A Better Newspaper

## Overview A legal and regulatory tension has emerged between two major EU digital law instruments — the AI Act and the GDPR — over how each treats the concept of algorithmic 'inference.' Article 3(1) of the AI Act uses the capability to infer as a constitutive, defining feature that separates regulated 'AI systems' from conventional software (arXiv, August 2026). The GDPR, by contrast, never defines inference as such but governs it protectively: legal consequences flow from the processing of personal data and from what an inference says about, or does to, a person — regardless of whether the underlying technology qualifies as an 'AI system' under the AI Act (arXiv, August 2026). ## Why It Matters A research analysis titled 'Inferential Capability Does Not Determine Legal Scope' argues these two regulatory perimeters — one centered on technical capability, one centered on data-processing consequences — do not align, creating a structural ambiguity for compliance. A system might fall outside AI Act scope (because its 'inference' capability is deemed insufficiently central or novel) while still triggering GDPR obligations because it processes personal data and produces consequential outputs about individuals. Conversely, systems captured by the AI Act's inference-based definition may not implicate GDPR at all if no personal data is involved (arXiv, August 2026). This divergence has direct implications for companies deploying AI systems in the EU: compliance teams cannot assume that AI Act classification determines GDPR exposure, or vice versa. Legal counsel advising on EU AI deployments will need to conduct separate analyses under each framework rather than treating 'AI Act compliance' as a proxy for full regulatory clearance. ## Strategic Implications For attorneys and companies operating internationally, this ambiguity is likely to generate: - Increased compliance costs from dual-track legal analysis (AI Act classification + GDPR data processing assessment) - Potential enforcement gaps or overlaps as regulators (national AI Act authorities vs. data protection authorities) assert jurisdiction - Continued academic and regulatory debate over harmonizing definitions of 'inference' across EU digital law - Relevance to ongoing EU AI Act implementation guidance and future amendments This is an early-stage legal/scholarly debate rather than a settled ruling, but it identifies a structural fault line likely to surface in future EU AI Act enforcement actions and GDPR litigation. ## Sources - arXiv:2608.10601, 'Inferential Capability Does Not Determine Legal Scope' (August 2026)