Data protection law, the AI Act and accessibility – a sense of what actually applies to you. Not legal advice.
The distinction between provider and deployer, which marketing applications fall into which risk class, and the four real obligations.
What belongs in an AI policy, what expressly does not, and why one page achieves more than a twenty-page rulebook — with a complete outline to adopt.
When a consent banner is legally required, what measurement remains possible without consent, and what you actually give up.
Who the obligation applies to, what the requirements actually demand, and which ten measures cover most of it.
Three questions decide whether personal data may go into an AI system: contract, place of processing, and use for training.
The differences between the revised Swiss Act and the GDPR, and the six points a Swiss business website has to have settled.
