Module 125 minutes
Does the Act Apply to Us?
Scope and extraterritorial reach.
The question: We are in Singapore. Why would an EU law apply?
You keep: AI use case register, scope columns
Specialist programmeEU AI Act and AI Supplier Risk for Asian Firms
Does the Act reach you? Which suppliers carry the risk? Build the use case register, the supplier register and a dated roadmap.
- 6 modules
- About 2 hours 45 minutes
- 6 artefacts you keep
- 30-day plan
Who it is for
For Asian operating teams, not European lawyers.
Legal, compliance, product and vendor risk leads at Asia-Pacific firms with EU exposure, especially in financial services and technology.
The problem
The EU AI Act applies to providers and deployers outside the EU whose AI is used in the EU, and most of your AI arrives through suppliers. Most material is written for European lawyers and ignores both facts.
You leave with a classified use case register and a tiered supplier register.
Outcomes
By the end, you can
- Decide whether the Act reaches each AI use, by place, role and definition.
- Classify every use as prohibited, high-risk, limited or minimal, by purpose rather than by tool.
- List the duties for your role as provider, deployer or user of general purpose models, with the gaps.
- Tier suppliers that embed AI and ask them about models, data, locations and subcontractors.
- Write AI contract clauses for data, change, assurance and liability, and set monitoring by tier.
- Map one control set to the EU Act, Singapore and other frameworks in a dated roadmap.
Outline
Six modules. Each ends with something you keep.
Every module answers one question, then you apply it in a timed exercise on a fictional case and complete the artefact before you move on.
Module 230 minutes
Risk Classification
Prohibited, high-risk, limited and minimal.
The question: Which of our uses are regulated, and how heavily?
You keep: Classified AI use case register
Module 330 minutes
Obligations: Providers, Deployers and General Purpose Models
What each role must do.
The question: Once we know our role and category, what exactly do we owe?
You keep: Obligation gap list
Module 430 minutes
Third-Party and AI Supplier Risk
Tiering and assessing suppliers that embed AI.
The question: Which suppliers matter most, and what do we ask them?
You keep: AI supplier questionnaire and tiered register
Module 525 minutes
Contracts and Continuous Monitoring
Clauses for AI, and keeping watch.
The question: What do we put in the contract, and how do we notice change?
You keep: AI clause checklist and monitoring plan
Module 625 minutes
Roadmap and Asian Framework Mapping
Link the Act to Singapore and regional frameworks.
The question: How do we meet one set of expectations without doing everything twice?
You keep: Compliance roadmap
CapstoneThen a 30-day plan
Apply it to your own organisation
An AI use case register classified under the Act, a tiered AI supplier register and a compliance roadmap.
- Week 1. Build the AI use case register and answer the scope question for each use.
- Week 2. Classify every use against the Act's risk categories and list the gaps.
- Week 3. Tier suppliers and send the AI supplier questionnaire to the most critical tier.
- Week 4. Update contract templates and brief leadership with the dated roadmap.
What you produce
Six artefacts, one binder.
One register of uses, one register of suppliers, one dated roadmap.
- Module 1AI use case register, scope columns
- Module 2Classified AI use case register
- Module 3Obligation gap list
- Module 4AI supplier questionnaire and tiered register
- Module 5AI clause checklist and monitoring plan
- Module 6Compliance roadmap
Capstone: An AI use case register classified under the Act, a tiered AI supplier register and a compliance roadmap.