Our Services

Artificial intelligence is no longer a topic for the future – it is already being used in many companies’ day-to-day operations. At the same time, the use of AI creates new legal requirements. The AI Act, the GDPR, copyright law, liability issues, and sector-specific compliance requirements must be considered together.

We advise companies, developers, IT service providers, and users on all legal issues relating to the use, development, and contractual structuring of AI systems. Our approach is not limited to identifying risks. We focus on practical and workable solutions. We speak both the language of the law and the language of your IT teams.

We support you with the legally compliant implementation of AI applications, the assessment of specific use cases, and the development of robust compliance structures.

DETAILS OF OUR SERVICES

AI Act Compliance

We assess whether and in which role your company falls within the scope of the AI Act. In particular, we analyze whether you act as a provider, deployer, importer, distributor, or product manufacturer, and which obligations arise from that role. We assist with the legal classification of AI systems, risk categorization, and the development of an appropriate compliance roadmap.

Assessment of Specific AI Use Cases

Not every AI application is subject to the same legal requirements. We analyze specific deployment scenarios, including internal knowledge management systems, AI-supported customer communication, automated decision-making processes, recruiting tools, chatbots, analytics tools, and AI features in software products. Our goal is to provide a clear assessment of the applicable legal requirements and how they can be implemented in practice.

Data Protection and AI

The use of AI frequently involves the processing of personal data. We assess whether there is a viable legal basis for such processing, which notice obligations apply, whether a data protection impact assessment is required, and how issues such as training data, prompts, log files, international data transfers, and data processing agreements should be classified from a legal perspective. In doing so, we combine our experience in data protection law with our technical understanding of AI applications.

AI Governance and Internal Policies

Many companies already use AI without having clear internal rules in place. We assist with the development of AI policies, approval processes, role models, and documentation structures. This includes rules for employees, requirements for handling confidential information, guidelines for the use of external AI tools, and processes for the ongoing review of new applications.

AI Law Training and AI Literacy

The AI Act includes requirements relating to AI literacy. We provide practical training for management, legal departments, IT teams, and business units. We explain the legal framework in clear terms and use concrete examples to show what companies should consider when using AI.

Contract Drafting for AI Projects

AI projects require clear contractual foundations. We draft and review agreements with AI providers, IT service providers, developers, and customers. In particular, we address statements of work, allocation of responsibilities, usage rights, data protection, confidentiality, liability, support, documentation, exit scenarios, and regulatory obligations.

The use of AI often raises questions concerning the protection of training data, prompts, generated content, and software code. We advise on copyright risks, the use of AI-generated texts, images, designs, or code, and the contractual protection of usage rights. Issues relating to trade secrets and data access may also be relevant.

AI in Regulated Industries

Special requirements apply where AI is used in regulated sectors, including financial services, healthcare, critical infrastructure, or areas involving sensitive employment-related decisions. We assist with aligning the AI Act, GDPR, IT security requirements, DORA, NIS2, and other regulatory frameworks.

Other AI Law Matters

If your specific matter is not listed above, please contact us with a brief description of your project. We will assess which legal requirements apply and how they can be implemented in a practical and efficient manner.