EU AI Act and AI Governance for Businesses That Use AI

Topics covered

• •Explain what Regulation (EU) 2024/1689 regulates and test a tool against the Article 3(1) definition of an “AI system”
• •Decide whether the Act reaches your organisation, including companies based outside the EU such as UK or Ukrainian firms (Article 2)
• •Identify your role for each tool — provider, deployer, importer or distributor — and spot when a deployer turns into a provider (Articles 3 and 25)

Topics covered

• •Recognise the Article 5 prohibited practices most relevant to businesses, which have applied since 2 February 2025
• •Apply the two routes into the high-risk category (Article 6(1) with Annex I, Article 6(2) with Annex III) and the Article 6(3) derogation
• •Classify common business uses in employment, credit, insurance and education

Topics covered

• •Apply Article 50 to chatbots, synthetic content, deepfakes, emotion recognition and AI-generated public-interest text
• •Separate provider duties from deployer duties under Article 50, and know that they have applied since 2 August 2026
• •Write a chatbot disclosure that is clear, timely and accessible

Topics covered

• •Design a proportionate AI-literacy programme that meets Article 4 as amended by the Digital Omnibus
• •Turn the Article 26 deployer duties for a high-risk system into concrete controls: instructions, oversight, input data, monitoring, logs and informing people
• •Decide whether a fundamental-rights impact assessment (Article 27) is required and how it connects with a GDPR DPIA

Topics covered

• •State which AI Act obligations apply as of October 2026 and which apply later
• •Explain the legal status and content of the Digital Omnibus on AI (Regulation (EU) 2026/1744): what changed and what did not
• •Understand who enforces the Act — national market surveillance authorities and the AI Office — and how fines are calculated

Topics covered

• •Set up an AI register with clear ownership and a review cycle
• •Write a one-page acceptable-use policy that staff will actually read
• •Run vendor due diligence with a structured questionnaire, and triage new AI use cases quickly