AI and the rules

Self-check

Your score stays on your own device.

1. Two companies use AI. One sorts incoming invoices, the other ranks job applicants. Why are the rules stricter for the second?

   • Judging applicants is a bigger risk for people
   • Recruitment software costs more than invoice software
   • The second company is probably the larger one
   • Personal data alone makes it high risk

2. Your company plans four AI projects. Which one lands in the high-risk class?

   • AI that reads every invoice in your books
   • AI that drafts sales forecasts for the board
   • A chatbot that answers customer questions
   • AI that pre-selects job applicants

3. A manager says: 'For AI literacy, everyone needs a certificate.' What is true?

   • Yes, one per employee, renewed every year
   • No. The law asks for measures that fit each role
   • Yes, but only for managers who approve AI use
   • No, a signed AI policy per employee is enough

4. Your managing director and your planners both use AI. How much training does each need?

   • The fixed number of hours that the law sets
   • Only the planners; the director types no prompts
   • It depends on what each one does with AI
   • The same course for everyone, so it is fair

5. An employee writes a client email with a private chat account. What is missing in any case?

   • Nothing, if the chat history is switched off
   • A processing agreement with your company
   • Nothing, as long as it is the paid version
   • Only the EU region; the rest is covered

6. A supplier says: 'We are EU-hosted.' What do you still check?

   • Training on your data, and the agreement
   • Nothing more: EU hosting covers the GDPR
   • Only whether the supplier is really a European company
   • Only whether the data centre holds a certificate

7. A supplier offers AI that 'tracks staff productivity'. What do you ask before anything else?

   • Is it hosted in the EU? Then privacy is covered
   • Does it come with an AI literacy training?
   • Is there a DPIA, and what does it decide about people?
   • Can we test it on one team first, before any paperwork?

8. Someone says: 'At minimal risk you can skip the approval step; the AI Act does not ask for it.' What is true?

   • Not true: the AI Act requires approval on every AI step
   • Not true: the AI Act has no minimal-risk class
   • True, so leaving it out is the sensible choice
   • Not required by the AI Act, still your best protection