{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,23]],"date-time":"2026-06-23T19:09:48Z","timestamp":1782241788712,"version":"3.54.5"},"reference-count":50,"publisher":"MDPI AG","issue":"1","license":[{"start":{"date-parts":[[2025,2,11]],"date-time":"2025-02-11T00:00:00Z","timestamp":1739232000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["JCP"],"abstract":"<jats:p>The relationship and the interplay between the EU AI Act and the data protection law is a challenging issue. This paper focuses on exploring the interplay between legal provisions stemming from the AI Act and those stemming from the GDPR, with the ultimate goal of developing an integrated framework that simultaneously implements Fundamental Rights Impact Assessment (FRIA) and Data Protection Impact Assessment (DPIA) within the context of Artificial Intelligence (AI) systems, particularly focusing on systems that utilize personal data. This approach is designed to simplify the evaluation processes for stakeholders managing risks related to personal data protection, as well as to other fundamental rights in AI systems, enhancing both efficiency and accuracy in these assessments as well as facilitating compliance with the relevant legal provisions. The methodology adopted involves developing a holistic model that can be applied not only to specific case studies but more broadly across various sectors.<\/jats:p>","DOI":"10.3390\/jcp5010007","type":"journal-article","created":{"date-parts":[[2025,2,12]],"date-time":"2025-02-12T10:25:57Z","timestamp":1739355957000},"page":"7","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":9,"title":["Navigating Through Human Rights in AI: Exploring the Interplay Between GDPR and Fundamental Rights Impact Assessment"],"prefix":"10.3390","volume":"5","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-7516-3503","authenticated-orcid":false,"given":"Anna","family":"Thomaidou","sequence":"first","affiliation":[{"name":"School of Pure and Applied Sciences, Open University of Cyprus, Latsia, Nicosia 2220, Cyprus"},{"name":"Hellenic Authority for Communication Security and Privacy, Ierou Lohou 3, Marousi, 15124 Athens, Greece"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7663-7169","authenticated-orcid":false,"given":"Konstantinos","family":"Limniotis","sequence":"additional","affiliation":[{"name":"School of Pure and Applied Sciences, Open University of Cyprus, Latsia, Nicosia 2220, Cyprus"},{"name":"Hellenic Data Protection Authority, Kifissias 1-3, 11523 Athens, Greece"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2025,2,11]]},"reference":[{"key":"ref_1","first-page":"115","article-title":"Has the Future Started? The Current Growth of Artificial Intelligence, Machine Learning, and Deep Learning","volume":"3","author":"Aggarwal","year":"2022","journal-title":"Iraqi J. Comput. Sci. Math."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"1377","DOI":"10.46609\/IJSSER.2023.v08i06.014","article-title":"Impact of Artificial Intelligence on the Global Economy: Analysis of Effects and Consequences","volume":"8","author":"Chugh","year":"2023","journal-title":"Int. J. Soc. Sci. Econ. Res."},{"key":"ref_3","first-page":"44","article-title":"Artificial Intelligence: The Technology, Challenges and Applications","volume":"8","author":"Bezboruah","year":"2020","journal-title":"Trans. Eng. Comput. Sci."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Poalelungi, D.G., Musat, C.L., Fulga, A., Neagu, M., Neagu, A.I., Piraianu, A.I., and Fulga, I. (2023). Advancing Patient Care: How Artificial Intelligence Is Transforming Healthcare. J. Pers. Med., 13.","DOI":"10.3390\/jpm13081214"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"728","DOI":"10.3390\/smartcities5020038","article-title":"The Dual Role of Artificial Intelligence in Developing Smart Cities","volume":"5","author":"Zamponi","year":"2022","journal-title":"Smart Cities"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"3713","DOI":"10.1007\/s11042-022-13428-4","article-title":"Natural Language Processing: State of the Art, Current Trends and Challenges","volume":"82","author":"Khurana","year":"2023","journal-title":"Multimed. Tools Appl."