Artificial Intelligence in Smart Cities: Legal Practice at the Intersection of the GDPR, the AI Act, and Fundamental Rights Through the Lens of Data

Abstract

Generative artificial intelligence and autonomous agent systems have introduced a new layer of complexity in personal data protection and fundamental rights, particularly in the context of smart cities. This article adopts a predominantly practical and process-oriented approach, analyzing the real interaction between the GDPR, the AI Act, and the Charter of Fundamental Rights of the EU. The central hypothesis is structured around data input and output flows, proposing an operational framework that enables auditing, certification, and governance of such flows through interoperability and open source as legal safeguards