Shadow AI and the fine for panicking

What actually happens when your team uses AI to write a blog post, a tender or a report, and does the law now care? Alan Thornton, founder of the AI governance platform Tipcan Solutions, joins Maryrose Lyons to make the EU AI Act genuinely usable for built environment professionals.

Alan walks us through the the latest requirement in EU AI Act compliance that is labelling. If you're using AI and sharing certain types of text content now you must label it, but not all content. A general design blog is fine. A glowing piece about a local councillor is not, unless a named human takes responsibility for it. That idea, that every firm must have real accountability runs through the whole conversation.

From there: shadow AI and where the risk really hides, how to properly inventory your AI use cases, and the fines that now apply, including a sneaky second one for handing a regulator incomplete information in a panic. Alan and Maryrose also get into what 'high risk' means once CE marks and national sandboxes enter the picture, and why Ireland's oddly fragmented approach to enforcement is worth watching.

Practical, occasionally very funny, and refreshingly free of scaremongering.

Show notes:

Shadow AI, and why the biggest risk is often the staff member you least suspectThe four risk levels, and why most firms sit in the "limited risk" transparency bandThe public-interest test: one blog post needs an AI label, a near-identical one does notThe release valve, how genuine human oversight makes the labelling duty easeHow to properly inventory your AI use cases, and why a spreadsheet will not cut itThe fines that now apply, including a second, sneakier one for panicking under pressureWhat "high risk" really means, once CE marks and national sandboxes enter the pictureWhy Ireland's fragmented approach to enforcement is worth watchingThe one thing every firm can do this week to get on the right side of the ActAlan Thornton on LinkedIn: https://www.linkedin.com/in/alan-thornton/Tipcan SolutionsEU AI Act · Article 50, transparency · Article 99, penaltiesISO/IEC 42001 (AI management systems)CE marking (EU)RICS AI standard (in force 9 March 2026)UK Data (Use and Access) Act 2025Ireland's EU AI Act implementationWe are AI InstituteJoin us o 17 September for a webinar on: The EU AI Act, your staff, your risk: ignorance is no defense

Register now

Hosted on Acast. See acast.com/privacy for more information.