When municipalities, public authorities or larger corporates come to us, the first hurdle is almost never the technology — it is legal certainty. Which regulations apply, from when, with which obligations? Who in the house is responsible? What is allowed in a pilot, what only in production? We built the AI Playbook EU precisely for this gap.
The data-protection basics, in brief
GDPR remains the frame: purpose limitation, data minimization, legal basis, data-subject rights. For AI use cases, two aspects are especially relevant — automated individual decisions (Art. 22) and the handling of training data. Whoever documents cleanly here has already done most of the EU AI Act work.
EU AI Act: what really matters
The EU AI Act classifies systems by risk: prohibited, high-risk, transparency-obligated, minimal. For municipalities and public-sector applications, two categories are decisive above all: high-risk systems in education, social benefits, law enforcement — and the transparency obligations for generative content. What many overlook: the Annex IV documentation duty already applies in the development phase, not only in operation.
The Playbook is not a substitute for a lawyer — but it is the shortest route from the status quo to audit-readiness. Whoever runs the readiness check honestly sees in 20 minutes where the next three steps lie.
What the AI Playbook EU concretely delivers
The Playbook bundles 30+ articles, industry templates, an interactive readiness check and curated checklists — along GDPR, EU AI Act and responsible-AI standards. Every article is backed by practical examples, every check delivers a prioritized to-do list instead of a traffic-light picture. We use it ourselves in the studio on every regulated mandate as a shared reference frame.
When legal questions get concrete
As soon as the consulting question shifts from "what does this mean?" to "what must we do?", we hand over to our legal partner Stella Manga-Chesnay. Stella owns Legal & GDPR in the studio and is directly bookable through the Playbook. We do not do legal advice — we orchestrate it.
Why this is relevant for municipalities and corporates
Public institutions and larger companies face the same question in 2026: how do we obtain legally sound AI applications without doing pilotitis? Our approach is pragmatic: first the homework (Playbook + readiness check), then use-case portfolio, then targeted pilot or production mandates. In that order, AI in the public sector is no longer a research question but administrative action with a clear frame.