Data protection has become extremely important with the emergence of new technologies such as artificial intelligence. In this segment, the protection of fundamental human rights such as the right to privacy and the right to the protection of personal data is highly emphasized. The General Data Protection Regulation, its framework and the most relevant articles guide us through this. The GDPR provides a legislative framework for what a proper and fair data processing procedure should look like. The assumption is that, although the provisions of the GDPR leave room for the interpretation of new technologies, many questions related to data protection and artificial intelligence do not have an explicit answer in the GDPR. This can lead to uncertainty and cost, and can unnecessarily hinder the development of AI applications. The paper analyzes how the processing manager's obligations reflect on the organization's operations, the concrete effects of human supervision of automated AI decisions, the principles of transparency, minimization, legality, accuracy, impartiality, obligations to inform and fulfill the rights of respondents, a risk-based approach, categorization of the AI system according to the proposed Act on artificial intelligence and the necessary technical and organizational measures taken to preserve privacy by organizations such as anonymity and pseudonymity and the use of certification procedures to demonstrate compliance with EU regulations.