6 questions to know where you fall under the European AI Act and Spain's new AI Law.
I'll give you the risk category, the concrete obligations you have, and a
checklist of steps before 2 August 2026.
Does your AI system make or influence decisions about specific people?
For example: it screens CVs, decides credit limits, classifies customers, recommends medical treatments, grades students, decides who gets a service.
In which area does this decision apply?
This answer determines whether you fall into the high-risk category, which has strict obligations.
Does it do any of these things?
If you tick a single one of these, the system is prohibited. If not, we continue.
Does it generate content that will reach end users or interact with them?
Chatbots, conversational agents, text/image/video generation for campaigns, content published on the web…
Does the system process personal or sensitive data?
Health data, employment data, financial data, data on minors, specially protected data…
What size is your organisation?
This information adjusts sanctions proportionally and indicates the expected level of governance.
1 / 6
🔒 All processing happens in your browser. We don't collect data. There's no sign-up. You don't send anything to Petit Roig.