The regulatory landscape is evolving rapidly. The AI Act, Data Act, Digital Services Act, Digital Markets Act and other European digital regulations impose new requirements on businesses that develop, provide, use or integrate digital solutions. The applicable requirements depend, among other things, on the business's role in the AI value chain, the risk classification of the AI system and how the technology is used within the organisation.
Our strength lies in combining technological understanding, specialist regulatory expertise and experience from business-critical projects in regulated industries. We are typically involved at an early stage – as a strategic sparring partner, rather than solely as a contractual adviser towards the end of a project.
The team has extensive experience from complex digitalisation projects, cyber incidents, AI implementation and compliance projects. We provide advice that can be translated into practical measures – grounded in the organisation's operations and regulatory framework.
Our advice includes
- AI governance and digital regulation: We assist with the risk classification of AI systems, allocation of responsibilities, documentation requirements, internal policies and governance frameworks. We have particular experience advising financial institutions, insurance companies and industrial businesses that use AI in decision-making processes.
- Strategy, mapping and safe implementation: We map how AI is used across the organisation, which suppliers are involved, and what control and documentation requirements this entails. Our approach is to provide strategic advice at an early stage, ensuring that compliance requirements and commercial needs are clarified before a solution is selected.
- Data and IP in AI systems: AI often relies on extensive use of data. We advise on issues relating to training data, data sharing, trade secrets, copyright and ownership of AI-generated content.
- AI contracts and procurement: We advise on contracts for the development, procurement, licensing and use of AI solutions. This includes AI-specific clauses, allocation of liability, rights to training data and AI-generated content, as well as regulatory requirements.
- Security: AI creates new security challenges and requirements. We help clients assess security throughout the AI supply chain, in their own use of AI and as part of their wider cybersecurity arrangements.
- Regulatory investigations and disputes: AI and digital regulation are giving rise to new types of regulatory investigations, complaints and disputes. We assist with risk assessments, dialogue with regulatory authorities, complaints proceedings and crisis management relating to AI and digital solutions.