GDPR and compliance with AI that cites the regulation

• The Act on Personal Data Processing and related Czech regulations in their current wording.
• EU law including the GDPR in its Czech-language version and other regulations and directives from EUR-Lex.
• Case law of the Supreme Administrative Court on decisions of the Office for Personal Data Protection.
• Rulings of the Constitutional Court on the protection of privacy.
• Decisions of the Office for the Protection of Competition and other administrative case law for broader compliance needs.

"What conditions must legitimate interest satisfy as a legal basis for a workplace camera system? Cite the GDPR, the statute and the relevant Supreme Administrative Court ruling." The AI retrieves Article 6(1)(f), Section 316 of the Labour Code and administrative court decisions on cameras, and summarises the balancing test.

"What is the deadline for reporting a security breach and what must the notification contain?" The AI cites Article 33 with a reference and lists the requirements based on the actual text of the regulation, not from memory.

"Compare the requirements for a data protection officer in the Czech Republic and in Germany." The comparison tool returns the relevant provisions of both jurisdictions.

A compliance team typically maintains a register of obligations with references to regulations. With AI and the connector, the register can be reviewed once a month: the AI goes through each entry, verifies that the referenced provision is still in force in the stated wording, and flags any changes. Historical versions in the corpus make it possible to state precisely what changed and from when.

For employee questions (can marketing send a newsletter to former customers?), a company agent instructed to answer only from the connector and always cite the relevant article of the regulation works well. Deployment is described in the guide AI for in-house counsel.

Using AI is itself a form of processing. Only the search query composed by the AI is sent to the Europaius connector; personal data has no place there and, with a properly formulated query, is not actually present. Documents and conversations remain with the AI provider, which is why a plan with training disabled and proper data processing documentation is essential. How Europaius handles connector data is described in the guide MCP Connector Security.