27/10/2026 09:30 - 13:30

_{Module 1: Origins, Scope and Key Definitions}

• The legislative journey and the relationship with GDPR and the wider global regulatory landscape

• Who is covered:providers, deployers, importers and distributors

• What qualifies as an AI system and what is excluded

• Key implementation dates, transitional periods and practical planning points

_{Module 2: The Risk-Based Framework and Core Obligations}

• The four-tier risk model: prohibited, high-risk, limited-risk and minimal-risk systems

• High-risk AI: covered sectors, use cases and mandatory requirements

• Different  obligations for providers and deployers

• Transparency requirements for limited-risk systems, including chatbots and deepfakes

‍‍

_{Module  3: Compliance in Practice, Governance and Enforcement}

• Conducting anAI inventory, gap analysis and internal risk assessment

• AI literacy, human oversight and internal responsibility for AI governance

• Policies, procedures and contractual controls for AI procurement and deployment

• Conformity assessments, technical documentation and the EU AI database

• Penalties and the enforcement role of national supervisory authorities

‍

Wrap Up and Q&A

• Practical implementation priorities

• Questions from participants and key takeaways

‍

This course is suitable for:

·   Lawyers advising businesses ontechnology, compliance, contracts, employment, data protection or corporategovernance

·   Legal and compliance officers

·   C-suite executives and seniormanagers, including CEOs, CTOs, COOs and risk leaders

·   Data Protection Officers andprivacy professionals

·   IT, AI, machine-learning andproduct professionals who need to understand legal obligations

·   Procurement andvendor-management professionals

·   HR and people operationsleaders using AI-assisted tools

·   Professionals in healthcare,finance, public-sector bodies and other regulated environments

‍