The AI Act is the cornerstone of the EU’s approach to AI governance and the world’s first comprehensive legal framework on artificial intelligence. The AI Act follows a ‘risk-based’ approach where AI systems are classified according to the level of risk they pose to individuals and society. The higher the level of risk, the more stringent the legal obligations placed on developers and users. Different systems are subject to different rules, with minimal-risk applications (spam filters, recommendation systems) having fewer rules, limited-risk systems (chatbots), and high-risk systems (e.g. in education, healthcare, employment, etc.) demanding rules on transparency, human control, documentation, risk assessment, and data quality. Additionally, there’s unacceptable risk (manipulative AI) when AI practices are considered incompatible with European values and undermine fundamental rights.
One of the most important sectors mentioned in the AI Act is education, given that decisions made at educational institutions have a long-lasting impact on students’ academic and professional careers. Many AI applications used in education fall within the high-risk category, and universities should ensure that human oversight stays at the heart of decisions, that AI systems be fair and accurate, and do not lead to discrimination or unintended unfair bias.
The General Data Protection Regulation (GDPR) also remains crucial. Educational institutions routinely process large volumes of personal data, including student records, examination information, academic performance data, and administrative documentation. When such data is processed by AI systems, institutions must ensure compliance with GDPR principles: lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, security, and accountability. Universities must prevent confidential or personal information from being released in publicly accessible AI systems that could harm students’ rights to privacy.
Kosovo, like other countries in the region, is still at an early stage in shaping its approach to artificial intelligence.
The European Commission's 2025 Kosovo Report calls on Kosovo to fully align with the AI Act and establish the necessary enforcement structures.
Kosovo’s Digital Agenda 2030 provides an initial basis for this process, including plans to develop a national AI strategy and create a legal and regulatory framework for AI, including in education.