Compliance basics: GDPR, HIPAA and the EU AI Act
A practical orientation to the main regimes that affect LLM systems, how their concepts map onto prompts, logs, embeddings and models, and the engineering practices that make compliance easier. General education, not legal advice.
This lesson is general education, not legal advice. Laws change and apply differently by country, sector and use case. Dates and details below may be out of date by the time you read this. Involve qualified legal and privacy professionals before launching anything that handles personal data or affects people's rights.
Engineers do not need to be lawyers, but they do need to be able to answer the questions lawyers will ask: what data do you collect, where does it go, who can see it, how long is it kept, how can it be deleted, and what happens when the model is wrong? This lesson maps the main regimes onto the parts of an LLM system you actually build.
Pro content
Keep reading with Inference Academy Pro
Unlock the rest of this lesson, plus every advanced lesson, hands-on lab, the larger playground models and completion certificates.