Technology law
Artificial intelligence and the AI Act
Buying an AI tool, integrating it into a service and developing your own solution involve different legal decisions. We help businesses and professionals analyse their projects and define rules, documents and contractual arrangements that fit the intended use.
From the use case to applicable obligations
A customer assistant, a content generator and a recruitment system raise different issues. The analysis starts with the purpose, the people affected, the data used and the system’s influence on decisions.
The AI Act distinguishes, among others, those who provide a system and those who use it under their own authority (deployers). Not every use is high-risk. The actual role, classification and applicable provisions must be assessed alongside the GDPR and other relevant rules.
How the firm can help
Assessing the system and the parties’ roles
We establish the solution’s stated operation and intended use, drawing on information from the supplier and technical contacts.
- Assessment of the AI Act’s scope and the business’s position in the supply chain.
- Review of prohibited uses, possible risk categories and transparency obligations.
- Identification of the requirements and timelines relevant to the project.
Internal rules and informed use
We help define who may use the tools, for which activities and subject to which checks, taking the organisation’s responsibilities into account.
- AI use policies, authorisations and safeguards for data and confidential information.
- Guidance on human oversight, checking outputs and communications to users.
- Support in defining instructions and legal content for staff AI literacy.
Data, content and intellectual property
The analysis considers both information entered into the system and the resulting outputs and their subsequent use.
- Review of the conditions for processing personal data and any need for a DPIA.
- Review of confidentiality, data reuse for training and retention terms.
- Assessment of licences, third-party materials and rights over outputs, without assuming automatic protection.
Supplier and partner relationships
We review service terms and negotiate the allocation of obligations, including where AI forms part of broader software or services.
- Terms on permitted uses, data, documentation and cooperation between the parties.
- Warranties, liability, disputes about results and handling service changes.
- Exit terms, data return and business continuity.
Documents and initial discussion
The work may include a legal assessment of the use case, an action plan, internal policies and instructions, opinions and contractual clauses. Legal advice is coordinated with the technical assessments required by the project; it does not certify the system.
Useful starting information includes the intended uses, system documentation, supplier terms and the categories of data to be used.