The EU AI Regulation
(AI Act)

Your Path to Legally Compliant and Responsible AI Use.

Enquire via Email book a call

With the Regulation (EU) No 1689/2024 - the AI Regulation or AI Act for short – entering into force, the European Union is establishing a globally unique set of rules for artificial intelligence. This ambitious legislation classifies AI systems according to their risk potential and confronts companies with far-reaching compliance obligations and the risk of severe fines of up to 30 million euros or 6% of annual global turnover. In order to drive your AI projects forward safely, protect innovation and at the same time ensure maximum legal certainty and AI governance, early and strategic legal advice for AI is essential. We navigate you through the complex requirements of AI law and develop customised solutions for your company.

Your Strategic Added Value Through Our Expertise in the AI Act

With us at your side, you are optimally prepared for the challenges and potential of the AI Act:

Unique combination of law and technology: Unlike many law firms, we offer not only legal expertise but also in-depth technical understanding, based on computer science studies or practical programming experience. This allows for the analysis of planned AI deployments and new AI products from both a legal and technical perspective to provide optimal and practical advice on AI law.
Full Compliance with the AI Act: We ensure that your AI systems and applications are fully compliant with the new provisions of the AI Act.
Responsible AI Use: Use AI technologies responsibly and create a decisive advantage in terms of trust and competitiveness through demonstrable compliance and AI governance.
Proactive Risk Management: Avoid high fines and reputational damage through proactive risk assessment and compliance strategies in AI risk management.
Customised AI Solutions: We develop customised solutions that optimally align your AI strategy with AI Act obligations and sustainably strengthen your innovative power.

Get us onboard in case you

as a developer, provider or operator of AI systems, you need to fulfil the new obligations for risk assessment, conformity assessment and monitoring.
need training for your employees on the AI regulation – we offer customised training, including via our co-developed PLANIT//PRIMA solution with integrated LMS.
want to appoint an external AI officer or set up internal structures for AI compliance.
use or develop high-risk AI systems in critical areas such as healthcare, human resources, or law enforcement.
have questions about transparency obligations, explainability and human oversight for AI applications.
want to certify your products and services under the requirements of the AI Act.
want to ensure that your data strategy complies with the requirements of the AI Act, particularly with regards to training data and data governance.

The AI Regulation (AI Act):
Overview and importance for your organisation.

The AI Act, officially Regulation No (EU) 1689/2024, is the world’s first comprehensive regulation for artificial intelligence. It takes a risk-based approach to ensure that AI systems in the EU are safe, transparent and human-centred. The overarching goal is to promote innovation while comprehensively protecting fundamental rights.

Key Points of the AI Act:

Risk categorisation: AI systems are classified according to risk levels (unacceptable, high, low), resulting in corresponding obligations for providers and operators. This is crucial for the risk management of AI.
Obligations for High-Risk AI: Strict requirements for data quality, documentation, human oversight, robustness, cybersecurity and conformity assessment must be met.

Prohibited AI Practices: Certain AI applications that jeopardise fundamental rights are prohibited (e.g. government social scoring).
Transparency Obligations: Specific notices to users are mandatory for certain AI systems (e.g. chatbots, deepfakes).
Market Surveillance: National authorities and the European AI Office will monitor compliance with and enforcement of the regulation.

These far-reaching changes require your AI applications and processes to be analysed and adapted in detail. We will gladly and competently guide you through this change in AI law.

Your Contact

Contact one of our experts in this field.

Dr. Bernhard Freund, M.Comp.Sc., LL.M. (Wellington)

Computer Scientist, Lawyer, certified IT Lawyer, certified Data Protection Officer (TÜV) and CIPP/E

Email: bernhard.freund@planit.legal
Phone: +49 (0) 40 609 44 190

>More info
Book a meeting

20. April 2022

Challenges of Digitization: New EU Standard Contractual Clauses for International Data Transfers and for Controller-Processor Agreements

30. March 2021

The ION Network – the Future of our Digital Identity?

Christian Putzar

Lawyer
certified Data Protection Officer (TÜV)

Email: christian.putzar@planit.legal
Phone: +49 (0) 40 609 44 190

>More info

12. March 2024

The European AI Act is coming: What to consider (already now) when using artificial intelligence

19. July 2023

EU Commission issues adequacy decision for U.S. data transfers

11. April 2023

Practical tips for trade secret protection under German law – take advantage of the synergy effects of your data protection organization!

10. October 2022

Update: Data Transfer to the U.S. – All’s Well That Ends Well?

7. September 2022

Are you a profiler too? – Current fine risks of target group analyses

Others about us

„PLANIT // LEGAL supported us in adapting our data protection organisation to new regulatory requirements in our international business environment by developing solutions tailored to our specific practical needs. Despite a tight timeline, the project was completed on time.“

Dr. Jakob Dalby, Senior Legal Counsel at BAT

„We have developed our customer workflow with PLANIT // LEGAL and made data protection a key asset and selling point for our property rental and sales portal. “

Nicolas Jacobi CEO and founder of Immomio

„We provide cutting-edge solutions in healthcare and logistics based on perception-based computing - not an everyday task for legal counsel. Thankfully we can rely on PLANIT // LEGAL in matters of IT law and data protection.“

Jan-Philipp Mohr, CEO, Darvis

„For Leadwunder and our customers a great and very valuable support in the field of data protection! I can highly recommend PLANIT // LEGAL!“

Sebastian Hettlage, CEO, Leadwunder GmbH

„We develop software for intelligent decisions in the healthcare sector based on machine learning. The lawyers at PLANIT // LEGAL impressed us with their technical understanding and are therefore our choice in matters of privacy law. “

Tim Aschenberg, CEO, Tiplu GmbH

„As Alternative Legal Service Provider, we process personal data on a large scale. Solid justification concepts are a condition for the success of our business model. Many thanks to the PLANIT // LEGAL team for countless solid and pragmatic solutions to our data protection challenges. “

Dr. Nikolaus Föbus, CEO, Eagle lsp GmbH

Data Act Comes into Force – Is a Wave of Legal Warnings on the Horizon?

The EU Data Act will apply as directly applicable law starting September 12, 2025. A Bitkom study on the implementation of the Data Act 100 days...

Transparency Obligations in Data and Digital Law – First Steps Towards Compliance with the AI Act, Data Act, and Co.

The EU’s Data and Digital Acts are revolutionizing the rules of the digital economy. The new regulations in the AI Act, Data Act, Data...

Eye on the prize when acquiring a company – data protection requirements for corporate transactions

Company acquisitions and sales (M&A) are complex processes in which data protection is playing an increasingly important role. The exchange of...

The Data Act is coming: Are your products “connected” or your services “related”? Act now!

The digital transformation is progressing inexorably and with it new legal frameworks. One of the most important changes for companies that offer...

The Data Act is coming – are you ready? – What companies need to know now

From 12 September 2025, the EU’s Data Act will usher in a new era of data access and data responsibility – with direct implications for...

Implementating Deletion Concepts – Coordinated Data Protection Authorities’ Audits to be Expected

The European Data Protection Board (EDPB) has made the “right to erasure” focus of supervisory authority control and enforcement...

What to do if my server has been hacked?

Few terms are as present in the news, provoke as much discomfort, and yet fail to elicit suitable reactions as much as hacking and being hacked....

Privacy Challenges for Digital Health Applications (DiGA)
– Part 3

Part 3 of this blog series: Further obligations of the DiGA manufacturer as the controller In the first part of our blog series we looked at what a...