Our remarks focus on two main issues: 1) providing operational tools to link the ethics and the legal dimension of a Trustworthy AI avoiding risks of ethics washing; 2) the role that the EU Regulation 2016/679 (General Data Protection Regulation, hereinafter “GDPR”) may play to achieve the purposes of the EU Strategy on Artificial Intelligence, providing a multilevel legal framework that may include a General Regulation on Artificial Intelligence and specific safeguards both in terms of national and domain legislation, as well as in terms of soft law