AI Legal and Compliance

Artificial intelligence is already used in everyday business activities. It can help businesses to be more efficient, innovative, save costs and improve the quality of their services. However, the use of AI comes with risks to health, safety and fundamental human rights. To manage these risks, the European Union has adopted the Artificial Intelligence Act, which will apply to providers, deployers, distributors and others involved in the development and supply chain of artificial intelligence. Companies will have until 2 February 2025 to implement part of the requirements of the AI Act, and the majority of provisions of the legislation will become effective from 2 August 2026.

The scope of requirements that companies will have to meet with regard to AI depends on the risks posed by AI systems. Companies related to high-risk AI systems are required to implement technical and organisational compliance measures, while for low-risk AI systems it is sufficient to ensure compliance with transparency requirements.

The AI Act affects a wide range of business sectors, e.g., financial services, manufacturers of medical devices, protective equipment, toys, recruitment organisations, manufacturers of critical infrastructure components, etc. COBALT has assembled a team of experts in different fields who can advise clients on all aspects of AI regulation and interaction with other legislation, and assist in the implementation of legal measures to comply with the AI Act.

Our services include:

• Consultations on the application of the AI Act
• Consultation on compliance with the requirements of the AI Act
• Consultation on the interaction of the AI Act with sectoral legislation
• Determining the level of risk of the AI system (i.e. whether the AI system you are using is in the intolerable, high risk, limited risk or low risk category)
• Preparation of documentation (including the company’s AI use policy, risk identification policy, information notices, data use guidelines, human oversight guidelines, and other documents needed to implement AI quality management and risk management systems.)
• Providing training for employees to increase AI literacy in the company
• Registration of high-risk AI controllers in the supervisory authority’s register
• Representation before the supervisory authority