EU AI Act & Privacy Compliance for an Early-Stage Startup
Leading AI compliance and GDPR implementation for 82DASH — from policy drafting to data mapping, consent management and cross-functional AI awareness training.
Context
82DASH, a Berlin-based startup, needed to align product features and internal workflows with the EU AI Act and multiple privacy regimes including GDPR, UK GDPR and CCPA — all while moving at startup speed with limited legal infrastructure.
Approach
Led end-to-end AI compliance and EU AI Act implementation. Drafted and rolled out Privacy Policy, DPA and Terms of Service. Designed click-through DPAs, conducted data mapping and supported consent management and third-party risk assessments for AI tools. Delivered privacy and AI-awareness training to cross-functional and non-legal teams, and collaborated on AI-based risk assessment tools for user-generated content and tracking.
Outcome
The startup established a compliance-ready foundation covering multiple jurisdictions, with documented policies, operational privacy workflows and a team equipped to make informed decisions about AI features and third-party tools.