concept is distinct from general data protection and deserves its own topic to capture AI-specific data governance requirements including data quality, documentation, and management practices.

2619113
Monitoring Actions under AI Act 57

The content specifically addresses 'Monitoring actions' as a distinct topic under the AI Act, which encompasses systematic oversight procedures, compliance verification, and market surveillance activities that are not fully captured by existing more general monitoring topics.

48621
Delegated Acts 55

This content specifically addresses the procedural framework for adopting delegated acts under the AI Act, including how they apply to safety components and sectoral regulations. This is a distinct procedural topic not adequately covered by existing topics.

541
AI Conformity Declaration 54

The EU declaration of conformity is a specific, mandatory compliance document under the AI Act that deserves its own dedicated topic to cover its requirements, content, format, maintenance, and availability obligations for AI system providers.

37152
Annex III Classification Changes and Updates 54

The content specifically addresses amendments to Annex III, which represents a distinct regulatory mechanism for updating high-risk AI system classifications. This topic would capture the procedural and substantive aspects of how Annex III is modified over time.

54
Hosting Services under DSA 54

While intermediary liability and DSA scope topics exist, there is no dedicated topic specifically for hosting services, their liability conditions, exemptions, and specific obligations under DSA Article 6, which represents a distinct regulatory category requiring focused coverage.

54
AI Corrective Powers 51

This new topic is needed to specifically address the corrective and intervention powers that authorities possess to protect fundamental rights, including emergency measures, system suspensions, and market restrictions that go beyond standard inspection and monitoring activities.

43521
AI Act Formal Non-Compliance 45

This topic is needed to specifically address formal non-compliance under the AI Act, covering the determination, notification, and enforcement procedures specific to AI regulation compliance failures.

32732
AI Risk Mitigation 45

Risk management systems include specific measures to mitigate identified risks. This concept deserves dedicated coverage as it encompasses the practical implementation of risk reduction strategies beyond general risk assessment.

221561
Standards Publication 43

The content discusses how harmonised standards are published and enter into force, which is a distinct procedural topic that deserves dedicated coverage separate from general standards adoption.

2887
Intermediary Liability Framework under DSA 41

This topic is needed to comprehensively cover the broader intermediary liability framework under the DSA, of which mere conduit is one component, including the conditions, standards, and exemptions that apply to different types of digital services.

401
Right to Explanation 41

This topic is essential as it specifically addresses the fundamental right of individuals to receive meaningful explanations about how automated decisions affecting them are made, which is a critical transparency and accountability mechanism in both GDPR and AI Act frameworks.

1210105
AI Provider Transparency 40

This specific topic is needed to comprehensively cover the transparency obligations framework that applies to both providers and deployers of AI systems, which is a distinct and important compliance area under the AI Act that warrants its own dedicated topic for better organization and retrieval.

28543
Out-of-Court Dispute Settlement under DSA 39

This is a distinct DSA topic that warrants its own entry, as it covers specific procedures, requirements, and mechanisms for resolving disputes outside of court, including mediator qualifications, settlement procedures, and accessibility requirements that are not adequately covered by existing topics.

381
Conformity Assessment Procedures and Methodologies 38

This new topic is needed to specifically address the procedural and methodological aspects of conformity assessment for AI systems, including step-by-step procedures, assessment phases, documentation requirements, and reporting mechanisms that are distinct from the general conformity assessment concept.

371
Notified Body Competence Challenges and Dispute Resolution 38

This new topic is needed because the content specifically addresses challenges to the competence of notified bodies, which is a distinct regulatory mechanism not adequately covered by existing topics. It encompasses dispute resolution procedures, grounds for challenges, and remedial actions related to notified body competence.

141264
Online Interface Design and Organization 34

This topic is needed to specifically address DSA requirements regarding how online service providers must design and organize their interfaces to ensure transparency, accessibility, and compliance with content moderation and user information obligations. It bridges interface design principles with regulatory compliance requirements.

322
Training Data Requirements 34

The AI Act specifically addresses requirements for training, validation, and test data used in high-risk AI systems. This warrants a dedicated topic covering data sourcing, quality standards, documentation requirements, and characteristics that must be maintained for AI model development.

