Technology & AI › AI governance
Technology & AI
AI governance and the EU AI Act
Responsible AI is a leadership decision.
We help organizations decide who owns AI risk, how each use is approved and what it does with data, before the first tool goes live.
Led by Luis Martínez ArnalAssociate Director, Technology & Digital Strategy
Ownership
Who decides about AI
One owner per AI use
A named person accountable for each tool and what it does.
A simple approval step
New uses are checked before launch, not after.
A record of data use
What each tool does with data, written down and kept current.
Regulation
What the EU AI Act requires
The EU AI Act regulates AI by risk: the higher the risk to people, the stricter the rules.
Banned uses
A small set of practices is not allowed at all, such as manipulative techniques or social scoring.
High-risk uses
Areas such as recruitment, workforce management, education and credit decisions carry the heaviest duties: human oversight, record-keeping, and clear information for the people affected.
Transparency
People must know when they are talking to an AI system or seeing AI-generated content.
Everything else
Most everyday tools carry few or no specific duties.
It can apply outside the EU
A UK organization is covered if it offers AI systems in the EU, or if their output is used there.
Most organizations are users, not developers
Users of AI still have duties: use tools as intended, keep a human in control, and make sure the workforce understands the tools it uses.
Next step
Where to start
Take the self-check
Ten minutes, six areas, including governance. Nothing is stored or sent.
Book a conversation
Thirty minutes on who owns AI risk in your organization today.
Start with a conversation
Thirty minutes, no preparation needed: who owns AI in your organization, and what a first step could look like.