EU AI Act Explained: Turning Compliance into Competitive Advantage | Carme Artigas

30 minutesAdvancedStrategicMSP GLOBALAI Safety & Data Privacy

MSP GLOBAL. Carme Artigas chaired the Council negotiations that produced the AI Act, and here she explains it to managed service providers — the companies SMEs actually buy AI through. She walks the phased timeline, from the August 2025 GPAI code of practice to the August 2026 conformity-assessment deadline, and the concrete obligations that follow, such as requiring compliance documentation from vendors. That is the same inventory, vendor-evidence and ownership work the article turns into an operating plan.

AI Expert note

A negotiator's keynote gives you intent and timeline, not legal advice. Verify current dates, obligations and any timeline adjustments against the latest EU and Estonian guidance before changing policy.

What you should get from this

Map the Act's phased 2025-2027 deadlines to the vendor-evidence and ownership tasks an SME must schedule now.

Watch or know first

Basic awareness of which AI systems your business runs or buys and of the Act's risk-based approach.

Last reviewed: Jul 20, 2026

Watch next

Continue through the same learning path with the next curated companion videos.

Take it further

Hand-picked external courses that go deeper on this topic.

AWS Skill Builder

AWS Security: Securing Generative AI on AWS

AWS Training and Certification

A cloud-vendor-specific complement to the Macquarie specialization: AWS's own Generative AI Security Scoping Matrix, OWASP Top 10 for LLMs, and MITRE ATLAS, walked through governance, legal, and compliance controls for five different AI deployment scopes — from consumer apps to self-trained models. Not GDPR-specific, but a genuinely practical advanced pick for teams whose AI workloads actually run on AWS and need concrete data-governance and compliance controls, not just theory.

Advanced~2 hours · self-paced (9 modules)
Coursera · Macquarie University

Cyber Security: Data, Privacy and AI Security

Macquarie University Cyber Security Hub faculty

The advanced, most explicitly on-target answer to our GDPR × AI gap: a three-course specialization from Macquarie University's Cyber Security Hub that goes from GDPR/CCPA fundamentals and privacy-by-design, through privacy impact assessments, to a dedicated third course on securing AI systems against adversarial attacks and model leakage. Genuinely bridges 'GDPR compliance' and 'AI security' rather than treating them as separate topics.

Advanced~47 hours · self-paced (3-course specialization)
EU Digital Skills & Jobs Platform · CyberSuite

Secure AI Adoption for SMEs: Cybersecurity and the EU AI Act

CyberSuite

The rare AI Act course written for the companies the Act actually reaches: SMEs adopting AI, not the labs building it. Hosted on the European Commission's own skills platform, it pairs the legal side — roles, obligations, risk classification — with the security side (prompt injection, data leakage, supplier due diligence) that most compliance courses skip. For an Estonian SME deploying AI, this is the practical starting point.

Advanced~15 hours · self-paced

See all courses for AI Safety & Data Privacy