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"403","DOI":"10.1007\/s10892-017-9252-2","article-title":"Incorporating Ethics into Artificial Intelligence","volume":"21","author":"Etzioni","year":"2017","journal-title":"J. Ethics"},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"44","DOI":"10.1007\/s11948-021-00319-4","article-title":"Ethics-Based Auditing of Automated Decision-Making Systems: Nature, Scope, and Limitations","volume":"27","author":"Morley","year":"2021","journal-title":"Sci. Eng. Ethics"},{"key":"ref_9","first-page":"117","article-title":"An Institutional View of Algorithmic Impact Assessments","volume":"35","author":"Selbst","year":"2021","journal-title":"Harv. J. Law Technol. Harv. JOLT"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Papernot, N., McDaniel, P., Wu, X., Jha, S., and Swami, A. (2016, January 23\u201325). Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks. Proceedings of the 2016 IEEE Symposium on Security and Privacy (SP), San Jose, CA, USA.","DOI":"10.1109\/SP.2016.41"},{"key":"ref_11","unstructured":"European Union (2024, July 16). Regulation\u2014EU\u20142024\/1689\u2014EN\u2014EUR-Lex. Available online: https:\/\/eur-lex.europa.eu\/eli\/reg\/2024\/1689\/oj."},{"key":"ref_12","unstructured":"Heikkil\u00e4, M. (2024, March 27). Five Things You Need to Know About the EU\u2019s New AI Act. Available online: https:\/\/www.technologyreview.com\/2023\/12\/11\/1084942\/five-things-you-need-to-know-about-the-eus-new-ai-act\/."},{"key":"ref_13","unstructured":"(2024, December 17). Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data, and Repealing Directive 95\/46\/EC (General Data Protection Regulation) (Text with EEA Relevance); 2016; Volume 119. Available online: https:\/\/eur-lex.europa.eu\/eli\/reg\/2016\/679\/oj\/eng."},{"key":"ref_14","unstructured":"(2024, December 17). Communication from the Commission to the European Parliament, the European Council, the Council, the European Economic and Social Committee and the Committee of the Regions Artificial Intelligence for Europe; 2018. Available online: https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=celex:52018DC0237."},{"key":"ref_15","unstructured":"(2017, December 17). European Parliament Legislative Resolution of 13 March 2024 on the Proposal for a Regulation of the European Parliament and of the Council on Laying down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act) and Amending Certain Union Legislative Acts (COM(2021)0206\u2014C9-0146\/2021\u20142021\/0106(COD)); 9_TA. Available online: https:\/\/www.europarl.europa.eu\/doceo\/document\/TA-9-2024-0138_EN.html."},{"key":"ref_16","first-page":"3","article-title":"Learning from Artificial Intelligence\u2019s Previous Awakenings: The History of Expert Systems","volume":"39","author":"Brock","year":"2018","journal-title":"AI Mag."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Grosan, C., and Abraham, A. (2011). Rule-Based Expert Systems. Intelligent Systems: A Modern Approach, Springer.","DOI":"10.1007\/978-3-642-21004-4"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"41","DOI":"10.1017\/err.2019.8","article-title":"Towards Intelligent Regulation of Artificial Intelligence","volume":"10","author":"Buiten","year":"2019","journal-title":"Eur. J. Risk Regul."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Woschank, M., Rauch, E., and Zsifkovits, H. (2020). A Review of Further Directions for Artificial Intelligence, Machine Learning, and Deep Learning in Smart Logistics. Sustainability, 12.","DOI":"10.3390\/su12093760"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Cao, L. (2021). AI in Finance: Challenges, Techniques and Opportunities. arXiv.","DOI":"10.2139\/ssrn.3869625"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"e25","DOI":"10.1017\/dap.2023.22","article-title":"Artificial Intelligence and Algorithmic Decisions in Fraud Detection: An Interpretive Structural Model","volume":"5","author":"Tan","year":"2023","journal-title":"Data Policy"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"264","DOI":"10.1108\/FS-10-2021-0210","article-title":"Artificial Intelligence in Retail\u2014A Systematic Literature Review","volume":"25","author":"Heins","year":"2023","journal-title":"Foresight"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Lacroux, A., and Martin-Lacroux, C. (2022). Should I Trust the Artificial Intelligence to Recruit? Recruiters\u2019 Perceptions and Behavior When Faced With Algorithm-Based Recommendation Systems During Resume Screening. Front. Psychol., 13.","DOI":"10.3389\/fpsyg.2022.895997"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"135","DOI":"10.1093\/cjres\/rsz026","article-title":"Artificial Intelligence in the Legal Sector: Pressures and Challenges of Transformation","volume":"13","author":"Brooks","year":"2020","journal-title":"Camb. J. Reg. Econ. Soc."