Compliance strategy and regulatory guidance written by practitioners
Articles
Regulatory guidance and compliance strategy from those doing the work
In the enterprises I have worked with, the thing that stalled AI compliance was almost never the rules. It was that single AI system turned out to be four different teams' problem…
bank buys credit-scoring model from vendor that has done everything the law asks of builder. The bank has bought carefully, the vendor has built carefully, and the bank still owes…
team that has just learned its hiring tool or credit model counts as high-risk usually reaches for policy document. That is the wrong instinct. The heavy requirements of the high-…
Your team took capable third-party model, fine-tuned it on your own data, wrapped it in some logic of your own, and shipped it to the business. Nobody signed form that said "we ar…
TL;DR: The EU AI Act does not regulate all AI the same way. It sorts AI systems into four risk tiers; prohibited, high, limited and minimal - and the tier decides everything that…
Most banks have list of approved AI systems. What they don't have is an accurate one. Walk the trading floor, the credit team, the compliance department. Somewhere in each of thos…
€35M / 7% Max fine for prohibited AI practices Art. 99, Regulation (EU) 2024/1689 57% of C-suite leaders cite AI regulatory non-compliance as their top AI risk EY Responsible AI P…
Your legal team probably hasn't read Article 26. Your procurement team definitely hasn't. And whoever approved your Copilot rollout last quarter? They almost certainly had no idea…
TL;DR. The EU AI Act is tiered risk regime, not blanket regulation. Four risk tiers - prohibited, high-risk, limited-risk, minimal-risk. Three enforcement dates, 2 February 2025,…
There is no single EU AI Act deadline. There are three. February 2025: prohibited practices became illegal. August 2026: high-risk system obligations apply. August 2027: existing…
Where Article 6(1) interlocks with the Medical Device Regulation, and where Annex III applies independently Clinical decision support AI is high-risk under the EU AI Act and, in m…
EU AI Act Annex III, GDPR Article 22, and the obligations the recruiting team has not heard of. Your recruiter chose Phenom because it shortlists candidates faster. Phenom is high…
Find answers to common questions about our content and updates
Monthly updates on regulatory changes, compliance trends, and platform releases
By subscribing you agree to our Terms and Conditions and Privacy Policy
