4.1 | Data protection and copyright

What you already know
  • Basic knowledge of data protection in AI applications
  • Fundamental information on copyright for AI-generated content
  • First steps towards the responsible use of AI tools
What you will learn in this module
  • The extended data protection obligations as an AI Navigator
  • Copyright specifics when using AI-generated texts and images
  • Practical rules for the secure use of AI tools in a professional environment
  • Responsible use of AI in the context of the upcoming EU AI Act

1. Your Extended Responsibility with AI

As a Navigator, you use AI not only with pre-built assistants but also with direct access to powerful language models. This increases your responsibility—especially regarding data protection and copyright. This module will help you avoid common risks and act securely.

With the upcoming introduction of the EU AI Act, the responsible use of AI takes on a legal dimension that directly affects you. Below, you will learn what this specifically means for your daily work.

Important for you as a user:

Some transparency and training obligations also affect you directly.

With greater AI competence comes greater responsibility—not just for the quality, but also for the legal compliance of your work with AI systems.

2. What You Should Know – Data Protection

What applies on the xpandAI platform? The platform is GDPR-compliant. Your inputs are processed internally and are not used for model development.

Nevertheless, it’s important: Pay attention to your prompts.

What you should not enter:

  • Real names, email addresses, phone numbers
  • Customer data, employee information
  • Internal details about projects, strategies, or finances
  • Information that is confidential (NDAs)

How to stay secure:

  • Use placeholders instead of real names or data
  • Generalize critical content (‚a customer‘ instead of ‚Company X‘)
  • Use fictitious or anonymized examples
  • Do not enter sensitive content into publicly available tools (outside the platform)

When in doubt: Contact your data protection officer.

3. What You Should Know – Copyright

AI Texts
Texts generated purely by AI (e.g., via GPT) are not protected by copyright in the EU. You are allowed to use, edit, and share them—even commercially.

However:

  • You bear the responsibility for the content
  • You should review and, if necessary, adapt the text
  • Through revision or creative design, it can become a protectable work—with you as the author

AI Images
AI-generated images (e.g., via the Xpand Image Assistant) are also currently not protectable—they are not considered a „human creation.“

You may use them—with restrictions:

What you should avoid:

  • well-known characters (e.g., Mickey Mouse, Pikachu)
  • trademark-like logos (e.g., the Apple logo)
  • stylistic imitations (‚in the style of Banksy…‘)

These cases can infringe on copyright, trademark, or personality rights—even if the image is AI-generated.

When in doubt: Always involve the legal department or communications team before publication—especially for external use.

4. Your Responsibility as a Navigator

  • You use powerful tools. Remain responsible in their use.
  • Do not disclose sensitive information—not even carelessly internally.
  • Review texts and images before sharing or publishing.
  • Use AI as a support tool—but not for automated decision-making about people.

5. xpand Tip

Clear rule of thumb for everyday use and prompting:

If you wouldn’t write a piece of information in a public email—don’t enter it into a prompt either.

Your Takeaway

  • You work in compliance with data protection—if you act consciously.
  • You are allowed to use AI texts and images—but you bear the responsibility.
  • When in doubt: It’s better to anonymize or get confirmation one more time.

xpand supports you with secure tools, clear principles—and room for your questions.