The General Data Protection Regulation (GDPR) reshaped how the world thinks about data. Eight years and €5 billion in fines later, it remains the regulation most data teams underestimate — and the one that catches them first.Now the EU has added a second layer. The AI Act entered into force in 2024, but its enforcement is phased — and by the time this talk is delivered, the most consequential provisions have just taken effect.Prohibited AI practices were banned in February 2025. General-purpose AI model obligations followed in August 2025. And as of August 2026 — just three months ago — the high-risk AI system requirements are enforceable, with fines of up to €35 million or 7% of global revenue.Together, GDPR and the AI Act form a regulatory stack that covers the entire data lifecycle: from collection and processing through model training, deployment, and automated decision-making. For data teams, this is not two separate compliance projects — it is one architectural challenge.Drawing from 100+ engagements helping tech companies navigate EU regulation, Silvan Jongerius presents a practical roadmap for engineers and machine learning (ML) teams. Attendees will learn how GDPR’s data processing rules interact with the AI Act’s documentation requirements, which AI systems fall into high-risk categories now that enforcement is live, and how to build compliance into pipelines and MLOps stacks rather than bolting it on afterward.No lawyers required — just engineering decisions that happen to keep organizations compliant in Europe’s most regulated market.