Using personal data to train AI under India's DPDP Act
AI teams in India need a lawful basis for every piece of personal data a model learns from. Public data, research and consent each work differently under the DPDP Act and Rules.
AI governance
ISO/IEC 42001, AI impact assessment and the EU AI Act, for teams building or deploying AI.
Implementing it? See ISO 42001 on QULDEX.
AI governance
AI system impact assessment under ISO 42001: a worked example
ISO 42001 asks you to assess how an AI system could affect people and society, not only your organisation. This worked example uses a CV-screening model.
AI governance
EU AI Act after the Digital Omnibus: what still applies in 2026 and what moved to 2027
The Digital Omnibus pushed the EU AI Act's high-risk rules to December 2027 and August 2028. Transparency duties did not move, and some already apply.
AI governance
ISO 42001: first steps for an AI management system
ISO/IEC 42001 applies management-system discipline to AI. If you already run an ISO 27001 ISMS, most of the scaffolding exists.