Regulatory framing
GDPR Art. 6 lawful basis · EU AI Act Art. 50 (transparency obligation) and Art. 6 (high-risk classification) · DSA Art. 35 (systemic-risk mitigation for VLOPs). Compliance is enforced inline at AI-025 (Article 50 disclosure tagging) and AI-027 (Article 50(4) deepfake detection).