A compliance programme for two companies in the same group: a GDPR phase first, then AI Act conformity, with working registers and tracked actions.
01 / 03The challenge
A group that also grows by acquiring other businesses inherits customers, data and suppliers to realign each time. At the same time it uses artificial intelligence in its own services, and needs to know which AI Act obligations already apply and which are still to come.
02 / 03What we did
A dossier in ten sections: data protection first, then AI Act conformity. Working registers for breaches, data subject rights, processors and sub-processors and transfers outside the European Economic Area, plus a master index of open actions. The AI Act obligations timeline reflects the 2026 amendments.
03 / 03The outcome
Dossier built and registers in use.