Technical contribution series 2026 · Month 8. Subsequently added on 13 November 2026; legal status: 13 November 2026. The archive date serves the monthly classification.
An AI application can affect several legal areas at the same time. A release process must therefore consider the role, function, data and actual use.
Application and role recording
An inventory identifies providers, purpose, user groups and processed data. Own branding or changes to an application can influence the legal role. The classification shall be based on the specific function and applicable law, including transitional rules.
Check data and contracts
Confidential information and personal data belong only in suitable and shared applications. Vendor conditions, training usage, subcontractors and international transfers will be reviewed. A general statement by the provider on legal compliance does not replace the examination of its own use.
Set responsibility for results
Employees need rules on technical control, permissible areas of use and handling errors. Particularly important decisions must not be shifted unnoticed to unaudited expenditure. Transparency, protection of discrimination and data protection are independent audit areas.
Four practical examples
Fictitious examples of illustration; the concrete assessment requires examination of the individual case.
AI assistant for customer inquiries
A company is planning automatic response plans. Data types, provider conditions, transparency and technical result control are defined before use.
Applicant evaluation by software
The system sorts applications. The specific function is examined in accordance with the AI regulation, data protection and discrimination protection; formal human confirmation does not replace an independent decision.
Source code in the public chatbot
A developer wants to enter confidential code for error analysis. Prior to this release, secret protection, terms of use and possible training usage must be clarified.
Marketing under its own name
A company integrates foreign AI into its own product. It checks whether this creates a different regulatory role and what evidence and contractual information is required.
Deepening and legal basis
AI compliance and the AI Act · Official legal basis
Would you like to have a specific process checked? Send request. Scope and remuneration are agreed prior to commissioning.