141091
AI Corrective Actions 30

This new topic is needed because corrective actions are a specific and distinct obligation under the AI Act that encompasses systematic procedures for addressing identified risks, defects, and incidents in AI systems, requiring dedicated coverage separate from general risk management.

25211
Corrective Actions and Duty of Information Framework 30

This topic combines two interconnected AI Act obligations: the requirement for providers to take corrective actions when systems fail to comply, and the corresponding duty to inform authorities and stakeholders about these actions and any identified issues. This integrated framework is essential for understanding post-market compliance mechanisms.

25221
Prohibited AI Practices 29

The content specifically addresses prohibited AI practices under the AI Act, which is a distinct regulatory concept not adequately covered by existing topics. This requires its own topic to capture the specific restrictions, enforcement mechanisms, and compliance requirements.

13844
Administrative Fines on Union Institutions, Bodies, Offices and Agencies 27

This specific provision addresses a distinct category of administrative fines applicable exclusively to Union institutions, bodies, offices and agencies, which differs from fines applicable to private actors and requires separate treatment to capture the unique institutional context and procedures.

13642
Advertising Practices and Requirements under DSA 24

This new topic is needed to specifically address advertising practices on online platforms under DSA, including transparency requirements, content moderation of ads, disclosure of sponsored content, and protection against misleading or deceptive advertising practices.

204
Entry Into Force 24

This new topic is needed to specifically address the temporal aspects of when the AI Act and its various provisions enter into force and become applicable to different actors and systems.

11533
Data Access and Scrutiny Mechanisms under DSA 22

This new topic is needed because the content specifically addresses data access and scrutiny as a distinct DSA requirement, which encompasses mechanisms for authorities, researchers, and civil society to access and examine platform data for compliance verification and systemic risk assessment.

22
AI Governance Framework 21

Compliance with AI Act requirements involves establishing a comprehensive governance framework covering organizational structures, policies, and procedures, which is distinct from individual compliance obligations.

16221
Confidentiality Obligations and Requirements 21

This topic is needed to comprehensively address confidentiality as a distinct data protection principle in the AI Act and GDPR, covering obligations, requirements, and implementation measures specific to maintaining confidentiality of personal and sensitive data.

11541
AI Impact Assessment 20

This new topic is needed because fundamental rights impact assessments are a specific and distinct requirement under the AI Act (Article 27) for high-risk AI systems, requiring dedicated coverage of assessment methodologies, rights considerations, and documentation requirements that are not adequately covered by existing topics.

1352
Mutual Assistance Between Member States for AI Oversight 20

This topic is essential as the provision specifically addresses mutual assistance mechanisms between member states and the AI Office for coordinating market surveillance and control activities for AI systems.

1541
AI Act Violations 18

The content specifically addresses 'Non-compliance' as a distinct legal concept under the DSA/AI Act framework. This requires a dedicated topic to comprehensively cover violation types, determination procedures, consequences, and remediation mechanisms that are not fully captured by existing penalty or enforcement topics.

162
Caching Services under DSA 18

Caching is a specific intermediary service category under DSA Article 5 with distinct liability conditions and technical requirements that warrant dedicated topic coverage separate from general intermediary liability frameworks.

18
Notifying Authorities 18

This topic is needed to specifically address the procedures, requirements, timelines, and mechanisms for notifying authorities about AI systems, incidents, and compliance matters under the AI Act, which is a distinct regulatory obligation not fully captured by existing topics.

171
Quality Management 16

This new topic is needed to specifically address the detailed requirements, implementation procedures, and operational aspects of quality management systems for AI systems as mandated by Article 17 of the AI Act, which is distinct from general quality management concepts.

142
AI Information Duties 15

This new topic is needed because the AI Act imposes specific duties on providers to inform relevant parties (users, authorities, affected persons) about corrective actions, incidents, and system modifications, which represents a distinct compliance obligation that warrants separate topical coverage.

8321
Annex III High-Risk AI Categories 14

The classification rules reference specific categories of high-risk AI systems listed in Annex III, which warrant a dedicated topic to address the enumerated use cases and application domains that trigger high-risk classification.

