How can AI-driven biometric remote identification systems be deployed in a legally compliant way? This work offers readers structured guidance at the intersection of the AI Act and the GDPR, demonstrating how both regimes can be combined into a coherent assessment framework. Based on a doctrinal legal analysis, it examines the risks of biometric data processing, clarifies key concepts, and defines obligations for providers of AI systems. Case studies illustrate practical challenges and regulatory gaps. The study combines academic depth with concrete recommendations for practice and regulation. The author's research focuses on IT law and data protection, with a particular emphasis on AI regulation.
