Agentic AI presents specific risks compared to other types of AI systems. It would be like a “machine” in action, one that moves from answering a question to acting autonomously to achieve certain objectives. As a result, it has greater autonomy in decision-making; and this generates new risks in key aspects of data protection: What data is strictly necessary? What role do organizations assume (controller, joint controllers, or processor)? And how should effective human oversight of these AI agents be structured? New challenges arise (sometimes invisible) for privacy and for proper compliance with the GDPR and the AI Act.

CIDAI | LinkedIn

Director, CIDAI

Joan Mas is a Telecommunications engineer (UPC) and MBA (Webster University). He worked for 10 years at the European Space Agency, the Netherlands, in the ENVISAT and METOP projects, Earth observation satellites. From 2000 to 2008 he developed at NTE S.A., equipment for the International Space Station and life support systems for manned space missions. Until 2024 he was Director of the Digital Technologies Division at Eurecat, promoting developments in areas such as Data Analytics and Big Data, Artificial Intelligence, Cybersecurity and others for multi-sector applications. He is currently Scientific Director in the digital field at Eurecat and, from 2021, he is also Director of CIDAI.

APDCAT | LinkedIn

Director, Catalan Data Protection Authority

Holds an MBA from the UB, a diploma in Political Leadership from IESE in Madrid, and a degree in Pharmacy. She has held senior leadership positions within the Government of Catalonia, the Parliament of Catalonia, and at the local level. In 2016, she led training on the new General Data Protection Regulation for Catalan administrations as the Head of the Minister of Governance. She played a key role in the deployment of the Transparency Law within the Generalitat de Catalunya and facilitated its implementation in local councils. Since 2022, he has been the director of the Catalan Data Protection Authority.