14
Notice and Action Mechanisms under DSA 14

This new topic is needed to specifically address the notice and action procedures that are central to DSA compliance, including how service providers must notify users of content moderation decisions, how authorities issue orders, and the procedural requirements for these mechanisms.

14
AI Enforcement Actions 13

The Penalties section includes procedural aspects of how penalties are imposed, appealed, and enforced, which warrants a dedicated topic covering the administrative and procedural dimensions of penalty enforcement.

652
Infringement Reporting 13

This specific topic is needed to comprehensively cover Article 84 of the AI Act, which establishes a dedicated framework for reporting infringements and protecting those who report them, including confidentiality protections and safeguards against retaliation.

7411
European Cybersecurity Certification Schemes 12

This new topic is needed to specifically address European cybersecurity certification schemes (EUCS) as referenced in NIS2, which establish a framework for certifying cloud services and other ICT products/services against defined security criteria.

111
AI Registration 11

The AI Act includes specific registration requirements for high-risk AI systems and their providers. This topic is not adequately covered by existing topics and requires dedicated coverage of registration procedures, databases, timelines, and obligations specific to AI systems under the AI Act.

101
Compliance Function Establishment and Role 11

The DSA content specifically addresses compliance functions as organizational entities with defined roles, responsibilities, and governance structures. This topic is needed to comprehensively cover the establishment, structure, and operational framework of compliance functions under DSA requirements.

911
DSA Transparency 11

This new topic is needed because the content specifically addresses transparency reporting obligations for intermediary service providers under the DSA, which is a distinct and important compliance requirement that deserves dedicated coverage separate from general transparency obligations or AI-focused transparency requirements.

11
Application Scope: Temporal and Territorial Dimensions 10

This topic is needed to capture the specific provisions regarding when (temporal) and where (territorial) the AI Act applies, which are distinct from general scope and definitions.

4321
Points of Contact for Commission and Board under DSA 10

While general points of contact topics exist, this content specifically addresses the establishment and coordination of contact points between Member States' authorities, the Commission, and the Board as a unified DSA governance mechanism, which warrants a dedicated topic.

10
Presumption of Conformity for AI Systems 10

This new topic is needed because the content specifically addresses the legal mechanism of 'presumption of conformity with requirements relating to notified bodies,' which is a distinct procedural concept in the AI Act that deserves its own dedicated topic for proper classification and retrieval of related regulatory content.

10
Transparency Reporting Obligations Overview 10

While individual aspects of transparency reporting are covered by existing topics, there is no comprehensive overview topic that addresses transparency reporting obligations as a unified framework under DSA Article 24, including the general principles, scope, and procedural requirements.

6211
AI Act Compliance Overview 9

A dedicated topic for the comprehensive overview of AI Act compliance requirements would help organize content that discusses the full scope of obligations across different actor types and system categories.

9
AI Transitional Provisions 9

The content specifically addresses AI systems already placed on the market, which raises questions about transitional arrangements, compliance deadlines, and how existing deployments are regulated differently from new systems entering the market.

522
AI Investigative Powers 7

This new topic is needed to specifically address the investigative and information-gathering powers of competent authorities under the AI Act, which is distinct from general cooperation obligations and encompasses the procedural mechanisms for requesting and obtaining documentation.

421
National-Level Risk Procedures for AI Systems 7

This specific topic addresses the national-level procedural framework for identifying, assessing, and responding to AI systems presenting risks, which is distinct from general market surveillance and authority powers, and represents a key procedural mechanism in the AI Act.

61
AI Act General Procedural Framework 6

The source document is specifically titled 'Procedure' from the AI Act, suggesting a comprehensive procedural section that warrants a dedicated topic covering the general procedural framework, mechanisms, and requirements applicable across the regulation.

6
Compensation Mechanisms and Remedies 6

The content specifically addresses 'Compensation' as a standalone topic from the DSA, which requires dedicated coverage for compensation procedures, eligibility criteria, calculation methods, and enforcement mechanisms for both individual and collective remedies.

