Bridging the Transparency Gap: A Comparative Analysis of The Right to Explanation Under the EU AI Act and the GDPR

Authors

  • Syed Shaharyar Ahmed LL.M. International Technology Law & VUFP Fellowship Scholar at Vrije Universiteit Amsterdam, Netherlands
  • Qurat Ul Ain Cheema LL.M. University of South Wales, United Kingdom
  • Saman Fatima LLB (Hons)., University Law College, University of the Punjab

Keywords:

AI Act, GDPR, Right to Explanation, Algorithmic Transparency, High-Risk AI

Abstract

The integration of algorithmic decision-making into critical societal functions has precipitated a shift in the legal landscape, necessitating a robust framework for accountability. This research paper explores the evolving concept of the Right to Explanation within European Union law, specifically focusing on the transition from the General Data Protection Regulation (GDPR) to the recently enacted AI Act. While Article 22 of the GDPR initially established safeguards against automated processing, its effectiveness has been constrained by the inherent opacity of black box systems and judicial ambiguity regarding the depth of disclosure required. This study provides a comparative legal analysis of Articles 86 and 85 of the AI Act alongside the existing GDPR framework and relevant jurisprudence from the Court of Justice of the European Union, such as the Schufa case. It examines how the AI Act attempts to bridge the transparency gap by introducing a specific right to receive an explanation for decisions made by high-risk AI systems and establishing new procedural avenues for market surveillance. The paper argues that while the AI Act expands the scope of individual rights and shifts the regulatory focus toward systemic oversight, it also introduces new tensions between the need for technical clarity and the protection of commercial interests. Ultimately, the research assesses whether this dual-regulatory approach successfully resolves the technical-legal tension of algorithmic transparency or if the complexities of modern machine learning continue to challenge the core principles of due process and effective judicial protection in the digital age.

References

Aboy, M., Minssen, T., & Vayena, E. (2024). Navigating the EU AI Act: implications for regulated digital medical products. Npj Digital Medicine, 7(1), 237. https://doi.org/10.1038/s41746-024-01232-3

Ahmed, S. S. (2024). Mastering the Digital frontier: the intersection of generative AI and human rights in the digital age. UCP Journal of Law & Legal Education, 2(2), 73–94. https://doi.org/10.24312/ucp-jlle.02.02.271

Ahmed, S. S. (2025a). Digital Authoritarianism and Human Rights: Reconciling national security and the right to privacy. International Journal of Law, Ethics, and Technology, 2025–2025(4), 79–93. https://heinonline.org/HOL/Page?handle=hein.journals/ijlet2025&id=559

Ahmed, S. S. (2025b).

Jurisdictional Challenges in Cloud Computing: Data Sovereignty and International Agreements

SSRN Electronic Journal. https://doi.org/10.2139/ssrn.5505698

Ahmed, S. S. (2026a). Cross-Border surveillance and the right to privacy: legal remedies in the age of 5G and LOT. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.6000814

Ahmed, S. S. (2026b, April 30). Judicial oversight in the age of AI: Can the CJEU effectively review automated risk assessments? Retrieved May 22, 2026, from https://journal.suit.edu.pk/index.php/sjls/article/view/1207

Ahmed, S. S., & Imam, J. (2025). The role of Generative Artificial intelligence in Judicial Decision-Making Process. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.5267928

Ahmed, S. S., Dar, A., & Fatima, S. (2026). Reconciling the GDPR Right to Erasure with the Architecture of Large Language Models. In Pakistan Journal of Law, Analysis and Wisdom (Vol. 5, Issue 5). http://pjlaw.com.pk

Ahmed, S. S., Haider, S., & Javed, M. S. (2026, March 31). AI Literacy as a Core Competency: Should Prompt Engineering for Lawyers be a Mandatory Course? Retrieved May 22, 2026, from https://pjlaw.com.pk/index.php/Journal/article/view/v5i3-01-13

Ahmed, S. S., Imam, M. J., & Iftikhar, M. S. (2025). Leveraging Artificial Intelligence in Cross-Cultural Mediation: Enhancing neutrality and efficiency in dispute resolution. journals.umt.edu.pk. https://doi.org/10.32350/lpr.41.08

