Safeguarding Personal Data in AI-Powered Technologies: A Legal and Policy Analysis

Abstract

The rapid proliferation of Artificial Intelligence (AI)-powered technologies has fundamentally transformed the manner in which personal data is collected, processed, and utilised, raising acute questions of legal accountability and individual rights. This paper undertakes a doctrinal and comparative legal analysis of the frameworks governing personal data protection in AI-driven ecosystems, with particular reference to the General Data Protection Regulation (GDPR), India's Digital Personal Data Protection Act, 2023, and the EU Artificial Intelligence Act, 2024. The objectives are to evaluate the adequacy of existing legal regimes and to identify regulatory lacunae specific to AI-driven data processing. Employing a doctrinal and comparative methodology, the paper analyses judicial pronouncements, legislative instruments, and institutional guidelines. The analysis reveals structural inadequacies in consent-based frameworks, persistent gaps in algorithmic accountability, and enforcement asymmetries across jurisdictions. The paper concludes by recommending a risk-tiered regulatory model, codification of algorithmic accountability, and binding international cooperation to ensure meaningful protection of personal data rights in the evolving AI landscape.