Got a Data Access Request? Your 30-Day Checklist
Someone has asked for a copy of their personal data. Under the GDPR you have one month to reply. Here's a week-by-week checklist built on the regulation and EDPB guidance.
Read articleBookPilot AI Blog
Practical articles on AI agents, GDPR & privacy, and what it takes to turn an idea into a book readers find. By Zirlandia Milkovic.
Someone has asked for a copy of their personal data. Under the GDPR you have one month to reply. Here's a week-by-week checklist built on the regulation and EDPB guidance.
Read articleFive GDPR misconceptions that still trip up small businesses, each checked against the text of the regulation and the EDPB's guide for SMEs, plus what to do instead.
Read articleMost small businesses use AI rather than build it, and most of that use is minimal-risk. Here's what the EU AI Act really asks of you, with dates updated after the 2026 AI Omnibus.
Read articleMicrosoft's research found that 78% of AI users bring their own AI tools to work. Banning them rarely works. Here's a calm, four-step way to find what your team uses and turn it into a one-page policy.
Read articleCriminals now use AI to clone the voice of someone you love or fake a video call with your boss. Here's what the FBI says to watch for, and the simple habits that beat even a perfect fake.
Read articleAn agent doesn't just answer, it acts, so your prompt works like a brief for a new colleague. Here's a five-part method built on the vendors' own prompting guidance, with a ready-to-copy example.
Read articleThere is no single best AI in 2026, only the one that fits the work in front of you. This guide compares Claude, ChatGPT and Gemini by type of task, with features and plans checked on each vendor's official pages on 24 October 2026.
Read articleTen hours a week is a goal, not a promise. Here are real, hand-off-able workflows a one-person business can run with Claude Cowork, how to measure the time you actually get back, and the guardrails to keep.
Read articleEvery AI system your business uses runs on data — and much of it is personal. This guide explains what the GDPR expects in 2026: a documented legal basis, real human oversight, workable data subject rights, and a DPIA before you launch.
Read articleScraping public web pages to train AI is not automatically lawful. This article explains the EDPB and ICO position in 2026: why public does not mean consent, how the legitimate interest test works, and which safeguards developers must document in practice today.
Read articleA chatbot answers, an assistant helps inside one tool, and an agent carries out the steps toward a goal. This chapter excerpt explains what changed in 2025 and 2026, shows three everyday examples, and sets honest limits on errors and manipulation.
Read articleChoosing the right task matters more than choosing the most powerful tool. This chapter excerpt uses a simple frequency and risk matrix, four yes-or-no questions, and three levels of human oversight to build a safe four-week delegation plan for non-programmers at work.
Read article