EU AI Act + GDPR

AI Workplace Policy Pack: clear rules for AI at work.

Since February 2025 the EU AI Act expects every business that uses AI to support the AI literacy of its staff, and the GDPR applies as soon as personal data goes into a prompt. This pack gives you clear rules and the paper trail to show what you did.

Price
€29.99
Formats
Notion template or Word, Excel & PDF
Languages
EN, DE, NL, ES, HR — country editions adapted to national law
Access
Instantly after purchase, one-time payment
AI Workplace Policy Pack

EU AI Act + GDPR

What's in the kit

  • AI Use Policy template — approved tools, data rules, prohibited uses, human review, training and incidents, ready to adapt
  • Staff Quick Guide — a one-page summary for everyone, with a simple traffic-light rule for data
  • Employee Acknowledgment form — print or send for signature
  • AI Tool Requests — request, review and approve each AI tool for a defined purpose
  • Training & Acknowledgment Log — evidence of acknowledgments and AI literacy training
  • Guide — the EU rules at a glance and the national rules for works councils and employee representatives

The rules it covers

  • AI literacy (Art. 4 AI Act)

    Businesses must take measures so that staff using AI understand how to use it and its risks. A written policy plus training is the most common way to show it.

  • Personal data in prompts

    The GDPR applies to anything personal that staff type into an AI tool. The policy's traffic-light rule tells staff what may and may not go in.

  • Employee participation

    In several countries, introducing tools that can monitor staff requires involving the works council. The national editions cover the local rules.

Made for

  • Employers of any size whose staff use AI
  • HR managers
  • Managing directors
  • Works councils and employee representatives

Two editions, same price

Choose how you want to work. Content and price are the same.

Questions about this kit

Do we need an AI policy if we are a small team?
No law says “write a policy”, but the AI Act's literacy duty and the GDPR both require you to be able to show what you did. A short written policy with signed acknowledgments is the simplest proof.
Do we have to involve the works council?
That depends on the country. In Germany, for example, introducing technical tools that can monitor performance usually needs the works council's agreement (§ 87(1) no. 6 BetrVG). The guide in each country edition explains the local rules.
Can we ban AI tools completely?
You can, and the policy template lets you list prohibited tools and uses. In practice, a short list of approved tools with clear data rules works better than a ban staff work around.

Other kits

Templates

Need more than one kit?

This kit is part of the EU Compliance Bundle: all five kits for €69.99 instead of €149.95.

The kits are organisational tools and a practical starting point. They do not constitute legal advice and do not guarantee compliance with the GDPR, the EU AI Act or any other law.

Privacy settings

This website does not use analytics, advertising or tracking cookies, and it loads no third-party fonts or scripts. There is nothing to consent to.

Strictly necessaryAlways active
AnalyticsNot used
MarketingNot used

If you choose a language, it is remembered in your browser's local storage so the site opens in that language next time. It is never sent to us.

No language preference stored.

Read the cookie policy