AI Regulation Compliance Reports

Many companies already have artificial intelligence systems in production, integrated into their products or internal processes, without having had the opportunity to analyze what the AI Regulation requires of them. Others are about to launch a new product that incorporates AI and need to understand their regulatory exposure before entering the market. In both cases, the starting point is the same: a rigorous analysis of the system, the company’s role, and the specific obligations that apply.

At Letslaw, we prepare compliance reports under Regulation (EU) 2024/1689 that provide a comprehensive and documented overview of each AI system’s status in relation to the regulation. The report includes:

• Role identification: determining whether the company acts as a provider, a deployer, or a user of the system, along with the legal implications corresponding to each position in the AI value chain.
• Risk level classification: a sequential analysis in accordance with the structure of the Regulation (prohibited practices, high risk, limited risk, minimal risk), with explicit legal reasoning supporting the conclusion reached.
• Applicable obligations: determination of the specific requirements imposed by the Regulation based on the classification obtained, including technical documentation, transparency, human oversight, and risk management.
• GDPR Analysis: Integrated assessment of the system’s processing of personal data, identifying legal bases, the distribution of roles between the controller and the processor, and, where applicable, the need for a data protection impact assessment (DPIA).
• Recommendations for compliance: a prioritized action plan outlining the specific measures to be adopted, distinguishing between immediate and medium-term actions based on the Regulation’s deadlines.

The report will be drafted in a format that allows for both legal review and use as an internal working document for product or technology teams, and may be supplemented by a session to present the results to the client.

If you have an AI system and want to know exactly what the Regulation requires of you, we can start here.

If you’re assessing how the AI Regulation affects your company or need guidance on where to start, you can conduct a preliminary analysis using the form below: