EU AI Act + GDPR

AI Compliance Toolkit: EU AI Act + GDPR.

Your team already uses ChatGPT, Copilot and other AI tools. Under the EU AI Act, businesses must already make sure staff who use AI have sufficient AI literacy. This toolkit helps you get control of it in an afternoon.

Notion template Word · Excel · PDF

Price: €29.99
Formats: Notion template or Word, Excel & PDF
Languages: EN, DE, NL, ES, HR — country editions adapted to national law
Access: Instantly after purchase, one-time payment

EU AI Act + GDPR

What's in the kit

Guide — the EU and national rules at a glance, a step-by-step setup and a 6-month review routine
Approved AI Tools Registry — every AI tool, its EU AI Act risk tier, review status and next review date
GDPR checkpoints for every tool that processes personal data
AI Employee Policy — ready to adapt, just fill in your company details
Two training video scripts to record your own staff training
Training Log — who has been trained and when, as proof of AI literacy
Incident log and review & sign-off with an automatic next review date

The rules it covers

AI literacy (Art. 4 AI Act)
Has applied since 2 February 2025 to every business that uses AI systems, including everyday tools like chatbots and writing assistants.
Risk tiers
The AI Act sorts uses into prohibited, high-risk, limited-risk and minimal-risk. Knowing which tier each tool falls into tells you what else you have to do.
GDPR still applies
As soon as personal data goes into a prompt, the GDPR applies: legal basis, transparency, processor agreements and transfers outside the EU.

Made for

Businesses whose staff use AI tools
Founders and managing directors
HR and operations managers
IT and data protection coordinators

Two editions, same price

Choose how you want to work. Content and price are the same.

Notion template Word · Excel · PDF

Questions about this kit

Does the AI Act apply if we only use ChatGPT or Copilot?

Yes. As a business that uses AI systems you are a “deployer”, and the AI literacy duty in Art. 4 already applies to you. Most of the heavier obligations only apply to high-risk uses, such as AI in recruitment.

How do I prove AI literacy?

The AI Act does not prescribe a certificate. What helps is a record: which tools are approved, what the rules are, and who has been trained when. The registry, policy and training log give you exactly that.

What is the difference from the AI Workplace Policy Pack?

This toolkit is about governing the tools: register, risk tiers, GDPR checks and reviews. The Policy Pack is about the people: the policy, staff guide, acknowledgments and tool requests. Many businesses use both.

Other kits

Templates

GDPR Compliance Kit GDPR
AI Workplace Policy Pack EU AI Act + GDPR
EU Pay Transparency Kit Directive (EU) 2023/970
Vendor & AI Supplier Assessment Kit GDPR + EU AI Act

Need more than one kit?

This kit is part of the EU Compliance Bundle: all five kits for €69.99 instead of €149.95.

See the bundle All templates

The kits are organisational tools and a practical starting point. They do not constitute legal advice and do not guarantee compliance with the GDPR, the EU AI Act or any other law.