میثم کریمی

  This research examines the role of regulatory bodies in protecting personal data in the age of artificial intelligence, focusing on the European Union's legal frameworks, including the General Data Protection Regulation (GDPR) and the AI Act. In the current era, novel technologies such as AI, with their extensive capabilities for collecting, processing, and analyzing personal data, have created significant challenges for privacy and data protection. In this context, regulatory bodies play a vital role as key pillars in supervising, enforcing, and ensuring compliance with the law. The first chapter covers the theoretical foundations, including the concepts of data and personal data, their types, the importance of personal data protection, as well as the definition, background, branches, and impacts of artificial intelligence on personal data. Personal data, as the primary fuel for AI systems, faces risks and challenges including privacy violations, discrimination, and misuse. Furthermore, the concept of regulatory bodies, their types within the EU, and their role in data protection are explained. The second chapter is dedicated to analyzing the EU's personal data protection regulation (GDPR) and the AI Act. The GDPR section examines its key objectives, important principles (such as lawfulness, tra  arency, minimization, and accountability), the rights of data subjects (including the right of access, rectification, erasure, and data portability), and the role of regulatory bodies in implementing these regulations. Bodies such as the European Commission, the European Data Protection Board (EDPB), the European Data Protection Supervisor (EDPS), and national authorities like the CNIL in France, have extensive duties in supervision, education, handling complaints, and imposing fines. The AI Act section analyzes its legislative history, objectives (including promoting human-centric and trustworthy AI), scope, and the classification of AI systems based on risk level (unacceptable, high, limited, and minimal). This law, with its risk-based approach, establishes specific requirements for high-risk systems and highlights the role of regulatory bodies in monitoring the implementation of these requirements and engaging with international institutions. The third chapter provides a comparative analysis between the GDPR and the AI Act. The similarities and differences between these two frameworks regarding their objectives, principles, and regulatory approaches are examined, and their mutual influences are analyzed. Furthermore, the role of regulatory bodies in both frameworks is compared, and their efficiency, strengths, and weaknesses in law enforcement are evaluated. The conclusion drawn from this research is that regulatory bodies in the European Union play a fundamental role in protecting personal data and addressing challenges posed by artificial intelligence by establishing comprehensive and harmonized legal frameworks. However, the complexity of novel technologies and the rapid development of AI necessitate strengthened international cooperation, continuous updates to laws, and increased resources for regulatory bodies. This research emphasizes the importance of integrating data protection and AI regulations to achieve a balance between innovation and the protection of individuals' rights.