Free agent check · GDPR and AI Act
Fourteen questions, five minutes. You see where the risks are and which measures to take, with the article for each.
Start the agent checkFree · five minutes · calculated in your browser
No agent? Start with the DPIA intake instead.
Also in Claude and ChatGPT: the same check inside your own AI assistant. How it works
Example: a customer service agent
A customer service agent
It reads customer emails, looks up the order and sends a reply on its own.
Three things at once
Together that is the dangerous triangle: a hidden instruction in an email can make data leak out.
Five tests, each with a verdict
What to arrange first
Then three points to watch, each with the law behind it.
Ready for your file
law, OWASP and Dutch DPAEvery risk rests on the legal text, the OWASP list for agents or the Dutch Data Protection Authority.
Art. 35(7) GDPRThen the DPIA intake and the FRIA draft as Word files.
no language modelFixed rules: the same facts always give the same outcome.
101 checkson every release, and a public corrections register.
Zahed Ashkara · Legal adviser, privacy and AI
Certified AI Compliance Officer · member of the Dutch NEN AI & Big Data standards committee
I write the explanations and sign the deliverables.
Rather talk to a legal adviser straight away? Book a call 30 min
Work with me
In your team, as your regular DPO or for one assessment. You work with me directly and know up front where you stand.
Who you hire: Zahed Ashkara, freelance AI and privacy legal adviser. Freelance only.
Classification opinion
Opinion
High-risk
art. 6 lid 2 · bijlage III, punt 4 onder a
The system ranks applicants and weighs in on selection. The Article 6(3) exception does not work: the system profiles.
Zahed Ashkaralawyer
Interim or project
Interim or per project, as privacy officer, AI governance lead or DPO. Directly or through your agency, framework agreement or hiring platform.
Rate by agreementalso through your agency or framework agreement
By agreement
Monthly
An independent data protection officer with fixed hours and a fixed point of contact, who also keeps your AI register and reviews new AI applications.
Fixed monthly feematched to your organisation, agreed up front
12 months, then cancellable per quarter
Fixed price up front
A DPIA, FRIA, AI Act classification, Article 50 check or review of an AI contract, with the legal source for every conclusion. AI drafts it, a legal adviser reviews and signs it. Fixed scope and fixed price, agreed up front.
From €495fixed price per item, excluding VAT
1 to 4 weeks
After a 30-minute call you have a proposal with a fixed scope and fixed price within three working days. Also through your agency or framework agreement.More about working together
AI literacy for all staff, per role and demonstrable: LearnWize
Find out yourself · free, no account
Every article of the AI Act and the GDPR, with what you must do and from when. The key articles have a decision tree that takes you to your answer in a few questions.
Search an article, term, ruling or fine in the GDPR and the AI Act
All obligationsFree templatesAssess one AI system in depthPraxikon in your AI assistantArticle 50 transparencyGPAI obligationsAll eight Annex III domainsAnnex III classification check
Who does the work
Zahed Ashkara, legal adviser, privacy and AI
Master’s in public law (VU) · Certified AI Compliance Officer · member of the NEN AI & Big Data committee
Wrote in AG Connect: De EU AI Act hoort niet thuis bij Legal, maar bij IT, and in Het Financieele Dagblad: Geef AI-gesprekken zelfde geheim als arts en advocaat
Opinion
A signed opinion
Not a checklist, but a reasoned opinion with my name under it. You can take it to the board, clients and the regulator.
Standards
At the standards table
As a member of the Dutch NEN standards committee on AI & Big Data, I know what ‘conformity’ will mean in practice.
Experience
Experience on the buyer’s side
At Rabobank, Sanoma and PWN I saw what organisations need to ask of their AI suppliers and their own teams.
Sources
Traceable to the article
Every finding links to the explanation on this site, with the legal provision. You do not have to take my word for it.
Rabobank
Financial sector
Independent review of the AI Act implementation across all business units, with a position paper on the risk classification of fraud detection models for the Programme Board.
PWN
Critical infrastructure
AI inventory and conformity assessment against the AI Act, the GDPR and NIS2, developed into a governance framework the organisation runs itself.
Sanoma Learning
Education, international
Ongoing adviser on AI governance: frameworks for generative AI, AI and data protection impact assessments, and decision documents for board and steering committee.
Fixed products have a starting price on this site. After a 30-minute call you receive a proposal with a fixed scope and price within three working days. Scoped work is not billed by the hour.
The explanations stay free, without an account and with the source for every statement. I take no commission from suppliers and sell no software. If you want someone else to do the work, you can still use everything here.
With Embed AI (Dutch Chamber of Commerce 90283597), the business behind Praxikon. Proposal, terms and invoice are in that name.
A 30-minute call, a fixed-price proposal within three working days, and the signed delivery after one to four weeks. After that you have thirty days for questions.
Yes. Interim work and larger programmes often run through a framework agreement or an agency. Fixed products can also be bought directly. I work exclusively as a freelancer.
No. I am a legal adviser (master’s in public law, VU Amsterdam) and a Certified AI Compliance Officer. For litigation I work with attorneys.
I work with your DPO: the DPIA and FRIA share the same facts. If you have no DPO, I can take on that role as an external DPO.
A 30-minute call
I tell you honestly whether I can help, and what it costs. Within three working days you have a proposal with a fixed price.
Prefer email? info@embedai.nl
Praxikon is a trade name of Embed AI (Dutch Chamber of Commerce 90283597). Proposal, terms and invoice are in that name.