Prof. Avv. Alessandro del Ninno illustrates the concept of a "risk-based approach" in the two different regulatory disciplines of reference: the proposed EU Regulation on Artificial Intelligence and the current EU General Data Protection Regulation in force, highlighting differences and points of contact between the different concepts of risks referred to in the two laws.