Law, governance & security
Anyone using AI agents in a company has to keep the GDPR, the EU AI Act and their own information security in view. The articles in this topic explain which obligations apply to SME operators, how to demonstrate AI literacy in the team, how to assess risks and how to organise approvals so that sensitive steps only go out under human control. Typical questions: Which AI Act role does a company that uses AI agents have? What does the GDPR require when agents process customer data? How do you document approvals and train staff? The articles do not replace legal advice on individual cases.
4 articles on this topic
EU AI Act: What Applies Since August 2026 and What's Next
EU AI Act after the Digital Omnibus: which duties have applied since 2 August 2026, when high-risk rules start and what SMEs using AI tools should do now.
AI Literacy Under Article 4 AI Act: After the Omnibus
What Article 4 of the EU AI Act requires since the Digital Omnibus: measures instead of a guaranteed literacy level, no certificate, practical steps for SMEs.
Sovereign AI for SMEs: Running AI Under the GDPR
Sovereign AI and the GDPR: three operating models from cloud to on-premise, key building blocks such as the DPA, data classes for decisions, and pitfalls.
AI Governance in the Company: 6 Building Blocks
AI governance for SMEs: responsibility, AI policy, register, approval levels, training and review. Introduce it in four weeks under GDPR and EU AI Act.
Which roles can AI take over in your company?
In the free intro call we go through your org chart role by role – fully AI, AI plus human, or human.
Schedule an appointment now