6
Infringement Reporting Procedures and Mechanisms 6

This new topic is needed because the content specifically addresses the procedures, mechanisms, and requirements for reporting infringements of AI Act requirements, which is a distinct procedural framework not adequately covered by existing topics.

51
Single Point of Contact for AI Regulation 6

The establishment of single points of contact represents a distinct procedural and coordination mechanism within the AI Act that warrants separate coverage from general competent authority designation, as it focuses specifically on communication and liaison functions.

321
AI Transparency 5

This new topic is needed to specifically capture the transparency obligations framework for AI systems providers and deployers, which is a distinct and comprehensive requirement under the AI Act that encompasses disclosure of system characteristics, performance metrics, limitations, and intended use to end-users and relevant stakeholders.

32
Codes of Practice Development and Adoption Procedures 5

The content specifically addresses 'Codes of practice' as a regulatory mechanism, requiring detailed coverage of how these codes are developed, adopted, and implemented within the AI Act framework.

221
Compensation Mechanisms and Remedies under DSA 5

The DSA content section on 'Compensation' requires a dedicated topic to address compensation mechanisms, procedures, and remedies available under the Digital Services Act, which is distinct from general liability frameworks.

5
Points of Contact for DSA Service Recipients 5

This new topic is needed to specifically address the DSA requirement for service providers to maintain accessible points of contact for recipients of services, including procedures for designation, accessibility requirements, and communication obligations.

5
AI Act Notification 4

While 'notifying-authorities-procedures-ai' exists, a dedicated topic for the specific 'Notification Procedure' from the AI Act would provide more granular coverage of this particular procedural mechanism, including its specific requirements, timelines, and implementation within the AI Act framework.

4
AI Act Scope 4

The 'Subject matter' section is foundational to understanding what the AI Act covers, defines key terms, and establishes the scope of application. This concept deserves its own dedicated topic as it is distinct from general compliance requirements.

31
AI Act Definitions and Terminology 3

While 'AI Act Scope and Definitions' exists, a more granular topic specifically focused on the definitional content and terminology would better capture the nuanced nature of how the AI Act defines key concepts like 'AI system,' 'high-risk,' 'provider,' 'deployer,' and other foundational terms that are essential for understanding and implementing the regulation.

3
AI System Manipulation and Exploitation Practices 3

The prohibited AI practices content likely addresses specific manipulation and exploitation techniques that are banned, which represents a distinct regulatory concern beyond general prohibition.

21
Compliance Independence 3

DSA compliance functions require independence and impartiality to effectively monitor and enforce compliance. This topic is needed to address the specific requirements for maintaining compliance function independence from operational pressures and conflicts of interest.

21
Deployer Obligations for AI Systems 3

The content specifically addresses obligations of deployers (users/operators) of high-risk AI systems under the AI Act, which is distinct from provider obligations and requires its own dedicated topic for comprehensive coverage of deployer-specific requirements.

3
GPAI Enforcement 3

This new topic is needed because the content specifically addresses the enforcement of GPAI provider obligations, which requires dedicated procedures and mechanisms distinct from general AI system enforcement.

3
High-Risk AI Obligations 3

This specific topic is needed to comprehensively cover the distinct set of obligations imposed specifically on providers of high-risk AI systems under Articles 16-17 of the AI Act, which is the core subject of this content and goes beyond general provider obligations.

21
NIS2 Jurisdiction and Territoriality 3

This new topic is needed because NIS2 has specific provisions on jurisdiction and territoriality that determine how the regulation applies across member states and to third-country entities, which is not adequately covered by existing topics.

21
NIS2 Repeal Provisions 3

The content is titled 'Repeal' from NIS2 source material, indicating it contains provisions that repeal or supersede previous legislation. This is a distinct regulatory concept requiring its own topic for proper classification of legislative replacement and transition provisions.

21
Whistleblower Protection 3

This new topic is essential because the content explicitly addresses the protection of reporting persons, including safeguards against retaliation, confidentiality measures, and legal protections, which constitute a critical and distinct regulatory framework within the AI Act.

111
Activity Reports under DSA 2

Activity reports are a specific and distinct DSA transparency mechanism that deserves dedicated coverage. While related to general transparency reporting, activity reports have unique requirements regarding content, frequency, metrics, and publication that warrant a dedicated topic.

