L3-M5 / lesson 1 of 2

Know the authorities and enforcement framework

An organisation prepares its escalation framework.

10–15 min · 0/4 steps complete

Start here / A workplace decision

Know who is responsible for which question

An organisation prepares its escalation framework.

The same incident could involve several regulatory areas.

Before you read / Think it through

In “Know who is responsible for which question”, what would you check or do first?

Pause and form your answer, then compare the reasoning. This reflection is not scored.

Compare the reasoning

Map the competent authority and internal specialist for each applicable regime.

The ideas below give you a method for this decision. Then work through the rest of this case and try the decisions yourself.

Part 1 of 4 Learn the ideas

Choose a topic0 of 5 read

Authority map

National authorities supervise relevant AI systems.

The AI Office has central responsibilities, including GPAI supervision.

In the workplace

Maintain a jurisdiction-specific contact map. Do not assume the data-protection authority is always the sole AI regulator.

Remember this

Sectoral and data-protection authorities may also be involved.

The workplace case

YOUR CASE / SUPERVISION PENALTIES AND INCIDENTS

An organisation receives complaints that its high-risk benefits-assessment system wrongly excludes a group of applicants. The supplier is temporarily unreachable. A journalist asks for comment and a regulator requests the system version, decision records and incident chronology.

Quick reference / five key ideas

Authority map: Sectoral and data-protection authorities may also be involved.
AI Office and AI Board: Their roles are not interchangeable.
Fine ceilings: These are ceilings, with the relevant size rules and circumstances.
SMEs and small mid-caps: The SMC rule is not the same blanket rule for Article 5.
Information and Article 4: Absence of a specific tier does not erase the duty or all enforcement.