The general principle under the EU AI Act requires AI systems to be designed and trained in a way that respects and protects personal data and privacy, in line with GDPR. It encourages the use of advanced techniques like differential privacy and federated learning where possible.