AI Act & Compliance
The European Union’s AI Act establishes, for the first time, a uniform legal framework for the use of artificial intelligence. Companies should familiarize themselves with the new requirements early on, as these are not only directed at developers of AI systems but, depending on the use case, also apply to operators, importers, distributors, and companies that integrate AI into their business processes.
Implementing the AI Act requires a careful analysis of the AI applications in use, as well as the respective roles and responsibilities within the company. In addition, there are other regulatory requirements, such as those under the General Data Protection Regulation (GDPR), contract law, product liability law, or industry-specific regulations. Compliance therefore means not only adhering to individual legal requirements but also establishing a sustainable AI governance framework.
OC Legal assists companies in conducting legal assessments of existing and planned AI applications. Together, we develop practical compliance frameworks, identify regulatory risks, and support the implementation of internal policies as well as documentation and control processes. The goal is to use artificial intelligence responsibly, in compliance with the law, and in a way that is future-proof.
Typical Areas of Focus in Consulting
- Classification of AI Systems Under the AI Act
- Roles and Responsibilities within the Company
- Compliance and Governance Concepts
- Documentation and Transparency Requirements
- The Interplay Between the AI Act, the GDPR, and Other Regulatory Requirements
- Legal Support for the Implementation of New AI Applications
AI Governance
The successful use of artificial intelligence requires more than just compliance with legal requirements. Companies need clear lines of responsibility, transparent decision-making processes, and binding internal rules for the use of AI. Structured AI governance creates the organizational framework needed to align innovation, compliance, and corporate responsibility.
This is not just about technical systems. Executive management, line departments, IT, human resources, and compliance should work together to determine which AI applications will be used, who will make decisions, how risks will be assessed, and what control mechanisms are necessary. Clear guidelines create transparency, strengthen the trust of employees and business partners, and facilitate compliance with regulatory requirements.
OC Legal helps companies establish sustainable AI governance. Together, we develop internal guidelines, accountability models, and decision-making processes tailored to the company’s structure and specific AI applications. The goal is to establish a governance framework that enables innovation while reducing legal and organizational risks.
Typical Areas of Focus in Consulting
- Development of Enterprise-Wide AI Governance
- Roles and Responsibilities for the Use of Artificial Intelligence
- Internal AI Policies and Terms of Use for Employees
- Documentation and Approval Processes
- Risk Assessment and Control Mechanisms
- Integration of Governance, Compliance, and Corporate Strategy
AI in Business
Artificial intelligence is transforming businesses far beyond the mere implementation of individual software solutions. It influences business processes, decision-making workflows, customer communication, and collaboration within organizations. The successful implementation of AI therefore requires a clear strategy, defined responsibilities, and the involvement of the relevant departments.
Companies face the challenge of analyzing existing processes, identifying suitable areas of application, and, at the same time, taking legal and organizational requirements into account. In addition to selecting appropriate AI systems, issues such as data protection, information security, documentation, employee training, and internal policies play a key role.
OC Legal supports companies in the implementation and use of artificial intelligence from both a legal and strategic perspective. Together, we create structures that enable the safe and sustainable use of AI—from developing internal policies and designing governance processes to providing legal guidance for new business models.
Typical Areas of Focus in Consulting
- Developing an AI Strategy for Businesses
- Integrating Artificial Intelligence into Existing Business Processes
- Development of Internal AI Guidelines and Terms of Use
- Supporting management on governance and organizational issues
- Legal Support for New AI-Based Products and Services
- Training and Awareness-Raising on the Responsible Use of AI
AI & Data Protection
The use of artificial intelligence often involves the processing of personal data. Companies should therefore assess, as early as the implementation phase of AI applications, whether and to what extent data protection requirements must be taken into account. In this context, not only the General Data Protection Regulation (GDPR) but also information security, data minimization, and transparent processing procedures play an important role.
Cloud-based AI services, large language models, and in-house AI applications require special attention. Common questions include which data may be processed, whether input data is used to train AI systems, how international data transfers should be assessed, and what technical and organizational measures are required.
