Wizard — topics to discuss with counsel

This wizard collects no personal data. Your answers are encoded into the URL hash; the resulting URL is shareable and reproduces the same checklist. The output is framed as topics to discuss with counsel for your jurisdiction — not a tailored compliance checklist, not legal advice.

1. Are you the provider or the deployer of the AI system?

Provider — we build / put it on the market Deployer — we use it under our authority Both — we build and deploy it ourselves

2. Which jurisdiction's law primarily applies?

European Union (EU AI Act + GDPR) United Kingdom (UK GDPR + ICO guidance) United States (federal — NIST AI RMF, sector-specific rules) United States — state law in scope (e.g., Colorado AI Act) APAC (Japan/Singapore/Australia — voluntary frameworks dominant) Global / mixed — multiple jurisdictions

3. What is the system's risk tier?

High-risk (EU AI Act Annex III, or equivalent context) Limited risk (transparency obligations only) Minimal risk (no specific obligations) Unsure — need to classify

4. Does the system take actions in the world (send emails, place orders, modify files), or only produce predictions/text?

Agentic — it acts Predictive — outputs only

5. Does the system process personal data, health data, biometrics, or other sensitive categories?

Yes — including special-category data (health, biometrics, beliefs, etc.) Yes — personal data, not special-category No — non-personal data only

See topics Reset