Ahmed, S. S., Javed, M. S., & Haider, S. (2025). Algorithmic Discrimination and the Law: Regulating Bias in AI Decision-Making. Pakistan Journal of Humanities and Social Sciences, 13(4), 220–229. https://doi.org/10.52131/pjhss.2025.v13i4.3086

Ali, S., Abuhmed, T., El-Sappagh, S., Muhammad, K., Alonso-Moral, J. M., Confalonieri, R., Guidotti, R., Del Ser, J., Díaz-Rodríguez, N., & Herrera, F. (2023). Explainable Artificial Intelligence (XAI): What we know and what is left to attain Trustworthy Artificial Intelligence. Information Fusion, 99, 101805. https://doi.org/10.1016/j.inffus.2023.101805

Batalla, A. (2018). Safeguards for the right not to be subject to a decision based solely on automated processing (Article 22 GDPR). European Journal of Law and Technology, 8(3). http://ejlt.org/index.php/ejlt/article/view/570

Brkan, M. (2018). Do algorithms rule the world? Algorithmic decision-making and data protection in the framework of the GDPR and beyond. International Journal of Law and Information Technology, 27(2), 91–121. https://doi.org/10.1093/ijlit/eay017

Case C-203/22 Magistrat der Stadt Wien v Dun & Bradstreet Austria GmbH ECLI:EU:C: 2025:117. Retrieved from < https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:62022CJ0203>

Case C-634/21 SCHUFA Holding (Scoring) [2023] ECLI:EU:C:2023:957. Retrieved from < https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:62021CJ0634>

Custers, B., & Heijne, A. (2022). The right of access in automated decision-making: The scope of article 15(1)(h) GDPR in theory and practice. Computer Law & Security Review, 46, 105727. https://doi.org/10.1016/j.clsr.2022.105727

Erdogan, I. (2024). Artificial intelligence and EU law enforcement. In M. Scholten, I. Martín Delgado, & L. Arroyo Jiménez (Eds.), European Papers: Vol. Vol. 9 (pp. 956–977). https://doi.org/10.15166/2499-8249/794

Gal, M. S., & Aviv, O. (2020). The competitive effects of the GDPR. Journal of Competition Law & Economics, 16(3), 349–391. https://doi.org/10.1093/joclec/nhaa012

Gasiola, G. G. (2025). Rebuilding the pyramid: The AI Act’s risk-based approach using a binary decision diagram. Computer Law & Security Review, 58, 106189. https://doi.org/10.1016/j.clsr.2025.106189

Gauci, I. (2025, July 23). Secrecy without oversight: How trade secrets could potentially undermine the AI Act’s transparency mandate. Oxford Law Blogs. https://blogs.law.ox.ac.uk/oblb/blog-post/2025/07/secrecy-without-oversight-how-trade-secrets-could-potentially-undermine-ai

Granmar, C. G. (2024). AI-Based Decision-Making and the human oversight requirement under the AI Act. In YSEC yearbook of socio-economic constitutions (pp. 181–209). https://doi.org/10.1007/16495_2024_68

Greenstein, S., & Zamboni, M. (2025). Navigating the legislative dilemma: evaluating the EU AI Act’s approach to regulating emerging technologies. The Theory and Practice of Legislation, 13(3), 312–352. https://doi.org/10.1080/20508840.2025.2513177

Hamon, R., Junklewitz, H., Sanchez, I., Malgieri, G., & De Hert, P. (2022). Bridging the gap between AI and explainability in the GDPR: Towards Trustworthiness-by-Design in Automated Decision-Making. IEEE Computational Intelligence Magazine, 17(1), 72–85. https://doi.org/10.1109/mci.2021.3129960

Hornung, G., & Link, H. (2025, December 22). Individual rights in the AI Act - the rights to lodge a complaint and to explanation of the Decision-Making process in individual cases. https://www.jipitec.eu/jipitec/article/view/445