},{"key":"ref_25","unstructured":"(2023, November 23). Ethics Guidelines for Trustworthy AI|Shaping Europe\u2019s Digital Future. Available online: https:\/\/digital-strategy.ec.europa.eu\/en\/library\/ethics-guidelines-trustworthy-ai."},{"key":"ref_26","unstructured":"European Union (2024, December 17). Charter of Fundamental Rights of the European Union. Available online: https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/HTML\/?uri=CELEX:12012P\/TXT."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"6","DOI":"10.22214\/ijraset.2023.54513","article-title":"Ethical Considerations for the Use of AI Language Model","volume":"11","author":"Gaud","year":"2023","journal-title":"Int. J. Res. Appl. Sci. Eng. Technol."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Fjeld, J., Achten, N., Hilligoss, H., Nagy, A., and Srikumar, M. (2020). Principled Artificial Intelligence: Mapping Consensus in Ethical and Rights-Based Approaches to Principles for AI. SSRN Electron. J., 2020-1.","DOI":"10.2139\/ssrn.3518482"},{"key":"ref_29","unstructured":"(2025, January 26). Art. 29 Working Party. Justice and Consumers Article 29\u2014Guidelines on Data Protection Impact Assessment (DPIA) (Wp248rev.01). Available online: https:\/\/ec.europa.eu\/newsroom\/article29\/items\/611236."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"41","DOI":"10.1007\/s44206-024-00129-8","article-title":"Enforcement Design Patterns in EU Law: An Analysis of the AI Act","volume":"3","author":"Larsson","year":"2024","journal-title":"Digit. Soc."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"2493","DOI":"10.1007\/s00146-023-01723-z","article-title":"Taking AI Risks Seriously: A New Assessment Model for the AI Act","volume":"39","author":"Novelli","year":"2023","journal-title":"AI Soc."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"106020","DOI":"10.1016\/j.clsr.2024.106020","article-title":"The Fundamental Rights Impact Assessment (FRIA) in the AI Act: Roots, Legal Obligations and Key Elements for a Model Template","volume":"54","author":"Mantelero","year":"2024","journal-title":"Comput. Law Secur. Rev."},{"key":"ref_33","unstructured":"(2025, January 29). Getting the Future Right\u2014Artificial Intelligence and Fundamental Rights|European Union Agency for Fundamental Rights. Available online: https:\/\/fra.europa.eu\/en\/publication\/2020\/artificial-intelligence-and-fundamental-rights."},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Ivanova, Y. (2020). The Data Protection Impact Assessment as a Tool to Enforce Non-Discriminatory AI. Privacy Technologies and Policy, Proceedings of the 8th Annual Privacy Forum, APF 2020, Lisbon, Portugal, 22\u201323 October 2020, Springer. Lecture Notes in Computer Science (LNCS, Volume 12121).","DOI":"10.1007\/978-3-030-55196-4_1"},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"105833","DOI":"10.1016\/j.clsr.2023.105833","article-title":"Humans in the GDPR and AIA Governance of Automated and Algorithmic Systems. Essential Pre-Requisites against Abdicating Responsibilities","volume":"50","author":"Lazcoz","year":"2023","journal-title":"Comput. Law Secur. Rev."