Category
13 articles
A municipality that wants to deploy AI agents faces the GDPR, the General Administrative Law Act (Awb) and the AI Act, plus the Dutch government-wide position on generative AI. This article sets out what those rules require and shows in five steps how to arrange it: take inventory, assess, limit, record and test, keep oversight. For every step it says who in the municipality owns it.
Read moreBuying an AI agent takes more than a licence and a data processing agreement. This article walks through the roles and thirteen clauses to settle in the contract, each with the reason and the legal article behind it, and ends with a checklist for the negotiation.
Read moreA standard DPIA asks the right questions about a processing operation, but with AI it misses the supplier chain, the three lives of the data, inaccurate output, purpose creep and the AI Act. The DPIA AI addendum is a reusable module of ten parts, each with the question, the reason and the evidence, built on lessons from the Dutch DPA's advice on Microsoft 365 Copilot at a Dutch municipality.
Read moreIn its Article 36 GDPR advice on Microsoft 365 Copilot at the municipality of Haarlemmermeer, the Dutch Data Protection Authority concluded that the intended deployment would infringe the GDPR. What the regulator actually advises, what it means for other municipalities and public bodies, and how to build a Copilot DPIA that passes that test: from permissions and oversharing to Microsoft's roles, decision-making, retention and whether you need to consult the regulator yourself.
Read moreAI is already in the course materials, marketing and assessment of virtually every training provider. The AI Act has been setting requirements since 2025, and part of it applies today. These are the four steps that give a training organisation a demonstrable baseline.
Read moreWhich e-learning platform should you choose for AI literacy? LearnWize is the focused choice for role-based Article 4 evidence, GoodHabitz and Studytube for broad learning within an existing learning culture, PE-Academy and E-WISE for accredited continuing education, and DataCamp for technical AI skills. The right choice depends on whether you want to transfer knowledge or be able to show proof.
Read moreA realistic market analysis of EU AI Act compliance costs: from a few thousand euros for an SME deployer to hundreds of thousands for providers of high-risk AI. With cost categories, market prices and subsidies.
Read moreIn many cases, yes. Under Dutch law, once an AI tool processes employee personal data or is capable of monitoring behaviour or performance, the works council has a right of consent under Article 27 of the Works Councils Act. Here is when that applies and how to handle it well.
Read moreYou assess an AI vendor under the AI Act by asking up front for the risk classification, conformity, technical documentation, transparency under Article 50, data governance and GPAI status, recording that in your procurement file, and splitting the provider and deployer obligations in the contract. Below are the question list, the contract clauses and the role split.
Read moreNo single tool covers the whole AI Act. GRC governance software handles system governance, AI register tools maintain the inventory, people-evidence platforms such as LearnWize produce role-based Article 4 evidence, readiness scans tell you where you stand, and consultancy such as Embed AI does the work. This comparison shows where each category is strong and weak so you can combine them deliberately.
Read moreContinuously steering AI in HR & Recruitment (Part 4). Bias creeps in long before a model starts calculating.
Read moreContinuous AI monitoring in HR is more than compliance—it builds trust with candidates and employees. Part 3 of the AI in HR & Recruitment series.
Read moreEU AI Act triggered a silent revolution in HR. New rules on profiling and automated decisions reshape every step of recruitment and selection.
Read more