Posts

Showing posts with the label blogger

How universal consent works, start to finish.

Image
Universal consent means one central record of every yes and no a person gives you, read by every system you run and updated the moment it changes. Your banner only sees one of those channels. Most companies collect consent well and carry it badly. Here's a plain walk through what happens when it works, plus the one arrival almost nobody has planned for. Step 1: Someone answers They land on your site. Or open your app. Or tick a box on a paper form at your counter. Or reply STOP to a text. All four are consent events. All four count in law, and only the first one usually gets built properly. Step 2: The answer goes to one place Rather than saving into whichever tool caught it, the answer gets written to a single central record. Stored alongside it: who they are, what they agreed to, when, which channel, and which law applied to them at that moment. That last field does a lot of quiet work. It's how you answer "was this lawful?" two years later. Step 3: Everything else ...

EU AI Act Compliance in 2026: Deadlines, Fines and the Four Risk Categories Explained

Image
  Artificial intelligence is now regulated law in Europe, and many businesses are further behind than they realise. The EU AI Act entered into force on 1 August 2024 as the first legal framework built entirely around AI. Its rules arrive in stages, and some of the most important ones already apply. The four risk categories The Act sorts every AI system into one of four tiers, and your obligations depend on where your systems land. Unacceptable risk systems are banned outright. Since 2 February 2025, the EU prohibits AI that manipulates people into harm, exploits vulnerable groups, runs social scoring for public authorities, scrapes facial images from the internet, or reads emotions in workplaces and schools. High-risk systems are allowed, with strict conditions. This tier covers AI used in hiring, credit scoring, education, critical infrastructure, law enforcement and border control. Providers must complete conformity assessments, keep detailed technical documentation, register...