Tool · Law 25

Does your use of AI comply with Law 25?

10 questions about how your organization uses AI with personal information. Awareness, not legal advice.

Your answers never leave your browser.

1. Do you know which AI tools your employees actually use?

Yes, up-to-date inventory Partially No

2. Do internal rules govern what can go into a prompt?

Written, communicated policy Informal guidelines None

3. Can personal information (clients, employees) end up in your AI tools?

No, prohibited or anonymized Possibly, without controls Yes, regularly

4. Do you know where the data processed by each AI tool is hosted?

Yes, for every tool For some No

5. Was a PIA (privacy impact assessment) completed before deploying an AI tool that processes personal information?

Yes In progress or partial No, or I do not know

6. Is someone formally responsible for the protection of personal information?

Yes, designated and known to all Designated, but unclear role No

7. Are individuals informed when a decision affecting them relies on automated processing?

Yes, or no automated decisions Not systematically No

8. Do your agreements with AI vendors cover confidentiality and data location?

Yes, verified Standard contracts, unverified No, or I do not know

9. Do you keep a confidentiality incident log and a response plan?

Yes Partial No

10. Have your employees been trained on responsible AI use and data protection?

Yes, structured training One-off awareness No

See my result