Business obligations, registers and licences · Czechia and Slovakia
The AI Act and deploying artificial intelligence
Businesses are adopting AI faster than they can establish what is permitted, while the European AI Act introduces obligations in stages according to system risk. We assess the category your AI use falls into, set internal rules for employees and address agreements with AI tool suppliers. Practical advice without alarmism. Most ordinary deployments can be managed simply.
- Lawyer admitted to both the Czech and Slovak Bars
- Practical advice without unnecessary bureaucracy
- Prices agreed upfront
What we'll do for you
The aim is clear answers rather than a thick compliance binder: what you may do, what you must do and what should change, proportionate to how you actually use AI.
Select an item to see the details.
-
AI inventory and classification
We map your company's AI systems and assess them against the Regulation's risk categories, from prohibited practices and high-risk uses to ordinary tools with minimal obligations.
-
Internal AI use policies
A clear employee policy specifying approved tools and uses, what must not be entered into them — personal data, trade secrets and client data — and how to label AI outputs.
-
Supplier agreements
Contractual arrangements for AI solutions covering liability for outputs, rights to training data, confidentiality and what happens if the system fails.
-
AI and personal data
The legal basis for processing, information obligations and impact assessments where AI uses personal data, in accordance with GDPR.
-
Monitoring developments
The Regulation's obligations apply in stages and are supplemented by guidance. We monitor developments and keep your rules up to date.
Deliverablean assessment of your AI systems, internal AI use policies and contractual documentation with suppliers
How it works
Does this process fit your matter? Describe it to the attorney →
- Consultationday 0
We discuss how you use and plan to use AI and explain what actually applies to you.
- Assessment and policies
We classify the systems and prepare internal policies and contractual recommendations.
- Implementation
We put the policies into practice, including a short training session for the team.
- Ongoing updates
We update the documentation for new tools, new uses and further obligations becoming applicable.
No-obligation enquiry
Ready to start?
Send us an enquiry. We usually reply within 24 hours with a price confirmation and next steps. The first 30-minute consultation is free and commits you to nothing.
- 1Send your enquiry via this form
- 2Usually within 24 h you get a price confirmation and plan
- 3We start work only after your approval
Not keen on calls or email? Message us on WhatsApp →
Prefer to book a time right away? Book a consultation →
Or email us about this matter.
What clients ask
Didn’t find your question? Ask us directly →
Does the AI Act also apply to an ordinary business that only uses AI?
Yes. Users of AI systems also have obligations under the Regulation, but their scope depends on the risk of the use. For ordinary writing or analysis tools, obligations are minimal, such as transparency; for high-risk uses, typically recruitment or assessment of individuals, they are considerably stricter. We assess your specific position.
Which AI uses are most sensitive?
The Regulation prohibits certain practices outright, such as manipulative techniques and social scoring, and imposes stricter rules on high-risk systems, including in employment, access to services, education and biometrics. If AI influences decisions about people, pay attention and seek advice before deployment.
Employees enter company data into chatbots. How can we manage this?
A ban does not work; clear rules on permitted use do. They should specify approved tools, what must not be entered — personal data, client data and trade secrets — and how outputs should be handled. Our internal policy addresses exactly this, alongside appropriate contractual arrangements with the tool provider.
Who is liable for loss caused by an AI output?
As between you and the injured party, generally you are: AI is a tool and you bear responsibility for using it. Liability between you and the AI supplier is allocated by contract, which determines whether you are left to deal with a system failure alone. We therefore prioritise supplier agreements.
When do the obligations apply?
The Regulation entered into force in 2024 and its rules apply in stages: prohibitions on selected practices from February 2025, rules for general-purpose AI models from August 2025, and most other obligations from August 2026. However, an amendment postponed the rules in Chapter III, Sections 1 to 3 for high-risk systems under Annex III until 2 December 2027 and for systems under Annex I until 2 August 2028; Article 6(5) is exempt from this postponement. The postponement therefore does not apply to the AI Act as a whole. We explain which dates affect your particular use during the assessment and monitor their introduction for you.
How much does AI compliance cost?
For ordinary AI use, the work involves a one-off assessment and policy; high-risk systems require a larger project. We confirm the price in advance based on scope and adhere to what we have agreed.
Legal Q&A
Common questions on this topic
-
When does the AI Act apply, and who does it cover?
The AI Act applies progressively: the first general provisions and prohibitions from 2 February 2025, rules for general-purpose AI models from 2 August 2025, with 2 August 2026 remaining the general application date. Regulation (EU) 2026/1744, however, postponed Chapter III, Sections 1 to 3, except Article 6(5): until 2 December 2027 for high-risk systems under Annex III and until 2 August 2028 for systems linked to regulated products under Annex I. It covers providers and businesses deploying AI; their specific duties depend on their role and the system.
Read the answer -
Must we tell customers that they are being answered by a chatbot on our website?
Yes, unless it is obvious from the circumstances. Article 50(1) of the AI Act applies from 2 August 2026 and requires a system intended to interact directly with people to be designed so that the person concerned learns that they are interacting with AI. The duty falls on the provider of the system, and that is generally also the company that has a chatbot developed for it and operates it under its own name, even though it is built on a third party’s language model. The information must be given clearly and no later than at the first interaction.
Read the answer -
Must we train employees who use AI tools?
Yes, to a reasonable extent. A company deploying AI must, under Article 4 of the AI Act, take measures to promote AI literacy among its employees and other persons who use AI on its behalf. Regulation (EU) 2026/1744 relaxed the obligation with effect from 27 July 2026: it no longer requires a sufficient level of literacy to be ensured and expressly does not require any specific level to be guaranteed for any individual. The obligation nonetheless remains, and it is worth documenting the measures taken.
Read the answer
Further reading
When an AI user becomes its provider: roles under the AI Act
The AI Act allocates obligations by role, not by who wrote the code. A company that has a chatbot built on someone else's model, sells an AI product under its own brand or uses a general-purpose tool for a sensitive purpose may become a provider with all the attendant obligations. This article explains where the line runs and what follows from it for supplier contracts.
Read more →
AI in recruitment and employee assessment: what the AI Act and the GDPR require
Tools that screen CVs or assess employee performance are, as a rule, high-risk systems under the AI Act. The main obligations arrive in December 2027, but the ban on emotion recognition in the workplace and the rules of the GDPR apply today. This article is intended for employers and HR professionals.
Read more →
Alarms, cameras and alarm receiving centres: when you need a technical service licence and when a guarding licence
Installing an alarm, servicing cameras and monitoring alarm signals around the clock fall under two different licences under the Private Security Act. For installation firms, building managers and operators of alarm receiving centres we examine where the line between them runs and what conditions apply to each.
Read more →