EU law treats 'inference' twice: the AI Act uses it to decide what counts as an AI system, while the GDPR protects the consequences of inferences regardless of whether the producing technology qualifies as AI; the paper warns that agentic architectures expose this mismatch and proposes a compositional-effects test plus documentation duties to allocate responsibility under Article 22 GDPR.

Main Finding

Inferential capability — the technical capacity to “infer” as used in Article 3(1) of the AI Act — does not by itself determine whether EU law applies to a system’s outputs. EU law uses “inference” in two distinct ways: (1) constitutively in the AI Act (it helps define what counts as an AI system) and (2) protectively in data protection law (the GDPR treats the consequences of inferences as personal data/processes to be regulated regardless of whether the producing technology qualifies as an “AI system”). Agentic AI (architectures that compose, chain and autonomously invoke tools) makes this conceptual non‑coincidence operationally important: inference can be distributed across components so that a system may fall outside the AI Act’s definitional threshold yet produce legally protected inferences under the GDPR. The paper proposes an interpretive/compositional approach (a compositional‑effects test, burden allocation rule and tailored documentation duties) to map inferential chains onto legal responsibility (the chain of imputation), and to make Article 22 GDPR and AI Act obligations operational in the face of agentic composition.

Key Points

• Two concepts of “inference”:
  • Constitutive (AI Act Article 3(1) + Recital 12): inferring capability is part of what makes something an AI system; interpretation benefits from technical gradings (Poretschkin & Naeven framework).
  • Protective (GDPR): inference is not defined but its legal consequences follow from processing personal data (three pathways: identificatory, attributive, decisional).
• The two perimeters (AI Act vs GDPR) are not concentric; lack of AI‑Act “inference” does not imply GDPR immunity.
• Protective pathways under GDPR:
  • Identificatory: inferences that identify or re‑identify persons.
  • Attributive: inferences that attribute traits (sensitive or not) to persons or groups.
  • Decisional: inferences used as inputs to (automated) decisions affecting individuals (Article 22 implications).
• Composition (chaining, orchestration) is a cross‑cutting architectural dimension rather than a fourth pathway. Key composition properties: inferential reach, persistence, and reviewability.
• Agentic architectures intensify three problems:
  • Chained inference: intermediate derivations propagate and are composed into new outputs.
  • Perimeter fragmentation: different components/providers contribute parts of an inferential pipeline.
  • Runtime composition of sensitive attributes: on‑the‑fly combinations can create novel protected inferences not anticipated at design time.
• Legislative context: Regulation (EU) 2026/1744 acknowledges outputs that influence future inputs but supplies no aggregation rule; the AI Act’s constitutive wording remains unchanged.
• Proposals:
  • Interpretive rule to identify the relevant decision unit for Article 22 GDPR in composed pipelines.
  • A compositional‑effects test to determine when aggregated intermediate outputs produce effects equivalent to an automated decision.
  • Allocation of burden of proof for establishing the decision unit.
  • Documentation duties proportional to inference chains (documentation of inferential threshold, reach, chain, composition points, and reviewability).
• Practical corollary: firms cannot dodge GDPR obligations by designing systems that avoid qualifying as “AI systems”; compliance assessment must consider whole workflows and composition.

Data & Methods

• Methodological approach: doctrinal and conceptual legal analysis, textual exegesis and normative proposal rather than empirical measurement.
• Primary sources analysed:
  • AI Act (Regulation (EU) 2024/1689), especially Article 3(1) and Recital 12.
  • GDPR provisions (including Article 22 and doctrine from CJEU and other case law such as OT, SCHUFA, EDPS v SRB, Dun & Bradstreet Austria).
  • Regulation (EU) 2026/1744 and recent legislative amendments acknowledging recursive/feedback outputs.
• Technical grounding: adopts and uses the Poretschkin & Naeven multi‑level technical framework for grading inferential capability (Levels 0–4) to interpret the AI Act’s constitutive usage of “infer”.
• Analytical framework developed in the paper:
  • Two‑level legal framework: (1) constitutive vs (2) protective functions of inference.
  • Protective function decomposed into three pathways (identificatory, attributive, decisional).
  • Composition treated as cross‑cutting architectural dimension; three analytic constructs introduced — inferential threshold, inferential reach, inferential chain — mapped to the chain of imputation.
• Output: normative interpretive rule, compositional‑effects test, burden allocation recommendation, and proposed documentation duties; no empirical validation or benchmarking.

