You’re shipping something new in the European Union. Data provenance and the claims you make are where the exposure sits.
Information, not advice
This page is information, not legal advice about your matter. A retainer begins only when a lawyer confirms it.
Start here
Write down what your system does, and what you say it does
The gap between those two sentences decides your risk tier under the EU AI Act and what you must document before placing the system on the market.
What to work through, in order
Which regime already applies
The AI Act applies a risk-tiered regime with prohibited practices, high-risk obligations and transparency duties, phased in over several years alongside GDPR and DORA.
Data and privacy
GDPR governs lawful basis, transparency and automated decision-making, and a data protection impact assessment is required for high-risk processing.
IP ownership in outputs
Protection requires the author’s own intellectual creation, which purely machine-generated output does not satisfy. The AI Act adds training data transparency duties for general-purpose models.
Next steps
What happens if you go ahead
Scoping call
Written scope and fixed-fee quote
Engagement, once a lawyer confirms
Who would handle it
Offices
London
25 Southampton Buildings, London WC2A 1AL