The article aims to investigate the possible balance between employees' rights and employers' obligations in the context of data protection. Artificial intelligence makes mandatory obligations that require the adoption of measures to protect workers' data. The article also intends to look at the SME category and understand whether a balancing is possible.