2023 — 2024Automotive OEM

Governance processes for the EU AI Act.

The EU AI Act demands transparent, traceable data use in AI applications. We build the governance structure that ensures exactly that, in line with the regulation.

Back to all engagements

The question

How does a company use data in AI applications compliantly when the EU AI Act demands transparency and traceability, but the roles and processes are missing?

Our answer

From the legal requirements of the EU AI Act, we derived specific governance requirements for handling AI-relevant data. In cross-functional workshops with business, IT and legal departments, we defined roles and responsibilities, in particular for data use in AI applications. Building on that, we developed a target process for the documentation, assessment and approval of data, handed it over to the development team and interlocked it closely with the existing data-management processes.

What we delivered

01 — REQUIREMENTS DERIVATION

From legal text to concrete governance requirement.

Specific requirements for the handling of AI-relevant data formulated from the EU AI Act.

02 — ROLES & RESPONSIBILITIES

Defined cross-functionally, from business to legal.

Clear responsibilities for data and its use in AI defined in workshops with business, IT and legal.

03 — TARGET PROCESS

Documentation, assessment and approval in the tooling.

Target process derived, handed over to development and interlocked with existing data-management processes.

What it achieved

Governance framework established to satisfy the EU AI Act.
Defined roles and processes for data approval and data use.
Requirements derived for implementing the target process in the central governance tooling.
The new processes integrated into existing data-management structures.