Implications for AI Economics

• Compliance scope uncertainty raises costs and affects adoption:
  • Firms must evaluate entire data‑processing workflows (not just models) for both AI Act and GDPR exposure. This increases compliance complexity and monitoring costs, especially for agentic systems that dynamically orchestrate tools.
  • Uncertainty around “inferential threshold” and aggregation may raise legal risk premiums, increasing insurance and legal compliance expenditures.
• Incentives for architecture and product design:
  • Economic incentive to design systems with clear provenance, traceability and modular auditing to limit ambiguous composition effects.
  • Alternatively, firms might centralize capabilities (or vertically integrate) to internalize liability and ease compliance — potentially increasing concentration in markets where compliance burdens are high.
  • Incentives may favor design choices that reduce inferential reach or persist intermediate derivations (e.g., more explicit human checkpoints, reduced runtime composition), which could affect product functionality and competitiveness.
• Market for compliance and provenance technologies:
  • Demand growth for tools that map inference chains, log composition points, and enable reviewability. New markets for documentation-as-a-service, traceability, explanation tech, and specialized audits.
  • Valuation premium for platforms that can demonstrably satisfy proposed documentation and compositional‑effects tests.
• Contracting and liability allocation:
  • Increased contractual complexity between orchestrators, component/tool providers and users; firms will negotiate explicit allocations of GDPR/AI‑Act risk, indemnities and obligations to document inferential chains.
  • Smaller providers may be priced out or absorbed by larger firms able to bear compliance overhead; impacts entry and competition.
• Data market and pricing effects:
  • Inferred data (and outputs that enable further inference) are likely to be treated as personal data in many instances — this raises transaction costs and regulatory constraints on trading inferred insights, changing valuations in data‑brokering markets.
  • Increased cost of using third‑party components that produce or contribute to protected inferences (higher due diligence and contractual requirements).
• Enforcement and compliance asymmetries:
  • Enforcement difficulty across fragmented pipelines may create regulatory arbitrage where actors locate components across jurisdictions or cloud providers to complicate attribution.
  • Regulators’ interpretive and documentation demands (as proposed) would reduce asymmetry but generate compliance costs; enforcement focus may shift to orchestration layers and documentation sufficiency.
• Social welfare and externalities:
  • Better documentation and compositional rules can reduce informational asymmetries and negative externalities (misattribution, wrongful automated decisions), but at the cost of innovation friction and higher entry costs.
  • Economists should weigh static loss (reduced functionality, higher costs) against dynamic gains (greater trust, lower harm, better market functioning).
• Empirical research directions for AI economics:
  • Quantify compliance costs attributable specifically to compositional documentation, tracing, and human oversight in agentic systems.
  • Model market concentration effects from compliance economies of scale and estimate welfare impacts.
  • Study pricing and liquidity of inferred‑data markets under stricter protective interpretations.
  • Analyze optimal contract forms and insurance markets allocating chain‑of‑imputation risk among orchestrators, tool providers and end users.
  • Evaluate the cost‑benefit tradeoffs of documentation and reviewability standards (societal harm avoided vs. compliance burden).

Summary takeaway for economists: legal exposure depends on the effects and composition of inference, not only on whether a piece of software qualifies as an “AI system.” Agentic architectures amplify compliance complexity and can shift economic equilibria in product design, market structure, contracting, and the provision of compliance technologies. Quantifying those effects and designing efficient contractual and regulatory responses are actionable research and policy priorities.