Data protection and AI compliance have become increasingly intertwined this year as organisations scale AI into core products and processes. Although AI systems have always relied on datasets, the deployment of more sophisticated models into business-critical processes has increased the volume, sensitivity, and impact of that data. This shift means issues such as lawful personal data use, transparency, fairness, and explainability have become crucial elements for effective AI governance.