Implementation note · Reviewed 1 October 2026

AI notices and privacy policies

Data protection notices and AI Act transparency disclosures have different purposes. A privacy policy can explain AI-related processing, but a policy link alone may not satisfy a timely interaction notice. Describe actual data flows, retention, processors and contact channels accurately. Review GDPR duties separately; do not infer them from an Article 50 webpage scan.

Use technical observations as supporting evidence. Confirm legal applicability and exceptions independently.

Sources: Article 50 and Commission transparency guidance.