# Privacy & limits – Dein privater Assistent

> GDPR, hallucinations, accountability: where not to delegate.

- [Is ChatGPT GDPR Compliant? What Businesses Need to Do](https://dein-privater-assistent.de/en/privacy-and-limits/chatgpt-gdpr/): ChatGPT isn't GDPR compliant or non-compliant by itself; it depends on how you use it. Text with no personal data is unproblematic. Client data needs a business plan with a data processing agreement, training off by default and internal rules. Personal accounts holding client data, and special categories such as health data, are off limits.
- [AI Hallucinations: Why They Happen and How to Catch Them](https://dein-privater-assistent.de/en/privacy-and-limits/ai-hallucinations/): AI hallucinations are answers that read fluently and plausibly but are wrong or invented: sources, figures, court cases, quotes. They happen because language models generate likely text and are rewarded for guessing during training and evaluation. Supplying your own sources, allowing "I don't know", demanding verbatim evidence and cross-checking catch most of them.
- [AI Act AI Literacy: What Article 4 Asks of Small Firms](https://dein-privater-assistent.de/en/privacy-and-limits/ai-act-ai-literacy/): Since February 2025, Article 4 of the EU AI Act has required organisations that use AI systems to take steps on their staff's AI literacy. The July 2026 Digital Omnibus reworded it: companies must take measures to support AI literacy, without guaranteeing any particular level. No certificate is required. A short training session, written rules and a simple record usually cover it.
- [Do You Have to Disclose AI-Generated Content? EU Rules](https://dein-privater-assistent.de/en/privacy-and-limits/disclose-ai-generated-content/): Since 2 August 2026, Article 50 of the EU AI Act has required businesses to disclose deepfakes, meaning realistic AI-generated or manipulated images, video or audio, and AI-generated text published to inform the public on matters of public interest unless a person reviewed it and holds editorial responsibility. Ordinary marketing copy, emails and edited blog posts usually need no label.

About this site: https://dein-privater-assistent.de/en/about/