Data governance has become a key concern for companies, especially when the EU AI Act and General Data Protection Regulation (GDPR) have put a premium on handling data responsibly and ensuring that artificial intelligence does not cause harm.

Both pieces of legislation spell out what companies need to do to comply with responsible AI use–but not necessarily how to do it. And while some activities may be deemed “high risk,” they are not banned.

Neil Hodge is a freelance business journalist and photographer based in Nottingham, United Kingdom. He writes on insurance and risk management, corporate governance, internal audit, compliance, and legal...