On 29 September 2025, the Ministry of Science and Technology (MST) opened a public consultation, until 20 October 2025, on the Draft Law on Artificial Intelligence, which sets out binding cross-references to existing data protection regulation. Article 6(2) requires that activities related to artificial intelligence systems, where they involve personal data, comply with legal regulations on personal data protection and cybersecurity. Article 25(2)(d) requires that the development of national artificial intelligence infrastructure ensure the protection of personal privacy in accordance with the Law on Personal Data Protection, the Law on Data and the Law on Cybersecurity. Article 28(4) requires ministries, branches and local authorities to connect, share and exploit artificial intelligence infrastructure in compliance with laws on confidentiality, network security and personal data protection. Article 29(1) requires that the construction, management, connection, sharing and protection of national and specialised databases serving artificial intelligence comply with the Law on Data and the Law on Personal Data Protection. Article 22(4) requires that the public disclosure of basic information on high-risk artificial intelligence systems balance transparency with the protection of personal data. Articles 23 and 32 require compliance with personal data protection obligations in supervision, inspection and enforcement activities and in the storage, processing and transfer of personal data in artificial intelligence activities.
Original source