8 min read
GDPR and DORA do not ban cloud AI. They make the organisation accountable for it.
A EUR 530 million fine built on a statement about server locations that turned out to be wrong. A EUR 15 million fine on OpenAI, then cancelled by a Rome court. BaFin’s January 2026 guidance putting AI inside DORA. Why the paperwork stays with the buyer either way.
Read the article