Home / Privacy, GDPR and your agents
Europe first
Built for European privacy expectations
Agentic AI touches personal data, decisions about people and systems that cross borders. We start from the questions European leaders ask first.
Data residency first
We ask where your data should live before anything is stored.
GDPR and UK GDPR in the design
Lawful basis, the fewest fields for the job, kept no longer than needed.
EU AI Act awareness
Dated notes on what applies when, refreshed from the briefing.
Human gates
A named person approves any consequential action an agent could take.
Questions a European leader asks
Five questions to start with
- What data can the agent see?
- Where is it processed?
- Who signs off?
- How can a person object or ask for their data?
- What do we tell staff and, where relevant, the works council?
UK and EU
Data protection, AI Act timing, works councils, sovereignty and where providers are based.
US
Speed to value, security review with counsel, the patchwork of state laws, human approval for money and irreversible actions.
What this is
A fractional Chief Agentic Officer who helps you prepare with your DPO and lawyers.
What this is not
Legal advice, or a promise of compliance.
Dated regulatory note
EU AI Act: AI literacy duty since 2 February 2025; most rules apply from 2 August 2026. Checked 17 October 2026.
Talk to us
“I want to talk to you about how I could get someone to help me put together or help me understand what this means”
If that sounds like you, you are in the right place. Tell us a little about where you are. A real person reads every message.