OC Legal helps companies ensure that their use of artificial intelligence complies with data protection regulations. Together, we analyze existing and planned AI applications, assess data protection risks, and develop practical solutions for the secure and responsible use of AI.
Typical Areas of Focus in Consulting
- Data Protection Assessment of AI Applications
- GDPR-Compliant Implementation and Use of AI Systems
- Processing of Personal Data by AI
- International Data Transfers and Cloud Services
- Technical and Organizational Measures (TOMs)
- Privacy Information, Consents, and Internal Policies
- Data Protection Impact Assessments (DPIA), as required
Contracts & Artificial Intelligence
The use of artificial intelligence raises a wide range of contractual issues. Companies should carefully review the contractual framework as early as the selection and implementation phases of AI systems. In addition to traditional software and license agreements, provisions regarding liability, data protection, usage rights, service levels, and compliance with regulatory requirements are becoming increasingly important.
Developing proprietary AI applications or integrating AI into existing products and services also requires legally sound contract drafting. Clear agreements provide transparency regarding responsibilities, data handling, the use of AI-generated results, and intellectual property rights. This allows legal risks to be identified early on and conflicts to be avoided.
OC Legal assists companies in drafting, reviewing, and negotiating contracts related to artificial intelligence. Our goal is to develop legally sound and practical contractual solutions that meet the technical, economic, and regulatory requirements of modern AI projects.
Typical Areas of Focus in Consulting
- Drafting and Reviewing AI, Software, and SaaS Contracts
- Licensing Models and Rights of Use for AI Systems
- Liability Provisions and Warranty
- Service Level Agreements (SLAs) and Support Agreements
- Data Use and Responsibilities Between the Contracting Parties
- Contracts for the Development and Integration of AI Applications
- Drafting Contracts in Compliance with the AI Act, the GDPR, and Other Regulatory Requirements
Intellectual Property & Artificial Intelligence
Artificial intelligence is fundamentally changing the way intellectual property is handled. Companies use AI to create text, images, software, designs, and marketing content, often relying on external AI systems. At the same time, questions arise regarding the rights to training data, AI-generated outputs, and the use of third-party content.
Depending on the specific application, various intellectual property rights may be involved. In addition to copyright, trademark, design, and patent law—as well as the protection of trade secrets—play a particularly important role. Companies should assess at an early stage which rights of use exist, to whom AI-generated work products can be attributed, and how their own innovations can be legally protected.
OC Legal helps companies protect and legally exploit intellectual property related to artificial intelligence. We support the development of new business models, review licensing and usage rights, and develop strategies to protect innovations, trademarks, and know-how.
Typical Areas of Focus in Consulting
- Copyright and AI-Generated Content
- Use and Licensing of Training Data
- Trademark and Design Protection for AI-Powered Products and Services
- Protection of Software, Algorithms, and Trade Secrets
- Patent Law Issues Related to AI Innovations
- Licensing and Usage Rights to AI-Generated Results
- Development of IP Strategies for AI-Based Business Models
Artificial Intelligence in Human Resources
Artificial intelligence is increasingly finding its way into human resources. Companies use AI, for example, to create job postings, manage the applicant process, support HR decisions, provide training, and automate administrative processes. The use of AI offers significant potential for efficiency gains, but it should be carefully planned and supported by legal guidance.
There are specific legal and organizational requirements, particularly when dealing with employees and job applicants. In addition to data protection and labor law requirements, the works council’s rights to co-determination, transparency obligations, and the requirements of the AI Act may also come into play. Companies should therefore establish clear internal policies and document the use of AI in a transparent manner.
OC Legal supports companies in implementing and utilizing artificial intelligence in human resources. Together, we develop legally sound and practical solutions that enable innovation while appropriately balancing the interests of companies, employees, and job applicants.
Typical Areas of Focus in Consulting
- Introduction of AI Applications in Human Resources
- Development of internal guidelines for the use of AI by employees
- Data Protection in the Hiring Process and Employment Relationship
- The Works Council's Rights to Co-Decision-Making Regarding the Use of AI
- The AI Act and Regulatory Requirements in the HR Sector
- Labor Law Issues in AI-Supported Human Resources Processes
- Training and Awareness-Raising on the Responsible Use of AI