2
AI Accuracy Requirements 2

Accuracy is a critical AI Act requirement deserving dedicated topic coverage for measurement, validation, monitoring, and maintenance of AI system performance standards.

11
AI Board Tasks and Responsibilities 2

The content addresses the specific tasks, functions, and responsibilities assigned to the European AI Board, which represents a distinct aspect of its establishment and role.

2
Algorithm Transparency 2

DSA Article 24 transparency reporting includes specific requirements for algorithmic transparency and recommendation system disclosure. This warrants a dedicated topic separate from general transparency obligations to address the unique technical and substantive requirements for algorithmic system reporting.

2
Cross-Regulation Integration: AI Act and Sectoral Requirements 2

The content emphasizes how delegated acts under the AI Act must take into account requirements from sectoral regulations (specifically Regulation 2024/1689 for safety components). This cross-regulatory integration is a distinct topic requiring dedicated coverage.

11
Union Safeguard Procedure for AI Systems 2

This new topic is needed because the Union safeguard procedure is a distinct and critical procedural mechanism in the AI Act that coordinates emergency interventions across member states and EU institutions, requiring its own dedicated topic for comprehensive coverage of safeguard activation criteria, procedures, timelines, and coordination mechanisms.

2
Commitments Framework under DSA 1

The content is specifically about 'Commitments' under DSA, which represents a distinct regulatory mechanism separate from but related to codes of conduct. Commitments are formal undertakings by service providers to comply with specific standards and should have their own dedicated topic for proper classification and retrieval.

1
Commitments Framework under DSA 1

The content specifically addresses 'Commitments' as a distinct DSA mechanism that warrants its own dedicated topic, separate from general codes of conduct, as it represents a specific framework for voluntary undertakings by service providers with particular procedural and compliance characteristics.

1
Topics awaiting content (2)

Codes of Practice Compliance and Monitoring

Codes of practice require specific mechanisms for monitoring compliance and enforcement, which is distinct from general AI Act compliance and deserves dedicated topic coverage.

Points of Contact

The DSA provision on points of contact emphasizes accessibility and effective communication with service recipients. This specific topic would capture the detailed requirements for making contact points accessible, responsive, and user-friendly, which is distinct from general contact point designation procedures.

Complete List

A

Accountability 1004 Artificial Intelligence 853 Automated Decision-Making 703 Accuracy 526 AI Value Chain Actors and Roles 474 Anonymization 413 Access Controls 393 Authority Cooperation 253 Annex III Amendments 251 Authority Powers for Fundamental Rights Protection 248 Archiving 231 AI Risk Assessment 217 Anonymization 214 AI Office Establishment and Role 149 AI Act Procedures 148 Audit Logs 141 AI Standards 132 AI Act Territorial Scope 112 AI Act Requirements 107 Article 19 GDPR - Notification of Rectification, Erasure or Restriction 106 AI Incident Notification 89 AI Record-Keeping 77 Authority Access Rights to AI Systems and Documentation 67 AI Act Material Scope 64 AI Conformity Declaration 54 Annex III Classification Changes and Updates 54 AI Corrective Powers 51 AI Act Formal Non-Compliance 45 AI Risk Mitigation 45 AI Provider Transparency 40 AI Corrective Actions 30 Administrative Fines on Union Institutions, Bodies, Offices and Agencies 27 Advertising Practices and Requirements under DSA 24 AI Governance Framework 21 AI Impact Assessment 20 AI Act Violations 18 AI Information Duties 15 Annex III High-Risk AI Categories 14 AI Enforcement Actions 13 AI Registration 11 Application Scope: Temporal and Territorial Dimensions 10 AI Act Compliance Overview 9 AI Transitional Provisions 9 AI Investigative Powers 7 AI Act General Procedural Framework 6 AI Transparency 5 AI Act Notification 4 AI Act Scope 4 AI Act Definitions and Terminology 3 AI System Manipulation and Exploitation Practices 3 Activity Reports under DSA 2 AI Accuracy Requirements 2 AI Board Tasks and Responsibilities 2 Algorithm Transparency 2