AI Governance
Choose, contract and control the AI you use.
- Negotiation support with AI labs, alongside your counsel
- Governance for self-hosted AI
- ISO/IEC 42001 and NIST AI RMF cross-referencing
- AI literacy training tailored to your teams
AI governance consulting.
Hands-on advice on AI and privacy governance for financial institutions, public institutions and businesses. Based in Luxembourg, working across the EU.
Services
Run as one framework, so nothing gets done twice.
AI Act
Know which rules apply to each system, and from when.
- AI inventory and risk classification
- Provider or deployer role mapping
- Transparency and AI content marking
- Regulatory watch
GDPR
Run the privacy programme your AI depends on.
- DPO as a service
- DPIA and PIA
- Records of processing
- Privacy notices and data subject requests
AI Governance
A licensed model from an AI lab, or one you host yourself? Both can work. They need different safeguards.
AI Act
Where does your AI system sit? A few questions based on the banned practices in Article 5 and the high-risk uses in Annex III. It takes about a minute.
Key dates
- Banned practices apply (Article 5)
- Duties for general-purpose AI models apply
- Transparency duties apply (Article 50). Commission enforcement of model duties starts
- Marking deadline for generative AI already on the market
- High-risk rules for Annex III uses apply
- High-risk rules for AI in regulated products (Annex I) apply
GDPR
Most AI runs on personal data. Where yours does, the GDPR applies alongside the AI Act. Four questions give you the list of what to have in place.
About Marcell Szikszai
Self-employed AI governance and privacy consultant in Luxembourg.
From senior management at the EU institutions to ministry-level officials and C-level executives in financial institutions and other businesses, I give hands-on advice on AI and privacy governance.
I help financial institutions, public institutions and businesses use AI in a way they can explain to their board, their customers and their supervisor. A bank scoring credit, a ministry buying an AI tool or a fintech launching a chatbot are typical examples.
I was Group Data Protection Officer of a Luxembourg bank with more than three million customers, where I set up its first AI governance framework and co-founded its AI Working Group. At the European Commission I held three data protection roles, advised senior management and presented to an expert group of 23 Member States at ministry level. More recently I advised a large technology company on its agentic AI policies.
I am a former PhD researcher in data protection law at the University of Miskolc. I write Digital Agora, a newsletter on AI governance and privacy.
Certifications and training
- CIPMCertified Information Privacy Manager (IAPP)
- AIGPArtificial Intelligence Governance Professional (IAPP)
- ECPC-AICertified AI Trust and Privacy Officer, Maastricht University
- BlueDot ImpactFrontier AI Governance and AGI Strategy courses
Recognition
- Member of the EDPB Support Pool of Experts
- National excellence award for lawyers, Ministry of Justice
- Speaker and published author, IAPP
How I work
Speaking and 1:1 consulting
A talk for your audience, or direct advice on your question.
- Keynotes and panels on AI governance and privacy
- Workshops for boards and management teams
- 1:1 consulting sessions
- Ongoing advice on call
In personIn Luxembourg
RemoteBy video call, wherever you are
Book a call
Thirty minutes to talk through your AI or privacy question, and how I can help.
Your check result
Book a call
Opens my calendar in a new tab.
Prefer email?
Write to marcell.szikszai@digitalagora.eu, or use this form.