Question 1

Does my company need to comply with GDPR?

Accepted Answer

If your company processes personal data within the scope of GDPR, it has data-protection obligations. The exact scope depends on its activities, data, and role in the processing.

Question 2

When does the EU AI Act come into effect?

Accepted Answer

The EU AI Act is in force and applies in phases. Transparency rules apply from 2 August 2026; most Annex III high-risk system rules apply from 2 December 2027; Annex I product-related high-risk rules apply from 2 August 2028.

Question 3

How much does GDPR compliance cost?

Accepted Answer

Cost depends on the type and volume of data, vendors, countries involved, and work already completed. Start by mapping the obligations and getting a quote for the actual gaps.

Question 4

My company uses AI — do I need to worry about the AI Act?

Accepted Answer

The first step is to classify the company’s role and each AI system’s risk level. The obligations depend on that classification and the relevant application phase.

Question 5

Do I need a DPO?

Accepted Answer

Whether you need a DPO depends on your core activities, monitoring, and the categories of data processed. Assess the GDPR criteria for your situation and document the decision.

Question 6

What are the first compliance actions?

Accepted Answer

Start with: privacy policy, cookie banner, DPAs with vendors, processing register, and a process for data subject rights.

Compliance work that stays organised

Regulations

Compliance should start with what matters for the company stage.

Minimum viable compliance first. Then the system.

An official source becomes a compliance gap you can act on.

FAQs stay inside the hub.

Compliance made simple for companies