Category: Compliance
AI compliance practices, documentation requirements, risk classification, and audit readiness for organisations
Stay ahead of AI change. Get practical updates from Future Prep direct to your inbox.
By subscribing you agree to receive Future Prep news. Unsubscribe any time.
Two US rulings show that material run through public AI tools can lose privilege and confidentiality. For EU practitioners, contract terms, deployment environment and acceptable-use rules are the controls that decide whether sensitive work stays protected before the next dispute.
The Commission's draft guidelines of 19 May 2026 set worked examples across all eight Annex III categories. The Annex III classification memo now has an external benchmark. Six fields make the call defensible before the 23 June consultation closes.
The Dutch DPA's consultation on the right to explanation closes on 26 May 2026. The draft reframes Article 22 GDPR and Article 86 AI Act obligations as a deliverable on demand, not paperwork. Three deployer gaps to close before the final guidance arrives in Q3 2026.
The EDPB has confirmed Europrivacy as both a Data Protection Seal under Article 42(5) and as an Article 46 transfer tool when combined with binding and enforceable commitments. Five concrete updates to make to your procurement file this quarter, with a decision sheet as the operational companion.
A frontier AI model that finds and exploits software vulnerabilities sits inside three legal regimes at once: NIS2, the AI Act and the CRA. For deployers that means three sets of obligations and three sets of audit risk. The fix is a single control map built now.
A new UC Davis measurement study shows AI chatbot data leakage is now the default behaviour of the modern chatbot stack. Names, emails and prompt content leave for third parties before a question is asked. For revenue leaders, this is a supply chain problem.