Skip to content
Giallo
IT

AI Act and compliance

AI Act, GDPR and internal rules: what a company using artificial intelligence must do, with deadlines and obligations.

10 guides in this category

Path of business data entered in artificial intelligence toolsBusiness Data and AI: What Happens to What You WriteWhat happens to data entered into AI tools, which data is used for training and how to protect confidential business information.
AI Act scheme with classification and verification steps for companiesAI Act: the guide for Italian companiesThe AI Act for Italian businesses: who it covers, obligations and dates updated for Omnibus 2026/1744 and Law 132/2025.
The Four Levels of Risk of the AI Act from the Banned to the Minimum BandAI Act: the four levels of risk explainedAI Act risk levels with practical examples: bans from 2025, high-risk rules from 2 December 2027 after the Omnibus, and where common uses fit.
Obligations of the AI Act for SMEs divided between supplier and user rolesAI Act: what obligations does an SME really haveAI Act obligations for SMEs: literacy rules rewritten by the Omnibus, transparency from 2 August 2026, high-risk rules from 2027 and planned simplifications.
AI Act Implementation Schedule with the Entry into Force PhasesAI Act: when it comes into effect and what changesAI Act dates from 2025 to 2028: the high-risk postponement under Omnibus 2026/1744 and changes introduced by Law 132/2025.
AI Act sanctioning bands and supervisory bodiesAI Act: penalties and enforcementAI Act penalties: up to 35 million or 7% of turnover, the more favourable rule for SMEs and small mid-caps, application dates and Italian oversight.
Artificial intelligence generated content rights schemeCopyright and AI-generated contentWho owns the rights to AI-generated text and images, what you can use commercially and the risks for an Italian business.
Scheme of the relationship between GDPR and artificial intelligence systems in the companyGDPR and artificial intelligence in the companyGDPR when using AI in business: legal basis, personal data in prompts, non-EU providers and automated decisions.
Structure of an enterprise policy on the use of artificial intelligenceCorporate policy on the use of AI: how to write itWrite an internal AI use policy: structure, what to include, mistakes to avoid and a starting template for SMEs.
Six-step method for assessing the risks of an artificial intelligence systemHow to Assess the Risks of an AI SystemA six-step method for assessing business AI risks: classification, data, impact on people and controls.

The other categories