Regulation 10 is the first enacted regulation in the MEASA region on the processing of personal data via autonomous and semi-autonomous systems such as AI or generative, machine learning