Founding Partner
Guillermo Passas Varo
Colegiado nº
7941
Ilustre Colegio de Abogados de Granada (Granada Bar Association)
Of Counsel
David Sánchez Lorenzo
Colegiado nº
8281
Ilustre Colegio de Abogados de Granada (Granada Bar Association)
This service is intended for companies already using artificial intelligence tools in their processes or products that do not yet have a clear position on what the European Regulation requires of them. If you do not know whether your systems are limited or minimal risk, what transparency obligations you owe your users, or what internal documentation you need in order, this is the right starting point. The calendar does not reward waiting: Regulation (EU) 2026/1744 (the digital AI Omnibus) entered into force on 27 July 2026 and postponed much of the high-risk regime, but kept 2 August 2026 as the date of general application and of enforceability for the transparency obligations in article 50. By the close of the engagement you will have your systems classified, your obligations documented, and the body of documentation the Regulation requires operational and presentable to any authority or investor.
This engagement resolves the underlying problem: not knowing where the company stands under the AI Act, or what it must do to comply. Spain's AI supervisory authority is operational and can request documentation at any time; the difference between answering and improvising is having the file already built. The documentation produced (system classification, compliance register, contracts, digital presence, AI Statement) integrates FRIA and DPIA as a single exercise wherever personal data is involved. You end with a regulatory position that withstands an inspection.
A unilateral confidentiality agreement signed by PASSAS before the video consultation, available at no additional cost on request. It binds the firm alone — no signature is required from the client — and adds an explicit contractual layer on top of the professional secrecy obligations inherent to the practice of law.
A 60-minute working session by video call in which we analyse your situation, your specific needs and our ability to help you. We assess whether we can take on the matter and give you the fixed price in advance. You can book it directly through the Google Calendar link on our website and pay €90 by Stripe.
Legal analysis of the business model that determines which rules affect the company, what legal risks exist and what documentation is mandatory before operating. Covers the sectoral regulatory framework, data protection obligations, essential contracts and any applicable authorisation or licensing requirements.
Legal analysis of the artificial intelligence systems the company operates or deploys under Regulation (EU) 2024/1689. Determines the company's regulatory role (provider, deployer or both), classifies each system according to the AI Act risk tiers and establishes the map of applicable obligations. The documentary basis on which any compliance process is built.
The documentation required for GDPR compliance and, more broadly, for any rules on data protection and on the processing and transfer of data, including international transfers, both in dealings with users and with the providers that process data on your behalf, with the legal mechanisms needed to operate without regulatory exposure.
The legal documentation required to operate online: legal notice, privacy policy, cookie policy and, where applicable, terms of sale. Drafted with legal precision and adapted to the specific activity, not carried over from another website. Complies with the GDPR and with information society services rules.
Public statement on the use of artificial intelligence in the company's products and processes: which systems are used, for what purpose and with what safeguards for the users affected. A deliverable that clients, regulators and investors will demand with increasing frequency, and that few firms are yet in a position to provide.
Contractual documentation to formalise relationships with clients and suppliers, with the terms, liabilities and scope clearly defined from the first engagement. Includes the services agreement adapted to the company's operations, with limitation of liability clauses and payment terms, ready to sign.
At PASSAS we work fast, and we intend to be faster than the competition without losing quality along the way. That is why we like to tell you how long you will wait for your service. It is an indicative figure, since some engagements are more complex than others. The Engagement Letter sets out a deadline tailored to your matter, one we will do everything we can to meet, or to beat. That is our commitment to quality.
We tell you what you will pay for your service: at PASSAS we work with a transparent fee policy. That said, we are not a marketplace. Every service is tailored and the fees follow the workload borne by the lawyer in charge. Even so, we want to give you an indicative price for this service, so that deciding to instruct us and booking your virtual consultation is easier.
We know how much it matters that the lawyer you instruct has real command of the subject you are handing over. We have written on questions related to the service you are considering.
El AI Act entra en su fase más exigente el 2 de agosto de 2026. Providers, deployers y providers accidentales: clasifica tu situación ahora.
El acuerdo provisional del 7 de mayo aplaza las obligaciones de alto riesgo del AI Act hasta diciembre de 2027. Pero hay obligaciones que no se mueven. Sepa exactamente dónde está su empresa.
El Digital Omnibus aplaza el Anexo III a 2027, pero el Artículo 4 lleva vigente desde febrero de 2025. Qué debe documentar el responsable del despliegue antes del 2 de agosto.
Deducted from your first invoice if you go on to instruct us. VAT included.
Minutes to talk to a registered EU lawyer who will answer your questions and assess your case.
Remote. No car, no waiting room, no commuting, no paperwork. An EU lawyer in your living room.
