<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"from:2026-07-27","held_since":"2026-07-27","gaps":[],"covered":["AI Act L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-09-28","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/ai-act/recitals/69","url":"https://www.headlesslaw.com/ai-act/recitals/69","title":"Recital 69","family":"l1_recital_view","work_id":"aiact","view_of":"/ai-act/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"Regulation (EU) 2024/1689, OJ L, 2024/1689, 12.7.2024","check":{"against":"EUR-Lex","on":"2026-09-28"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689","valid_from":"2026-07-27","valid_until":null,"content_id":"441696d8075903d9","versions":["2026-07-27"],"version_url":"https://www.headlesslaw.com/ai-act/recitals/69/versions/2026-07-27","revision_url":"https://www.headlesslaw.com/ai-act/recitals/69/versions/2026-07-27/rev/441696d8075903d9","versions_url":"https://www.headlesslaw.com/ai-act/recitals/69/versions","relations_url":"https://www.headlesslaw.com/ai-act/recitals/69/relations","act_url":"https://www.headlesslaw.com/ai-act/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"aiact","path":"/ai-act/recitals","name":"AI Act","number":"Regulation (EU) 2024/1689","celex":"32024R1689","title_official":null,"document_date":null},"position":{"kind":"recital","key":"69","index":69,"articles":180,"annexes":0},"prev":{"path":"/ai-act/recitals/68","key":"68","title":"Recital 68"},"next":{"path":"/ai-act/recitals/70","key":"70","title":"Recital 70"},"act_anchor":""}}} -->
# Recital 69

*In force · Regulation (EU) 2024/1689, OJ L, 2024/1689, 12.7.2024 · Checked against EUR-Lex on 28 Sep 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689)*

The right to privacy and to protection of personal data must be guaranteed throughout the entire lifecycle of the AI system. In this regard, the principles of data minimisation and data protection by design and by default, as set out in Union data protection law, are applicable when personal data are processed. Measures taken by providers to ensure compliance with those principles may include not only anonymisation and encryption, but also the use of technology that permits algorithms to be brought to the data and allows training of AI systems without the transmission between parties or copying of the raw or structured data themselves, without prejudice to the requirements on data governance provided for in this Regulation.