Companies are at serious risk of facing multiple fines for the same offense under different sets of legislation if the artificial intelligence (AI) technologies they employ misuse personal data or cause harm to consumers, according to legal experts.

When the European Union put forward both the General Data Protection Regulation (GDPR) and the first network and information systems directive in 2016, there was fear businesses could be placed in “double jeopardy,” or penalized twice for the same incident if they breached both sets of rules.

Neil Hodge is a freelance business journalist and photographer based in Nottingham, United Kingdom. He writes on insurance and risk management, corporate governance, internal audit, compliance, and legal...