# Recital (69)

The right to privacy and to protection of personal data must be guaranteed throughout the entire lifecycle of the AI 
system. In this regard, the principles of data minimisation and data protection by design and by default, as set out in 
Union data protection law, are applicable when personal data are processed. Measures taken by providers to ensure 
compliance with those principles may include not only anonymisation and encryption, but also the use of 
technology that permits algorithms to be brought to the data and allows training of AI systems without the 
transmission between parties or copying of the raw or structured data themselves, without prejudice to the 
requirements on data governance provided for in this Regulation.

---
Source: Regulation (EU) 2024/1689 (Artificial Intelligence Act) as amended by Regulation (EU) 2026/1744, consolidated text of 27 July 2026 (Official Journal of the EU). This page is AI-generated legal information, not legal advice. Verify against the Official Journal.
Canonical: https://euaiactlaw.com/recital/69