General-purpose AI (GPAI) refers to AI models, such as large language models, that are designed to perform a wide variety of tasks across multiple domains rather than a single specific function.

The training and use of personal data within GPAI systems fall squarely under existing privacy laws like the rigorous GDPR’s enforcement framework.

This requires developers and users to implement strict governance, ensure transparency, and adhere to principles like data minimisation.