Insights
Plain-English articles on the EU AI Act and the GDPR for US companies that build or use AI: who the rules reach, which role is yours, first steps.
Does the EU AI Act apply to a US company?
The four ways the EU AI Act reaches a company outside Europe, the main exclusions, what being in scope means, and how this differs from the GDPR.
GDPR basics for US companies with EU users
What a US company sets up first under the GDPR: records, lawful bases, notices, rights requests, vendor contracts, breaches and an EU representative.
Provider or deployer: your EU AI Act role
How the EU AI Act assigns roles to companies that build, buy, rebrand or adapt AI, when a deployer becomes a provider, and what each role has to do.