AI & Data / Germany & European Union
Put a workable legal framework around the AI systems your organisation develops, buys or uses. We advise on German and EU AI regulation, with attention to the actual use case, supply chain and implementation timetable.
Where we can help
Classification and responsibilities
A legal review starts with intended purpose, users and deployment context. We distinguish prohibited practices, high-risk uses, transparency duties and general-purpose models, then identify provider, deployer, importer and distributor responsibilities. A vendor’s description of a tool as “low risk” is not a substitute for assessing its use in your business.
Governance that reaches daily operations
An AI inventory should connect procurement, permitted uses, personal data, confidentiality, human oversight and escalation. We help translate the assessment into policies, approval steps and supplier requirements. HR, credit, education, healthcare and public administration need additional scrutiny.
Implementation and enforcement
The AI Act applies in stages. Transparency duties are already relevant in 2026; the amended high-risk timetable distinguishes Annex III systems from AI embedded in regulated products. Implementation plans must follow the applicable rule and transition, rather than treating the Act as a single deadline.
From assessment to implementation
The work can produce a classification memorandum, responsibility matrix, prioritised compliance plan and contractual requirements. Where an authority raises concerns, we organise the evidence, assess available responses and coordinate legal representation.
Four practical examples
Illustrative scenarios, not reports of client mandates. The appropriate response depends on the facts and applicable law.
Recruitment screening
An employer wants to rank applicants automatically. We examine the intended function, high-risk classification, GDPR decision-making rules and employee-representation issues before defining a deployment process.
Customer chatbot
A retailer launches an assistant that can suggest products and handle returns. We assess user-facing disclosures, limits on automated commitments and the route to a human reviewer.
Industrial model integration
A manufacturer embeds a model in safety-related equipment. The analysis combines AI responsibilities with the product regime and the separate timetable for embedded systems.
Internal generative AI
Staff paste confidential documents into a public tool. We review vendor terms and data flows, restrict unsuitable uses and establish an approval route for enterprise tools.
What to send us
Please describe the product or dispute, the countries involved, your role and any deadline. Relevant contracts, technical documentation, correspondence and a short chronology help us identify the next steps. Agree a secure transfer channel before sending sensitive records.
Discuss your next step
We can define the scope of a review, identify urgent measures and agree the work and fees before proceeding. A website enquiry alone does not establish a mandate.
Related: IT & AI services · Legal updates · Our attorneys
Legal framework and further reading: European Commission: AI Act implementation. Content reviewed: 12 November 2026.