The AI Act and the incoming Digital Omnibus are adding a new layer of governance for DPOs to own, on top of the GDPR obligations that already take up most of the week.
Most teams don’t need to build AI governance from zero. Eight years of GDPR process, documentation and tooling already cover a good part of the ground. The open question is which parts transfer directly, which need adapting, and where the two frameworks genuinely diverge.
In this session, the EQS team work through that overlap: who is best placed to own AI governance, how a DPIA and a fundamental rights impact assessment (FRIA) relate and when you need both, and the narrow new exceptions the AI Act carves into GDPR’s own rules. The demo puts this into practice, running the GDPR and AI Act modules together to show how the platform manages both from a single record rather than two disconnected processes.
What you can expect:
- Why the DPO is structurally the right owner for AI governance – not just the convenient one – and what already qualifies them for it
- What the Digital Omnibus changes, and what it means for the processes you already run
- How a DPIA and a fundamental rights impact assessment (FRIA) relate, and when you need to run both rather than treating them as separate exercises
- A live demo of the GDPR and AI Act modules working together inside Privacy Cockpit, plus how the risk module extends beyond AI into other regulatory areas
Who should attend:
- AI officers
- Compliance managers
- CISOs
- DPOs – and anyone currently responsible for AI governance in their organisation
Webinar Details:
Duration: 45 mins
Language: English
