How the EU AI Act Impacts Your Organization

Do you use Artificial Intelligence? Here's how the EU AI Act affects your organization

Artificial Intelligence is already part of the processes, products, and services of many organizations. However, within the European Union, its use is no longer evolving solely in a technological landscape. The European Union Artificial Intelligence Act (AI Act) establishes a new legal framework that introduces obligations based on the type of AI system, its level of risk, and the role played by each organization.

And the AI Act is no longer a regulation of the future. Since August 2, 2026, the Regulation has become generally applicable, and both European and national authorities have begun exercising their supervisory and enforcement powers. Some obligations have already applied since 2025, while certain requirements related to high-risk AI systems benefit from additional transition periods.

This webinar is designed to help participants understand the AI Act from the ground up and translate its requirements into a practical roadmap for any organization that develops, markets, integrates, or simply uses Artificial Intelligence systems.

We will address compliance through three fundamental stages:

  • Identification and classification of AI systems, determining which AI solutions exist within the organization, what role the organization plays under the AI Act, and what level of risk applies to each system.
  • Applicability and gap analysis, identifying the regulatory obligations that apply and the differences between the organization's current situation and the requirements established by the Regulation.
  • Implementation and maintenance of compliance, establishing processes, responsibilities, controls, documentation, and evidence that enable the ongoing governance of AI systems and demonstrate compliance to third parties or regulatory authorities.

In addition, we will review the actual implementation timeline of the AI Act as of September 2026, distinguishing between requirements that are already enforceable and those that will apply at a later stage, including the updated deadlines established for certain high-risk AI systems.

What will you learn in this webinar?

  • What the EU Artificial Intelligence Act really is and which organizations it affects, including its structure, scope, and the different roles an organization may assume, such as provider, deployer, importer, distributor, or another operator within the AI value chain.
  • How to classify Artificial Intelligence systems under the AI Act, distinguishing between prohibited practices, high-risk AI systems, systems subject to specific transparency requirements, and general-purpose AI models, while understanding how such classification determines the applicable obligations.
  • Which AI Act requirements are already applicable in September 2026 and which will apply in the near future, reviewing the main regulatory milestones since 2025 and the implementation dates established for high-risk AI systems.
  • How to perform an applicability and gap analysis against the AI Act, identifying which obligations affect your organization and which areas require strengthening to achieve compliance.
  • Which processes, controls, and evidence are necessary to demonstrate compliance, including AI governance, risk management, documentation, human oversight, and continuous monitoring.

Fill out the form to register for the webinar

CAPTCHA
Esta pregunta es para comprobar si usted es un visitante humano y prevenir envíos de spam automatizado.

Who will guide us through the session?

Alberto Villar
Security Consultant
Computer Engineering graduate from the Autonomous University of Madrid, with an Erasmus exchange at the University of Helsinki, Finland. Throughout his career, he has earned certifications including PCI QSA, PCI SSA, PCI PA-QSA, PCIP, CISSP, CCSP, CSSLP, CISM, CSFPC, SFPC, and ISO 27001 Lead Auditor, reflecting his extensive technical expertise and commitment to information security best practices.

Since 2015, he has been part of Internet Security Auditors, where he designs and implements PCI certification projects (including PCI DSS and PCI SSS), as well as gap assessments, internal audits, migrations, and compliance adaptation projects related to regulations, frameworks, and industry standards. He also leads consulting services covering ISO 2700X, ISO 42001, ISO 22301, GDPR, DORA, NIS2, the EU AI Act (AI Act), CRA, NIST, CIS, risk analysis methodologies (MAGERIT, OCTAVE, CRAMM), PKI infrastructures, electronic signatures, TISAX, and the Spanish National Security Framework (ENS).

He has delivered numerous training courses, workshops, and mentoring programs on PCI DSS, ISO 27001, risk analysis, and secure software development, combining strong technical expertise with excellent communication skills to effectively transfer knowledge to audiences at all levels.