Free PDF guide

C-Level Guide: the AI Act and GDPR for business leaders.

A condensed strategic guide - no legal jargon. What the board needs to know about the AI Act after the Digital Omnibus and about the GDPR in AI projects, in a 20-minute read. Law as of September 2026.

What's inside?

  • Why this is a board topic - turnover-based fines, directors' liability and questionnaires from clients.
  • The AI Act in a nutshell - roles (provider or deployer), four risk buckets and AI literacy after the Digital Omnibus change.
  • The timeline to 2028 - what already applies, what Regulation 2026/1744 postponed and who supervises AI in Poland.
  • Obligations of a company using a high-risk system - eight points from Article 26, the FRIA and the right to an explanation.
  • The GDPR in AI projects - legal basis, Article 22, DPIA, contracts with AI vendors and Shadow AI.
  • A 90-day plan and a checklist - twelve questions for your CTO and legal team for the next board meeting.

Get the guide

Enter your email address - we will send you a link to the PDF straight away.

The controller of your data is Lex&Roll Kancelaria Radcy Prawnego Marek Kozica (hello@lexandroll.pl). We process your email address and first name to send you the guide (Article 6(1)(b) GDPR) for 12 months after sending and, if you tick the box above, to send the newsletter until you withdraw consent (Article 6(1)(a) GDPR). Recipients: Google (Google Workspace) and Cloudflare (Turnstile spam check). You have the right of access, rectification, erasure, restriction, portability, objection, withdrawal of consent and to lodge a complaint with the Polish supervisory authority (UODO). Details: Privacy Policy and Terms.