AI Governance, GDPR & Regulatory Advice
Altura provides AI legal advice and governance support for businesses introducing AI tools or developing AI-enabled products. Services include EU AI Act readiness assessments, AI policy development, supplier contract reviews and Microsoft Copilot governance.
Altura also provides GDPR compliance advice to technology businesses in Iceland and internationally, and fintech regulatory advice on payments-related legal requirements. Advice is given as assessment and readiness support; it does not replace your own compliance decisions.
When this support is useful
You may need advice when introducing AI tools, developing an AI-enabled product, reviewing personal data processing, entering a new market or responding to requirements from regulated customers.
How Altura can help
AI governance and EU AI Act readiness
- Review AI use cases and assess relevant roles and obligations.
- Prepare internal AI policies, approval processes and human oversight arrangements.
- Assess AI supplier terms, confidentiality and data use.
- Provide practical guidance and workshops for staff and management.
GDPR and data protection
- Review processing activities and prepare records of processing.
- Support data protection impact assessments (DPIAs).
- Draft privacy notices and carry out data processing agreement review.
- Assess processors, subprocessors and international data transfers.
- Clarify responsibilities and procedures for data protection incidents.
Fintech regulation and DORA
- Provide fintech regulatory advice, including payments-related legal requirements relevant to your business and customer relationships.
- Carry out DORA ICT contract review where relevant, and advise on contractual requirements affecting technology suppliers.
- Identify gaps in governance, documentation and internal responsibilities.
- Prepare a proportionate implementation plan.
What you receive
Depending on scope, deliverables may include a written assessment, a prioritised action plan, AI or privacy policies, processing records, contract amendments, supplier review findings and staff guidance.
Frequently asked questions
Can Altura help us introduce tools such as Microsoft Copilot or ChatGPT?
Yes. Microsoft Copilot governance and similar work can cover permitted uses, data handling, supplier terms, internal approval and staff guidance.
Do all AI tools create the same legal obligations?
No. The assessment depends on the system, its intended use, your role and the relevant jurisdiction.
Can a regulated customer’s requirements affect us as a technology supplier?
Yes, although not every technology supplier is directly subject to DORA. Financial-sector customers may request contractual, security and governance commitments. Altura can help distinguish legal obligations from customer requirements and assess what your business can reasonably commit to.
Discuss your AI or regulatory project
Email hello@altura.is with a short description of the product or tool, the issue you need to address and the markets or customers involved.
Discuss AI, privacy or regulationRelated services: SaaS and technology contract advice · SOC 1, SOC 2 and ISO 27001 readiness