Your staff are already using AI; the only question is how. All it takes is someone pasting a client contract or a price calculation into a free chatbot, and the company may lose trade secret protection. Under Section 17 of the Slovak Commercial Code, information only counts as a trade secret if the business keeps it reasonably confidential. Without clear rules, that is hard to prove.
We draft a policy that fits your size and the tools you actually use. It covers approved tools, rules on what data may be entered, checking outputs and what to do in an incident. We review contracts with AI vendors, including the data processing agreement, and prepare training for management, IT, HR and other staff.
Article 4 of the EU AI Act expects people working with AI to be trained. Your policy should set out who is trained, how often and how it is documented.
If an AI provider processes personal data on your behalf, it is a processor under Article 28 GDPR and you need a contract with the mandatory terms. Transfers outside the EEA require a mechanism under Chapter V GDPR.
The AI Act does not expressly require an AI officer. In practice, though, you need to decide who is responsible for AI. In a smaller company this can be the data protection officer or the compliance officer.
Published in December 2023, the standard describes a management system for AI. It is not mandatory, but in an inspection it can help show that the company took appropriate measures.
Tick what you already have. You can print the list or save it as a PDF. Your ticks are remembered only in your browser.
0 of 8 ready
In a consultation we assess your situation, suggest a way forward and tell you what costs to expect.
€90 incl. VAT, 30 minutes, in person or online
This page is for general information, reflects Slovak law at the time of writing and is not a substitute for advice on your particular matter.
