Fenella RauscherLaw & AI
Home

For executives

Governing AI in your company: obligations, policy and data

For executives, HR and managers: know your obligations, write an AI use policy, know when to disclose AI-generated content, and protect your data.

Executive chair in front of a marble desk. AI-generated image.

Who is it for?

Target audience
Executives, HR, managers, DPOs and GDPR leads, people who choose software.
Prerequisites
None.

What are the objectives?

By the end of the training, each participant will be able to:

  • State the obligations of a company that uses AI
  • Identify prohibited and high-risk uses, particularly in HR
  • Choose the form of the AI use policy, and roll it out
  • Know when to disclose that content comes from AI
  • Set what teams may enter into an AI tool

What is the programme?

Already using AI? Choose the half day (4 hours): your obligations, the AI use policy, labelling AI-generated content, and your data.

New to AI? Choose the full day (7 hours). In the morning, you learn to use AI on your own tasks. In the afternoon, we cover your obligations, the AI use policy, labelling AI-generated content and your data, then you start your policy and your action plan.

  1. 01

    What the company must do

    Your obligations when your teams use AI: the AI Act, the GDPR, French employment law.

    See details
    • Provider or deployer: your role under the AI Act
    • Prohibited practices
    • High-risk uses in HR: recruitment, assessment, monitoring
    • Training employees in AI: what the AI Act requires of the company
    • Informing employees, consulting the works council (CSE)
  2. 02

    The AI use policy

    What it contains, what form to give it, how to get people to read it.

    See details
    • Approved tools, prohibited data, checks
    • Good-practice guide, internal memo or annex to the company rules (règlement intérieur)
    • Rolling it out so that it is actually read
    • Having it reviewed by a lawyer before making it binding
  3. 03

    Do you have to say AI made it?

    What the AI Act requires, and the cases where other rules demand it.

    See details
    • Chatbots, realistic images or videos, texts that inform the public
    • An email or internal document written with AI: what obligations?
    • Contracts, commercial practices, internal policy: other sources of obligations
    • Exercise: ten real-life cases to classify
  4. 04

    Data

    The risks of shadow AI, and what your teams may enter depending on the tool and its contract.

    See details
    • Shadow AI: personal tools used for work, without authorisation
    • What it exposes: customer data, trade secrets, the company’s liability
    • Three situations: direct input, software with built-in AI, a custom tool
    • What the data processing agreement (DPA) covers, and what it does not
    • A simple checklist for teams

I am a legal professional, and I know how AI works, not just its rules: how a model produces an answer, why it makes mistakes, where the data you give it goes, what the supplier’s contract provides. I work with these tools every day and set them up myself. So I translate the AI Act and the GDPR into concrete instructions for your teams: which tool to use, which data to enter, what to check.

The training remains general information. For advice on your company’s specific situation, or to have your policy reviewed, I refer you to a lawyer I trust.

What do you take away?

  • My AI and GDPR checklist
  • An AI use policy template to complete
  • A “should AI be disclosed?” checklist
  • The course materials as a PDF
  • 7-hour version: the first rules of your policy and the action plan, started during a hands-on session
  • A certificate of completion

How does the training work?

  • Short presentations, with the official texts
  • Diagrams to map out roles and responsibilities
  • Exercises on real-life cases

How is learning assessed?

  • Pre-training questionnaire on level and expectations
  • Exercise: ten real-life cases to classify
  • Knowledge quiz and satisfaction questionnaire at the end of the training
  • Follow-up questionnaire three months later, for participants and the company

How do I enrol?

A 20-minute preliminary call, a questionnaire on your needs and the participants’ level, then a quote and a training agreement.

Before the training: a short questionnaire on each person’s level and expectations. I adapt the programme to the answers.

Equipment: one laptop (or a tablet, depending on the course) per participant, supplied by the company or their own. The room: on your premises, with a screen; otherwise, I book an external room and its cost is shown on the quote.

Lead time: Without funding: 1 to 2 weeks after the quote is accepted. With a funding application: at least one month.

Funding: your OPCO (a French training funding body) may cover all or part of the course, but this is not automatic; it depends on its rules. Your company applies before the training.

Route to BusinessI work under the Qualiopi certification of my partner Route to Business.

The training can be adapted for people with disabilities. Let me know your needs before enrolling. Disability officer: Fenella Rauscher (contact@fenellarauscher.com).

Applicable training rules
Updated on 24 October 2026

Where to start?

The simplest way is to talk it through. The call takes 20 minutes, is free and there is no obligation.

Book a 20-minute call