External AI Officer – ongoing oversight of AI use
An external AI Officer organises how your company uses artificial intelligence, assesses compliance with the AI Act and the GDPR, reduces legal risk and implements policies and training – without creating a new position.
What the AI Officer does
- Keeps a register of AI tools and systems and their risk classification.
- Reviews new tools before deployment – vendor terms, data flows, information security.
- Checks current and planned AI deployments against the AI Act, GDPR and ethics principles.
- Protects intellectual property, know-how and trade secrets when AI is used.
- Updates the AI policy and approval rules, organises training and supports incident handling.
Is an AI Officer mandatory?
The AI Act (Regulation (EU) 2024/1689) does not require an AI Officer. It does, however, impose obligations on AI literacy (Article 4 AI Act), transparency (Article 50 AI Act) and, for high-risk systems, human oversight (Article 26 AI Act). A designated person makes them easier to meet and to demonstrate.
Frequently asked questions
Can the AI Officer also act as DPO?
Yes, provided there is no conflict of interest. Combining both roles makes it easier to assess AI tools that process personal data.
Guides
Practical explanations of the rules related to this service.
Let us discuss your matter
The first conversation is used to define the scope of the matter and the fee.