Hulok, M. (2025). The EU model of AI governance: regulating artificial intelligence through law and policy. ERA Forum, 26(4), 527–547. https://doi.org/10.1007/s12027-025-00869-1

Juliussen, B. A. (2025). The right to an explanation under the GDPR and the AI Act. In Lecture notes in computer science (pp. 184–197). https://doi.org/10.1007/978-981-96-2071-5_14

Kätliin Kelder, K. (n.d.). On the Relative Importance of the AI Act Right to Explanation. Montaigne Centre Blog. Retrieved January 10, 2026, from https://blog.montaignecentre.com/en/on-the-relative-importance-of-the-ai-act-right-to-explanation/

Metikoš, L., & Ausloos, J. (2025). The right to an explanation in practice: insights from case law for the GDPR and the AI Act. Law Innovation and Technology, 17(1), 205–240. https://doi.org/10.1080/17579961.2025.2469349

Nannini, L. (2024). Habemus a Right to an Explanation: so What? – A Framework on Transparency-Explainability Functionality and Tensions in the EU AI Act. Proceedings of the AAAI/ACM Conference on AI Ethics and Society, 7, 1023–1035. https://doi.org/10.1609/aies.v7i1.31700

Rana, A. A. (2020). Admissibility of Evidence Produced via Modern Devices and Techniques: A Look in Pakistani Prospective. International Journal of Research, 8, 67-77.

Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) [2024] OJ L2024/1689, Arts 85, 86. Retrieved from <https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=OJ:L_202401689>

Salih, A. M., Raisi‐Estabragh, Z., Galazzo, I. B., Radeva, P., Petersen, S. E., Lekadir, K., & Menegaz, G. (2024). A perspective on explainable artificial intelligence methods: SHAP and LIME. Advanced Intelligent Systems, 7(1). https://doi.org/10.1002/aisy.202400304

Sancho, D. (2020). Automated Decision-Making under Article 22 GDPR. In Cambridge University Press eBooks (pp. 136–156). https://doi.org/10.1017/9781108347846.005

Singh, K., Chatterjee, S., & Mariani, M. (2024). Applications of generative AI and future organizational performance: The mediating role of explorative and exploitative innovation and the moderating role of ethical dilemmas and environmental dynamism. Technovation, 133, 103021. https://doi.org/10.1016/j.technovation.2024.103021

Thouvenin, F., Früh, A., & Henseler, S. (2022). Article 22 GDPR on Automated Individual Decision-Making: Prohibition or data subject right? European Data Protection Law Review, 8(2), 183–198. https://doi.org/10.21552/edpl/2022/2/6

View of individual rights in the AI Act - the rights to lodge a complaint and to explanation of the Decision-Making process in individual cases. (n.d.). https://www.jipitec.eu/jipitec/article/view/445/444

Voigt, P., & Von Dem Bussche, A. (2017). The EU General Data Protection Regulation (GDPR). https://doi.org/10.1007/978-3-319-57959-7

Wachter, S. (2024). Limitations and loopholes in the EU AI Act and AI Liability Directives: what this means for the European Union, the United States, and beyond. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.4924553

Wörsdörfer, M. (2023). Mitigating the adverse effects of AI with the European Union’s artificial intelligence act: Hype or hope? Global Business and Organizational Excellence, 43(3), 106–126. https://doi.org/10.1002/joe.22238

Wulf, A. J., & Seizov, O. (2022). “Please understand we cannot provide further information”: evaluating content and transparency of GDPR-mandated AI disclosures. AI & Society, 39(1), 235–256. https://doi.org/10.1007/s00146-022-01424-z

Downloads

Published

30.06.2026

How to Cite

Bridging the Transparency Gap: A Comparative Analysis of The Right to Explanation Under the EU AI Act and the GDPR. (2026). PAKISTAN JOURNAL OF LAW, ANALYSIS AND WISDOM, 5(6), 20-38. https://pjlaw.com.pk/index.php/Journal/article/view/v5i6-20-38

Similar Articles

1-10 of 403

You may also start an advanced similarity search for this article.