Artificial intelligence (AI) is rapidly finding its way into companies and public administrations. However, the use of modern AI systems – whether via internet services or on-premises in your own data center – gives rise to considerable legal, technical and organizational requirements.
As an IT planner and publicly certified expert, I have therefore undergone extensive further training and successfully passed the AI Privacy Expert (GDDcert. EU) exam on April 10, 2025. The demanding training program, carried out by the GDD – Gesellschaft für Datenschutz und Datensicherheit e.V. – covered the following key topics, among others:
– EU AI Regulation (KI-VO): Structure, areas of application, risk classification and specific obligations
– Interaction between GDPR and AI Regulation: Rights of data subjects, consent, legal bases
– Technical and organizational measures (TOMs): Filters, access concepts, logging, control of system usage
– Differences between AI from the cloud and own AI infrastructure (on-premises)
– Special issues for public bodies: Fundamental rights assessments, documentation requirements, role of the AI officer
Why this topic is so important for my customers
Whether municipality, state authority or medium-sized company: The use of AI is not just a technical decision, but also entails complex legal obligations. It becomes particularly critical when personal data is processed or decisions are influenced by AI systems – which is the case in many use cases.
It also makes a difference whether a company uses services such as ChatGPT or Copilot as a cloud service or whether it uses its own, internally operated AI solution. Depending on the operating model, different rules, inspection obligations and technical requirements apply.
My offer
I support you in the well-founded evaluation of your AI projects – from the selection of suitable tools to data protection impact assessments (DPIA) and support during implementation. As a certified AI privacy expert and IT expert, I bring both the regulatory and the technical perspective to the table.
I would be happy to advise you on your specific deployment scenario – neutrally, comprehensibly and tailored to your organization.
Best regards
Rainer Burkert
btq.consulting – IT-Ingenieurbüro und ö.b.u.v. Sachverständiger für IT-Hardware, insbesondere Netzwerke
