European Union · Greece
AI Governance. From Readiness to Compliance.
AI readiness today. Responsible AI governance for the future.
Navigating the Future of AI with Legal Confidence
Artificial intelligence is rapidly becoming embedded in everyday business operations. For organisations, the challenge is no longer simply whether to adopt AI, but how to deploy and use it lawfully, securely and responsibly.
C. Pelekis Law Firm provides end-to-end legal support for AI readiness, governance and EU AI Act compliance, helping organisations identify and manage legal and regulatory risk throughout the entire AI lifecycle, from the initial selection and procurement of AI systems to their implementation, governance and ongoing monitoring.
From AI discovery and risk classification to implementation, documentation and ongoing governance, we provide a single legal framework for managing AI across the organisation.
Where the Law Stands Today
The AI Act’s timeline changed in July 2026. Obligations for high-risk AI systems have moved to 2 December 2027 for systems classified under Article 6(2) and Annex III, and to 2 August 2028 for systems classified under Article 6(1) and Annex I, including AI systems embedded in regulated products.
Other obligations are already in force: the AI literacy duty since February 2025, the transparency requirements of Article 50 since August 2026, while certain additional prohibited practices take effect in December 2026. Administrative penalties have been enforceable since August 2026.
Much of the published guidance on the AI Act was written before these amendments. Organisations relying on it risk preparing for obligations that no longer apply on the previously anticipated timetable, while overlooking those that already do.
Every engagement therefore begins by establishing which obligations bind your organisation now, which arrive later, and what must be evidenced in the meantime.
- What We Offer
Our AI Legal Services
• Corporate AI readiness and legal risk assessments
• Mapping and inventory of AI systems across the organisation
• Determination of the organisation’s role under the EU AI Act
• Classification of AI systems according to their regulatory risk
• Identification of prohibited, high-risk and transparency-related AI practices
• Development and implementation of internal AI governance frameworks and policies
• AI literacy and training programmes for management and employees, an obligation that is already in force
• Review of AI procurement, vendor agreements and contractual allocation of risk
• Human oversight, accountability and internal reporting procedures
• Transparency, documentation and record-keeping requirements
• Alignment with data protection, cybersecurity, intellectual property, employment and consumer protection requirements
• Legal review of generative AI use, AI-generated content and intellectual property risk
• AI due diligence in corporate transactions, investments and acquisitions
• Preparation for regulatory enquiries, audits, incidents and corrective actions
- Lawyer-led. Technology-enabled. Continuously monitored.
AI Governance & Compliance Programme
• Create and maintain a central register of AI systems
• Screen and classify AI applications according to their regulatory risk
• Identify responsibilities as provider, deployer, importer or distributor
• Generate tailored compliance actions for individual AI systems
• Assign responsibilities, deadlines and approval workflows
• Maintain required policies, assessments and supporting documentation
• Record human oversight measures, incidents and corrective actions
• Monitor implementation and compliance through a central dashboard
• Maintain an organised audit trail and evidence of accountability
• Review and update compliance as AI systems, regulatory requirements and business uses evolve
What Your Organisation Receives
Each engagement produces a defined and durable set of records rather than a single advisory report:
A register of AI systems, each with its owner, purpose, regulatory role, risk classification and current status
• A role determination for each system, as provider, deployer, importer or distributor, with the supporting reasoning retained
• A classification record for each system, documenting the basis on which it was assessed
• A system-level action plan with named owners, deadlines and approvals
• The corresponding policies, notices and internal procedures
• A continuous log of human oversight measures, incidents and corrective actions
• A management dashboard and an evidence pack that can be produced for a competent authority, a client or an auditor
The platform is operated under the firm's control. Client information is hosted within the European Union, segregated by client, covered by legal professional privilege, and is not used to train any artificial intelligence model.
- How it works
From Assessment to Ongoing Governance
Our approach is designed to move beyond a one-off legal assessment. The programme can support organisations throughout the full compliance lifecycle:
AI Discovery & Mapping
Identification and mapping of AI systems and use cases across the organisation.
Legal Risk Assessment & Classification
Assessment of the organisation’s regulatory role and classification of AI systems and practices according to applicable requirements.
Compliance Implementation
Development of the policies, procedures, contractual arrangements, documentation, human oversight mechanisms and internal responsibilities required for effective compliance.
Ongoing Governance & Monitoring
Continuous review of AI systems, compliance actions, incidents, documentation and regulatory developments as the organisation’s use of AI evolves.
- Who We Advise. How We Work.
AI Governance Beyond Compliance
A comprehensive legal approach to responsible AI adoption, tailored to your organisation.
Who We Advise
Our AI governance and compliance services are designed for organisations that develop, procure, integrate or use artificial intelligence in their operations, products or services. We advise companies and organisations across sectors, including financial services, hospitality and tourism, real estate, technology, retail, professional services and other regulated or data-intensive industries. The programme can be adapted to organisations at different stages of AI adoption, from businesses beginning to identify informal employee use of generative AI to organisations deploying AI systems across multiple functions and jurisdictions.
Lawyer-Led. Tailored to Your Organisation.
Each engagement is led by our legal team and tailored to the organisation's activities, sector, use of AI and individual risk profile. The digital compliance platform provides the structure, efficiency, visibility and continuity required for effective AI governance. Our lawyers provide the legal interpretation, validation and strategic advice necessary to ensure that the compliance framework reflects the organisation's actual legal obligations and business environment. Technology enables the compliance process to be managed more efficiently. Legal judgement remains at its core. The result is not simply a compliance report, but a practical and ongoing AI governance framework designed to help organisations manage legal risk, demonstrate accountability and integrate artificial intelligence responsibly into their operations.
Beyond the AI Act
AI governance rarely involves the AI Act alone. Our advice considers the wider legal framework applicable to an organisation's use of artificial intelligence, including data protection and GDPR, cybersecurity, intellectual property, employment, consumer protection, contractual liability and sector-specific regulation. This broader approach helps ensure that AI governance is integrated into the organisation's existing legal, risk and compliance framework rather than treated as a standalone regulatory exercise.
Regulatory Exposure & Accountability
Administrative fines under Article 99 of the AI Act reach EUR 35 million or 7% of total worldwide annual turnover for prohibited AI practices, EUR 15 million or 3% for most other obligations of providers and deployers, including transparency requirements, and EUR 7.5 million or 1% for incorrect or misleading information provided to a competent authority. For small and medium-sized enterprises, the lower of the applicable percentage or fixed amount applies. Fines must be proportionate. Documented governance, evidenced human oversight and a complete audit trail are relevant to how an authority assesses an infringement and its consequences. This is the practical reason to treat AI Act compliance as a recorded and continuing process rather than a one-off opinion.
Starting Point: AI Discovery
Most organisations begin with a defined initial engagement: AI Discovery & Mapping. This involves mapping AI systems and use cases, determining the organisation's regulatory role and classifying each system, delivered as a working register with a prioritised action plan. It establishes what applies, what does not, what requires immediate attention and what the organisation needs to do next.
“Artificial intelligence is transforming the way businesses operate. The role of the law is not to stand in the way of innovation, but to provide the clarity, accountability and legal certainty that allow it to advance responsibly.”
Charalampos Pelekis | Managing Partner
- Start with AI Discovery & Mapping
Identify your AI systems. Establish your regulatory position. Define your compliance priorities.
Contact us to discuss the scope and timing of your organisation’s AI readiness and compliance programme.
Phone
+30 2107238777
+30 6985774737
E mail
Location
27 Vasilissis Sofias Avenue
Kolonaki | Athens | Greece
