This post argues that we should consider AI systems as a factor in assessing a balance between the rights and interests of a data subject and parties processing personal data. That is because AI systems are a source of data power when combined with personal data processing. AI Act can be useful for such assessment because it provides a conceptual framework to evaluate risks related to using AI systems, which are not present in data protection law.