Artificial intelligence in business: opportunities and legal challenges in 2025 that you should not forget
If your employees routinely use AI tools such as generative assistants (ChatGPT, Copilot), compilers (DeepL) or graphical applications (Canva, Midjourney), you should consider implementing an AI Policy. This document establishes rules for the safe and effective use of AI tools and protects sensitive information, including trade secrets or personal information.

1. Internal rules for the use of AI: the key to sustainability
2. Supplier arrangements and control of AI tools
Increasingly, companies are setting rules for the use of AI not only for their employees, but also for their suppliers. Supplier contracts may contain clauses on how data can be shared or processed using AI. Such arrangements minimize the risk of misuse and ensure that partners use AI tools in accordance with the law and your expectations.
3. GDPR and data protection: what not to forget?
If your business processes personal data using AI tools, it is crucial that you:
- Properly inform data subjects about how their data is processed.
- Consider the need for a Data Protection Impact Assessment (DPIA).
- Enter into processing agreements with AI system providers.
Failure to address the question of whether AI systems use sensitive data to 'learn' may lead to legal challenges or regulatory sanctions.
4. The AI Act: what does the new regulation bring?
The AI Act, adopted by the EU, introduces strict rules for high-risk systems such as those handling biometric data or making employment decisions. Companies should analyse whether their AI systems fall into high-risk categories and ensure that they comply with transparency and security requirements.
5. Training data: when can you use it?
Using data to train your own AI models often raises legal licensing issues. Unauthorized use of data can lead to litigation, especially if the data is copyrighted or contains sensitive information.
6. Implementation and legal liability
AI technologies, such as facial recognition systems or autonomous drones, raise issues of liability for damages caused by system errors. Clear contractual terms and ensuring compliance can minimise the risk of legal complications.
Key takeaways:
- Having an AI Policy in place ensures a sustainable and safe approach to using AI in the business.
- Legal documentation, including GDPR modifications and supplier contracts, is essential to protect data and minimize risk.
- The AI Act and rules for working with training data present new challenges that require expert solutions.
If you have questions about implementing AI in your business, contact us! We'd be happy to help you set up everything you need to use AI to its full potential without worrying about legal complications. We are here to help you!
About the author
Disclaimer:
The information contained in this article is for general informational purposes only and serves as a basic guide to the issue as of 2026. Although we strive for maximum accuracy, laws and their interpretation evolve over time. We are ARROWS Law Firm, a member of the Czech Bar Association (our supervisory authority), and for the maximum security of our clients, we are insured for professional liability with a limit of CZK 400,000,000. To verify the current wording of the regulations and their application to your specific situation, it is necessary to contact ARROWS Law Firm directly (consultation@arws.cz). We are not liable for any damages arising from the independent use of the information in this article without prior individual legal consultation.
