Questions people actually ask
Answers, with the law attached
Every answer here shows the provision that settles the question, quoted word for word from the current consolidation, with the citation and the EUR-Lex link. Not a summary of the law — the law.
AI Act
- What applies on 2 August 2026 under the AI Act?
- When do the AI Act’s high-risk classification rules apply?
- What are the penalties under the AI Act?
- What fines can providers of general-purpose AI models face?
- Does the AI Act apply to AI used in hiring?
- Do we have to tell users they are chatting with an AI?
- Which AI practices are prohibited in the EU?
- What are the obligations for providers of general-purpose AI models?
- What is a general-purpose AI model with systemic risk?
- Does the AI Act apply to companies outside the EU?
- What counts as an “AI system” under the AI Act?
- What is the AI Act’s AI literacy obligation?
- What obligations do providers of high-risk AI systems have?
- What obligations do deployers of high-risk AI systems have?
- What does the AI Act require of a risk management system?
- What does the AI Act require about training data?
- What does the AI Act require for human oversight?
- What does the AI Act require on accuracy, robustness and cybersecurity?
- What logging does the AI Act require?
- What is a fundamental rights impact assessment (FRIA)?
- What conformity assessment does a high-risk AI system need?
GDPR
- What is the GDPR deadline to report a personal data breach?
- When must we tell affected people about a data breach?
- What are the lawful bases for processing personal data under the GDPR?
- Can we rely on legitimate interest to train an AI model on customer data?
- What does the GDPR say about automated decision-making and profiling?
- When is a data protection impact assessment (DPIA) required?
- When do we need to appoint a Data Protection Officer?
- What must we provide in response to a GDPR access request?
- When does the GDPR right to erasure apply?
- What does “data protection by design and by default” require?
- Who has to keep records of processing activities under the GDPR?
- How large can GDPR fines be?
- What are the GDPR rules for transferring data outside the EU?
DSA
- What does the DSA require about traceability of traders on a marketplace?
- What does the DSA require of a notice and action mechanism?
- When is a platform a “very large online platform” under the DSA?
- What systemic risk assessment does the DSA require?
- Does the DSA ban dark patterns?
- What advertising transparency does the DSA require?
- What does the DSA require to protect minors?
DMA
NIS2
Data Act
Cyber Resilience Act
DORA
Product Liability Directive
Your question is not on the list? Ask it directly — the corpus covers 13 EU regulations. 7-day Pro trial, no card.
Not legal advice. Browse the full text by article · Why legal AI fails