Comply · European Union
General Data Protection Regulation
EU data protection where AI processes personal data.
The General Data Protection Regulation governs the processing of personal data of people in the EU. It is central to AI because agents routinely process personal data — triggering requirements for a lawful basis, data-protection impact assessments (DPIAs) for high-risk processing, transparency, and safeguards around automated decision-making with legal or similarly significant effects.
Who it applies to
Any organization, anywhere, processing the personal data of individuals in the EU.
Key obligations
- Establish a lawful basis and honor data-subject rights
- Complete a DPIA for high-risk processing (Art. 35)
- Apply safeguards to automated decision-making (Art. 22)
- Ensure transparency, data minimization, and security
- Maintain records of processing activities
How Maetra maps agents to GDPR
Maetra detects personal-data flows in Discover and Secure, generates DPIA evidence in Comply, routes significant automated decisions through Govern for human involvement, and logs everything for accountability.
In practice, Maetra:
- Scans and fingerprints each agent. Discover reads the agent’s code — its tools, data access and sensitivity, actions, model, and environment — into an evidence-backed profile tied to the exact file and commit.
- Decides what applies. That profile determines whether GDPR is in scope for the agent and which of its requirements apply.
- Auto-detects controls and surfaces gaps. Controls your code already satisfies are detected automatically from the scan; the rest become a clear list of gaps, each tied to the requirement and the evidence it still needs.
- Proves it and keeps it current. Close gaps with linked evidence or generated documents — reused across every framework the same control supports — and Maetra re-checks on each rescan and flags evidence that has gone stale.
Related frameworks
Prove GDPR compliance with Maetra
Classify your AI agents once and Maetra maps them to GDPR and every other framework it supports — generating the evidence and documentation, tracking gaps and deadlines, and sealing every decision in an immutable audit trail.