THE JOURNAL COMPLIANCE · 16 SEPTEMBER 2026
1 MIN READ
(COMPLIANCE) PUBLISHED · UPDATED · 1 MIN READ · COMPLIANCE

GDPR and generative AI: a checklist for marketing teams

What has to be true before an agent writes to a European prospect — consent, records, retention and the part most teams miss.

A compliance checklist for AI-assisted outreach in the EU
The rules are not the obstacle. Not knowing which ones apply is. PHOTO · U [IN] AI LAB

01 — Before the first message

Know your legal basis, and be able to say it in one sentence. For B2B outreach in most of the EU that is legitimate interest — which is a position you have to be able to defend, not a checkbox.

02 — While the campaign runs

Keep the record: what data you hold on a contact, where it came from, and when it will be deleted. An agent that cannot answer those three questions is a liability regardless of how well it writes.

03 — The part most teams miss

The opt-out has to work on the first attempt, from any channel, without a human in the loop. That is usually an engineering task, not a legal one.

FILED UNDER ComplianceOutreachData
Olga Bialkovich Founder · AI and marketing strategy Olga founded the lead-generation product that now runs as U [in] AI, and she sets the direction of the lab: which parts of marketing are worth automating, and which stay with people. Her working claim is a practical one — a system built around the right profile and the right message takes up to 60% out of the cost of finding customers and partners.
04 — YOUR TURN

Want the same for your funnel? Tell us in one sentence.

Hi, I'm from

Our team spends about hours a week

on

Send the audit to

FREE · 20-MINUTE CALL REPLY WITHIN ONE WORKING DAY

(KEEP READING) All stories