AI academy Intensive track - AI Governance for Organisations: Principles, EU Law, and HR in Practice

Most organisations now use AI, but few have decided how they will govern it. This full day, for AI Academy participants who already work with AI tools, builds that decision in three connected steps.

We begin with AI governance as good practice — the foundations any organisation needs even where no specific law yet applies: policy architecture, risk appetite, clear roles and accountability, and how AI governance reshapes data governance, data management and privacy policies.

We then turn to the governance the law requires: the EU AI Act risk pyramid (prohibited, high-risk, limited, minimal), the duties it places on organisations that deploy AI, the 2026 milestones, and how the GDPR and national law interact with it.

The final third makes this concrete through HR — a function that can be minimal-risk or high-risk depending on the use case. We show high-value, lower-risk uses; dissect a talent-acquisition tool built the wrong way; and, drawing on the trainer's current work advising a live high-risk system, show the real effort a fully compliant Annex III deployment demands. The same challenges face anyone architecting high-risk AI, including in regulated sectors such as finance.

Participants leave able to frame an AI governance position, separate good practice from legal obligation, and recognise when a use case crosses into high-risk territory.

• AI governance as good practice: policy architecture, risk appetite, roles and accountability — and its knock-on effects for data governance, data management and privacy policies
• Governance required by law: the EU AI Act risk pyramid and deployer obligations, the 2026 milestones, and how the GDPR and national law interact
• HR as a worked example: high-value, lower-risk uses across recruitment, performance management and beyond
• When HR turns high-risk: the anatomy of a talent-acquisition system built the wrong way (Annex III, Article 6)
• What full compliance really takes: lessons from advising a live high-risk system — and why the same challenges face any high-risk build, including in finance

By the end of this training, the participant will be able to:

• Frame a one-page AI governance position for their own organisation — naming who is accountable, the core documents needed, and a clear statement of risk appetite
• Classify an AI use case against the EU AI Act risk levels, work out whether they are a provider or a deployer, and name the obligations that follow
• Tell effective governance from “governance theatre”, and justify a layered set of controls that actually holds
• Evaluate a high-risk HR AI deployment against what a genuinely compliant high-risk system requires, and trace one legal duty all the way through to the evidence that proves it
• Transfer the method to a high-stakes system in their own sector — including finance — and leave with a scoping note and a first concrete action

Designed for an audience already familiar with AI tools. Each of the three parts pairs concise trainer-led input with applied work on realistic scenarios drawn from practice; the day builds towards participants framing a governance position and classifying use cases by risk. No legal background required.