Tytti Rintamäki is a PhD researcher at Dublin City University, where she conducts multidisciplinary research bridging the fields of Computer Science and Law. Tytti specialised in emerging technology regulation at the European University Institute, obtaining a Master of Arts in Italy, building on her Bachelor of Political Science in International Relations and Organisations obtained from Leiden University in the Netherlands.
PhD Project
Title
An Impact Assessment Tool for AI Compliance: Combining the GDPR and AI Act Requirements Using Semantic Web Technologies
Summary
This PhD research addresses the growing complexity of AI regulation compliance within Europe, where organisations must navigate both the General Data Protection Regulation (GDPR) and the Artificial Intelligence Act (AI Act). Currently, organisations struggle with labour-intensive, manual impact assessments that vary across EU member states, creating regulatory uncertainty and barriers to innovation. Organisations using AI systems that process personal data face overlapping compliance requirements for both the Data Protection Impact Assessments (DPIA) under the GDPR and Fundamental Rights Impact Assessments (FRIA) under the AI Act.
To assist organisations,the research aims at developing an automated web-based tool using semantic web technologies to streamline this compliance process. The tool combines DPIA and FRIA requirements, reduces manual workload through automation, and ensures consistency across different jurisdictions. This approach involves mapping regulatory requirements across all EU/EEA countries, creating machine-readable frameworks using semantic web standards, and developing a web application that can assist with assessing the risk level of AI systems, identifying potential risks and affected rights, and generating compliant documentation for both regulations.