DIGITAL PERSON AS LEGAL FICTION UNDER THE AI ACT, GDPR, AND eIDAS
doi: https://doi.org/10.56461/iup_rlrc.2026.7.ch7
This article examines how the EU’s emerging regulatory triangle, Regulation (EU) 2024/1689 (the AI Act), Regulation (EU) 2016/679 (the GDPR), and Regulation (EU) 2024/1183 (eIDAS 2.0/EUDI Wallet), reconstructs the legal identity of individuals in algorithmic environments. It argues that, taken together, these instruments implicitly generate a functional legal fiction of the digital person: the composite techno-legal representation through which the natural person’s rights, attributes, and vulnerabilities are mediated by credentials, data traces, profiles, and AI-assisted decisions. Drawing on Roman law’s stratified concepts of persona, status, and caput and on modern theories of legal fiction, the article shows why treating AI as an autonomous legal subject would displace responsibility and fragment remedies, while treating individuals only as data subjects is normatively too thin for high-stakes digital governance. The paper proposes a twofold move, namely the normative personification of the individual in digital contexts and the use of transparent liability vehicles for certain AI systems, such as a limited electronic legal person (PJE), without ontological personality.
Keywords: digital person, legal fiction, AI Act, GDPR, eIDAS 2.0.
Bodnariuc, C. D. 2025a. De la Cicero la AI (I): Fundamente istorice si teoretice ale persoanei juridice electronice limitate. Bucharest: Universul Juridic. Available at: https://www.universuljuridic.ro/de-la-cicero-la-ai-i-fundamente-istorice-si-teoretice-ale-persoanei-juridice-electronice-limitate/ (24. 11. 2025).
Bodnariuc, C. D. 2025b. De la Cicero la AI (II): Necesitatea si arhitectura normativa a persoanei juridice electronice limitate. Bucharest: Universul Juridic. Available at: https://www.universuljuridic.ro/de-la-cicero-la-ai-ii-necesitatea-si-arhitectura-normativa-a-persoanei-juridice-electronice-limitate/ (9. 12. 2025).
Kelsen, H. 1945. General Theory of Law and State. Cambridge, MA: Harvard University Press.
Yeung, K. 2018. Algorithmic regulation: A critical interrogation. Regulation & Governance, 12(4), pp. 505–523. https://doi.org/10.1111/rego.12158
Legal sources
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). OJ L 119, 4.5.2016, pp. 1-88.
Regulation (EU) 2024/1183 of the European Parliament and of the Council of 11 April 2024 amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework. OJ L, 2024/1183, 30.4.2024.
Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence. OJ L, 2024/1689, 12.7.2024.
Directive (EU) 2024/2853 of the European Parliament and of the Council of 23 October 2024 on liability for defective products and repealing Council Directive 85/374/EEC. OJ L, 2024/2853, 18.11.2024.
European Commission. 2025. Commission Work Programme 2025: Moving Forward Together: A Bolder, Simpler, Faster Union. COM(2025) 45 final. Brussels: European Commission. Available at: https://commission.europa.eu/publications/2025-commission-work-programme-and-annexes_en (21. 4. 2026).
Case law
SCHUFA Holding (Scoring), 2023. CJEU, Judgment of 7 December 2023. (Case C-634/21, ECLI:EU:C:2023:957). Available at: https://curia.europa.eu/juris/liste.jsf?num=C-634/21 (21. 4. 2026).