All posts
GDPR and AI agents: the seven questions your DPO will ask
Controller or processor, the DPA, minimisation, retention, erasure, sub-processors and transfers: what GDPR asks of an AI agent, article by article.
ReadThe EU AI Act for companies deploying AI agents: what applies, and when
Risk classes, provider or deployer, the dates after the 2026 Digital Omnibus, and five things to do now. Every article cited, read 9 November 2026.
ReadBring one process. Leave with a risk class, a pass bar and a plan.
A 45-minute scoping call with the people who would build it. You get a first view of the AI Act risk class, the controls it needs, and whether an agent is the right tool at all.