In the fall of 2023, the European Union (EU) is on the brink of finalising the world’s first comprehensive Artificial Intelligence (AI) law, a potential milestone that could establish the global benchmark for regulating the use of AI technologies. From AI lie detectors, automated decision-making, and risk assessment to tech surveillance systems at European borders, AI-powered technologies are increasingly becoming part of migration management and control in the EU [1]. While migrants face a multitude of pressing issues such as housing and access to health care, their fundamental right to privacy and data protection often takes a back seat, rendering them susceptible to experimentation with high-risk AI technologies. Consequently, it is imperative that the European Union’s Artificial Intelligence Act (AI Act) explicitly addresses the implications of AI systems on people on the move. Bringing together exponents from European institutions, the private sector and civil society, the Computers, Privacy and Data Protection (CPDP) conference offered a comprehensive and multi-faceted insight into this issue. Drawing from the panel discussion and an exclusive interview with Alyna Smith, a member of the Platform for International Cooperation on Undocumented Migrants (PICUM), the following sections will first delve into the impact of AI systems on migrants and then assess the role of EU regulations in protecting digital rights of vulnerable categories.