Is the AI you use with client data already Act-fit?
The EU AI Act brings new requirements that take effect from 2 August 2026. For insurance and finance advisors specifically, we've built a short self-check on the EU AI Act and GDPR:
- 14 questions for orientation
- Anonymous: nothing is stored, no email address required.
- Direct feedback: uncover potential gaps in how you use tools like ChatGPT or Copilot — and in how your data is processed.
Please note: an 'Unsure' counts as a gap worth knowing about. This check is general orientation and does not replace legal advice.
Take a moment for your personal status check.
How you use AI
Where your client data goes
Your clients & your paperwork
Please note: the following is general orientation only, not legal advice. The AI Act was amended by the EU “Digital Omnibus” package, adopted 29 June 2026 and taking effect 2 August 2026. For a legal review of your specific situation, we recommend consulting a qualified advisor.
The honest version
For an advisor using AI to draft and organise work — with a person reviewing before anything goes out — the AI Act treats this as low-risk. Your real duties are three:
- AI literacy — making sure your team can use the tools responsibly. A legal duty since February 2025.
- Transparency — where a client interacts directly with an AI, tell them. Applies from August 2026. (Marking AI-generated content is mainly the AI vendor's job, not yours.)
- GDPR — the big one, whenever client data is involved: a lawful basis, a data-processing agreement with your AI vendor, and no fully-automated decisions about people. A person in the loop satisfies that last one.
The high-risk rules — for AI that actually scores creditworthiness or prices life and health insurance — were postponed to December 2027, and don't apply to ordinary drafting and document work at all.