Tag
Articles on EU AI Act
17 posts in this tag.
AI and HR data: GDPR risks and EU-hosted alternatives
Why HR data in US AI services is risky, what the GDPR, the AI Act and works councils require, and which EU providers host open models.
AI literacy under Article 4 after the Omnibus
Article 4 of the AI Act after the Digital Omnibus: who is affected, what the Bundesnetzagentur expects, what is settled on fines and how to document your measures.
AI training for employees: obligation, cost, funding
Is AI training mandatory, what does it cost, and does the employment agency pay? Art. 4 AI Act after the Omnibus, four checked market prices and the rules of § 82 SGB III.
Bundesnetzagentur and the AI Act: what KI-MIG means
The KI-MIG has applied since 29 July 2026. Who enforces the AI Act in Germany, where you can report violations and which fines the law actually sets.
AI Act Art. 50: What Your UI Must Show Since 02.08.2026 (Fines up to 15M)
Art. 50 has applied since 02.08.2026: chatbot disclosure, machine-readable marking, deepfake label, emotion recognition notice. Fines up to 15M EUR or 3%.
AI vendor lock-in: 3 contract clauses your Mittelstand AI deal will not survive without
Three clauses decide whether your AI contract becomes a cost trap or a lever in 2027. Portability, sub-processor transparency, exit notice. Without them, your Mittelstand pays the lock-in premium.
EU AI Act Fines: The 35 Million Number Is Usually Wrong. What Mittelstand CEOs Actually Risk in 2026
The 35 million figure only applies to Art. 5. Mittelstand companies face Tier 2 (15M/3%) or Tier 3 (7.5M/1%). Plus: § 43 GmbHG personal liability.
Who Is Liable When the AI Agent Hallucinates? The 2026 Liability Framework for DACH Mittelstand
AILD withdrawn, PLD applies from 09.12.2026, AI Act Art. 26 from 02.08.2026. Three liability layers, five contract clauses, five insurance levers.
AI Audit Readiness in 90 Days: what Mittelstand prepares for BfDI and BNetzA
From 02 Aug 2026 BNetzA audits with KoKIVO. Big4 sells 6-month programs at 250k. Mittelstand needs a lean path. Here is the 90-day plan.
GPAI enforcement since 2 August 2026: what Mittelstand deployers need to know now
Since 2 August 2026 the EU Commission's enforcement powers against GPAI providers apply. What that means for Mittelstand deployers, and 4 provider obligations you must check.
GDPR and Agentic AI in Production: What German DPOs Audit in 2026, and What They Reject
AI Act and GDPR are complementary, for Agentic AI in production this means two duty catalogues at the same time. The critical pitfalls, with article references instead of gut feeling.
Prompt Engineering for Employees: The 2026 Practice Guide for DACH Mid-Market
5 patterns, 8 templates, 3 anti-patterns: prompt engineering is not ChatGPT-as-Google-search. Practice guide from Sentient engagement work for DACH mid-market 2026.
Prompt Injection Defence: OWASP LLM Top 10 for the DACH Mittelstand, What Actually Attacks in 2026
Prompt Injection has been number one on the OWASP list for LLM applications since 2023, including the 2026 edition. What attacks and how to secure agents against it.
EU AI Act August 2026: The 90-Day Compliance Plan That Holds Even If the Omnibus Slips
Trilogue on 28 April ended without agreement. Without the Omnibus, full AI Act high-risk obligations apply on 2 August 2026. 5-phase 90-day plan for CTOs and engineering leads.
Cursor vs GitHub Copilot vs Claude Code: CTO Comparison 2026
Cursor, GitHub Copilot and Claude Code compared: prices, data handling and admin controls according to the vendors' own pages, as of 6 October 2026, with sources.
5 security questions every CTO must ask their coding agent vendor
Your devs are already using Cursor, Copilot or Claude Code, often without formal approval. These five questions decide whether your codebase is still safe.
Gartner: 40 percent of all agentic AI projects fail by 2027 — the five anti-patterns
Gartner predicts 40 percent pilot mortality by 2027. The five anti-patterns that kill mid-market agentic AI pilots, with counter-patterns from live engagements.