All articlesTopic · 4 articles

Data Compliance

15 min read·2026-07-21

What Does the EU AI Act Actually Require About Training Data?

The training-data-specific obligations in the EU AI Act, with article numbers and verified dates: GPAI training data summaries under Article 53, high-risk data governance under Article 10, who it applies to, and what the July 2026 Digital Omnibus changed.

Read the guide
15 min read·2026-07-20

Is It Legal to Train AI on Copyrighted Data? The Law in 2026

There is no single yes or no. A case-by-case breakdown of every landmark AI copyright ruling as of 2026, Thomson Reuters v. Ross, Bartz v. Anthropic, Kadrey v. Meta, NYT v. OpenAI, and Getty v. Stability AI, plus the US fair-use test, the EU's opt-out regime, and what it means for a startup deciding whether a dataset is safe to license.

Read the guide
14 min read·2026-07-10

Data Provenance & Consent for AI Training: The Legal Risks You Must Know

Why provenance is a hard gate for AI training data, not a nice-to-have: consent vs lawful basis under GDPR, HIPAA de-identification for clinical data, copyright and web-scraping risk, CCPA and other privacy laws, contractual warranties, and a due-diligence checklist.

Read the guide
15 min read·2026-07-03

Do You Need an AI Data Audit Before Training a Model?

What an AI data audit actually checks before a training or fine-tuning run: licensing chain-of-title, consent basis, PII and sensitive content, representativeness, and documentation. Why 2025-2026 litigation and regulation made it standard practice, plus a framework a team can run internally.

Read the guide