Laws and obligations
Start with your activities, AI use and data processing. Then determine which obligations apply. The same tool used for a different purpose may require a different assessment.
Find the right guide for your question
| Your question | Where to continue |
|---|---|
| Which laws may apply to us? | Scope by activity, system and role |
| Which use of AI are we assessing? | AI inventory and classification |
| From when and under what conditions? | Dates and transitional provisions |
| What did the Digital Omnibus on AI change? | AI Act amendments and their implications |
| Where is the exact text? | Laws, versions and official sources |
Guides by topic
- AI Act — purpose, organisational roles, risks, transparency and relevant obligations.
- Personal data and GDPR — processing, individual rights, suppliers and impact assessments.
- Cybersecurity: NIS2 and Czech legislation — regulated services, regimes, measures and registration-based deadlines.
- Data Act — connected-product data and switching data processing providers.
- DORA — financial entities’ operational resilience and ICT relationships.
These are the main topics explained in Docs. The source register also lists related laws and guidance. A source link does not mean there is a detailed implementation guide for that act here.
When obligations overlap
Regulatory overlaps explain where evidence can be reused and where addressees, scope or deadlines differ.
Turn the conclusion into action
Record the provision, why it applies, the deadline and the responsible person. Where information is missing, record a question for follow-up.
Continue with rules and data, checklists or preparation for review.