Using AI responsibly in research

The EU AI Act, GDPR and what departments are doing. With Abderisak Adam, PhD

Run this session for your department

A 20-minute demo at your department meeting, then a free month for your group. EU-hosted, no training on your data.

Book a demoor email Adam

A one-hour session with 89 researchers and research leaders from 16 countries, from Lisbon to Stockholm and the Gulf. Most of it is vendor-neutral and works with any AI tool: how language models work, prompts for reading, writing, analysis and study design, what the EU AI Act and GDPR mean in practice, and what 35 European universities allow. The last part is a short demo of Kahubi, followed by 20 minutes of questions.

Seven takeaways

  1. 1

    A language model guesses the next word. It sounds just as sure when it is wrong, so give it real sources: your papers, your data or real databases.

  2. 2

    Check the plan, not the brand. Free and personal plans often train on your chats and come without a data processing agreement (DPA); business, education and API plans usually do not. Re-check at every renewal.

  3. 3

    Use a traffic light for data, not for tools. Public data in any approved tool, internal or personal data only with a signed DPA and university login, sensitive data only after a DPIA.

  4. 4

    AI literacy already applies to everyone. Article 4 of the EU AI Act has applied since February 2025. High-risk uses such as grading exams or ranking PhD applicants need human oversight and logs.

  5. 5

    Three risks, three habits. Check that every reference is a real paper, only put unpublished work into tools with a DPA and no training, and never list AI as an author.

  6. 6

    Disclose it, specifically. "We used AI" says nothing. Name the tool, version, task and who checked the output, in the methods or acknowledgements.

  7. 7

    Same Copilot, different rules. 25 of 35 European universities we checked name Copilot, from "public data only" (Helsinki) to "personal or internal data allowed" (UPV Valencia).

Prompts to copy

Use them with a tool your university has approved. Paste your own text where the brackets are.

ReadingRead faster, without skipping the paper

Here is a paper.

Summarise the research question, design, sample and main finding in five bullets.

List the three limitations the authors mention, and two they don't. Say where in the paper each point comes from.

Use your own PDFs, ask for sources, check them.

WritingA writing aid, not a ghostwriter

Here is my paragraph.

Improve clarity and flow for [journal]. Keep my terminology, my claims and my voice.

Don't add new content or references. List every change you made.

You write first, AI edits, you check every change.

AnalysisAI does the legwork. You judge.

Here is my dataset; the columns are described below.

Suggest suitable tests for [question] and the assumptions to check. Write the R code and explain each step.

Flag anything that needs my judgement.

Check assumptions. No personal data in free tools.

MethodsA sparring partner for your study design

I'm studying [topic] in [population].

Suggest three possible designs with pros and cons, and ten interview questions that avoid leading wording.

Name the theoretical frameworks most used for this topic, with references I can check.

Ask for options, verify references, you choose.

DisclosureAn AI-use statement for your paper

We used [tool, version] to [task, e.g. language editing, screening titles] between [dates]. All output was reviewed and edited by the authors, who take full responsibility for the content. No personal or unpublished data were entered into the tool.

Match the journal: methods, acknowledgements or cover letter.

A traffic light for data, not for tools

Publish this on your intranet: staff decide by the data, whatever the tool.

DataExamplesWhich tools
PublicPublished papers, course descriptionsAny approved tool
Internal / personalEmails, student essays, draft manuscriptsSigned DPA and university login
SensitiveHealth data, grades, interview transcriptsDPIA first. Be more careful.

Sources mentioned

  1. Regulation (EU) 2024/1689 (AI Act), Article 4 on AI literacy, and Regulation (EU) 2016/679 (GDPR), EUR-Lex. High-risk dates may move under the Digital Omnibus.
  2. European Commission and ERA Forum, Living guidelines on the responsible use of generative AI in research.
  3. COPE, ICMJE, Nature and Science policies on AI and authorship; NIH notice on generative AI in peer review.
  4. Validemic, AI tools approved by European universities: 35 checked (pages read 7 October 2026).
  5. Kahubi compliance and sub-processors.

Want this session for your department?

We run a 20-minute version at your department meeting, set up a free one-month trial for your group, and send you a usage report so you can decide.

Just for you? Try Kahubi free with your university email