01
Understand data and purpose
We capture data categories, sources, individuals affected, systems, recipients and intended use.
AI & COMPLIANCE
Use data without losing control.
We advise on the lawful handling of personal, business and confidential data in AI systems: from inputs and data sources to outputs, retention and cross-border processing.
Typical situations
Employees enter data into publicly available AI tools
Admissibility, purpose, confidentiality and processing by the provider should be clearly regulated.
What we do for you
Clearly defined services.
01
Data flow & roles
We map which data is processed by whom, for which purpose, in which system and by which providers.
02
Admissibility & transparency
We assess purpose, proportionality, information duties and internal and external notices.
03
Confidentiality & data minimisation
We define which information may be used and how unnecessary or particularly sensitive data is avoided.
04
Data protection impact assessment
Where the risk is potentially high, we structure and accompany the required in-depth review.
05
Cross-border processing
We assess processor arrangements, sub-processors, data locations, transfers and contractual safeguards.
DATA NEEDS A PURPOSE
AI is only as responsible as the handling of the data behind it.
More data does not automatically mean better results. What matters is whether the data is suitable, necessary, current and lawful for the specific purpose. We create transparency over data flows and reduce risks where they arise: in selection, input, access, provider processing, use of results and retention.
Clear entry points
From overview to reliable implementation.
AI Data Protection Check
For
Companies with a concrete AI use case.
Result
Initial assessment of data types, roles, purpose, transparency and risks.
Data flow mapping
For
Companies with several systems or providers.
Result
Overview of data, systems, recipients, countries and responsibilities.
Data Protection Impact Assessment
For
Companies with sensitive, large-scale or decision-relevant processing.
Result
Structured risk analysis, safeguards and documented conclusion.
So gehen wir vor
02
Assess law and risk
We review admissibility, transparency, proportionality, security and potential impact.
03
Implement safeguards
We prepare notices, contractual provisions, retention and deletion concepts and required documentation.
Considered in context
AI Governance & Responsibility
Technology & AI Contracts
AI in the Workplace
Personally responsible
The right expertise. The right point of contact.
Data ProtectionTechnologyContract LawEmployment Law
Meet the teamKnowledge & tools
Current articles, updates and tools on the topic.
Personal dataAIDPIAData flowCross-border
Explore knowledge & toolsFAQ
Frequently asked questions
Next step
Do you know which data your AI systems actually process?
We create transparency over data flows and define the necessary safeguards.