},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"125","DOI":"10.1093\/idpl\/ipaa020","article-title":"Algorithmic Impact Assessments under the GDPR: Producing Multi-Layered Explanations","volume":"11","author":"Kaminski","year":"2021","journal-title":"Int. Data Priv. Law"},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"219","DOI":"10.1007\/s43681-020-00029-w","article-title":"The Interrelation between Data and AI Ethics in the Context of Impact Assessments","volume":"1","author":"Kazim","year":"2021","journal-title":"AI Ethics"},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Mitrou, L. (2018). Data Protection, Artificial Intelligence and Cognitive Services: Is the General Data Protection Regulation (GDPR) \u2018Artificial Intelligence-Proof\u2019?. SSRN Electron. J.","DOI":"10.2139\/ssrn.3386914"},{"key":"ref_39","first-page":"1","article-title":"Towards a Method for Data Protection Impact Assessment: Making Sense of GDPR Requirements","volume":"1","author":"Kloza","year":"2019","journal-title":"d.pia.lab Policy Brief"},{"key":"ref_40","unstructured":"(2024, February 29). Data Protection Impact Assessments (DPIAs). Available online: https:\/\/ico.org.uk\/for-organisations\/uk-gdpr-guidance-and-resources\/accountability-and-governance\/data-protection-impact-assessments-dpias\/."},{"key":"ref_41","unstructured":"(2025, January 30). Data Protection and Privacy Impact Assessments. Available online: https:\/\/iapp.org\/resources\/topics\/privacy-impact-assessment-2\/."},{"key":"ref_42","unstructured":"(2024, February 29). The Open Source PIA Software Helps to Carry Out Data Protection Impact Assessment. Available online: https:\/\/www.cnil.fr\/en\/open-source-pia-software-helps-carry-out-data-protection-impact-assessment."},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"106101","DOI":"10.1016\/j.clsr.2024.106101","article-title":"Fundamental Rights and Artificial Intelligence Impact Assessment: A New Quantitative Methodology in the Upcoming Era of AI Act","volume":"56","author":"Bertaina","year":"2025","journal-title":"Comput. Law Secur. Rev."},{"key":"ref_44","unstructured":"Gerards, J., Sch\u00e4fer, M.T., Muis, I., and Vankan, A. (2025, January 30). Impact Assessment Fundamental Rights and Algorithms\u2014Report\u2014Government.Nl, Available online: https:\/\/www.government.nl\/documents\/reports\/2022\/03\/31\/impact-assessment-fundamental-rights-and-algorithms."},{"key":"ref_45","unstructured":"Waem, H., Dauzier, J., and Demircan, M. (2024, March 31). Fundamental Rights Impact Assessments Under the EU AI Act: Who, What and How?. Available online: https:\/\/www.technologyslegaledge.com\/2024\/03\/fundamental-rights-impact-assessments-under-the-eu-ai-act-who-what-and-how\/."},{"key":"ref_46","unstructured":"(2024, March 05). Human Rights Impact Assessment of Digital Activities|the Danish Institute for Human Rights. Available online: https:\/\/www.humanrights.dk\/publications\/human-rights-impact-assessment-digital-activities."},{"key":"ref_47","unstructured":"(2024, March 05). Treasury Board of Canada Secretariat Algorithmic Impact Assessment Tool. Available online: https:\/\/www.canada.ca\/en\/government\/system\/digital-government\/digital-government-innovations\/responsible-use-ai\/algorithmic-impact-assessment.html."},{"key":"ref_48","unstructured":"(2024, March 22). Xenophobic Machines: Discrimination Through Unregulated Use of Algorithms in the Dutch Childcare Benefits Scandal. Available online: https:\/\/www.amnesty.org\/en\/documents\/eur35\/4686\/2021\/en\/."},{"key":"ref_49","unstructured":"(2025, January 26). Dutch House of Representatives Endorses Mandatory Use of Human Rights and Algorithms Impact Assessment\u2014News\u2014Utrecht University. Available online: https:\/\/www.uu.nl\/en\/news\/dutch-house-of-representatives-endorses-mandatory-use-of-human-rights-and-algorithms-impact."},{"key":"ref_50","unstructured":"(2025, January 29). European Data Protection Board; Statement 3\/2024 on Data Protection Authorities\u2019 Role in the Artificial Intelligence Act Framework. Available online: https:\/\/www.edpb.europa.eu\/our-work-tools\/our-documents\/statements\/statement-32024-data-protection-authorities-role-artificial_en."}],"container-title":["Journal of Cybersecurity and Privacy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2624-800X\/5\/1\/7\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,9]],"date-time":"2025-10-09T16:31:13Z","timestamp":1760027473000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2624-800X\/5\/1\/7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,2,11]]},"references-count":50,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2025,3]]}},"alternative-id":["jcp5010007"],"URL":"https:\/\/doi.org\/10.3390\/jcp5010007","relation":{},"ISSN":["2624-800X"],"issn-type":[{"value":"2624-800X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,2,11]]}}}