With the accelerating adoption of artificial intelligence and automation technologies in both public and sector institutions,a fundamental question arises regarding the readiness of national legislative and legal frameworks to keep pace with these rapid digital transformations and protect personal and commercial data from accompanying cyber risks.
Recent legal studies indicate that legislative systems in the region—including Iraq—face a dual challenge. The first manifests in regulating the handling of big data and providing strict legal protection for intellectual property resulting from algorithms, while the second lies in determining criminal and civil liability for breaches and errors that may be caused by artificial intelligence systems adopted in institutional management.

