AI ethics and legislation

The ethics and law of AI,
explained plainly

My name is Laura Graells and I work in IT project management. I write here about the side of artificial intelligence that almost nobody explains: what the law actually requires, what is fair and what is not, and how all of it lands on people and small companies.

Read the blog →
✓ Free to read and cite✓ No advertising✓ No cookies

What you will find here

Articles on the ethics and legislation of artificial intelligence, written for people who do not work in the field. This is a space for public writing: everything published here can be read, quoted and linked freely.

The blog is written in Catalan and Spanish; the articles on law, ethics and security are also available in English.

Who writes this

Where I write from

I am not a lawyer and not a researcher: I am a project manager. And I write from there — from what the rules actually ask someone to do when they have to apply them on a Monday morning.

📐

Project management

PMP, ITIL 4 and Scrum Master. Twenty years getting IT projects delivered, with the documentation to show for it.

🤖

AI project management

Studying the PMI-CPMAI certification from the Project Management Institute and an MSc in artificial intelligence. Expected: November 2026.

⚖️

AI regulation in practice

The EU AI Act and GDPR at the scale of a small company: what is actually required, of whom, and from when.

🧩

My own projects

ParsIA, MemorIA and AlfabetIA: things I built to find out where AI genuinely helps and where it does not.

What I write about

The topics

Six threads that keep crossing each other: the law, the technology, and the people who end up on the receiving end of both.

⚖️

The EU AI Act and regulation

What the European regulation requires, of whom and from when. Real deadlines, not headlines.

🎭

Bias and discrimination

When a system treats some people worse than others, and why nobody usually notices until it is late.

🔒

Data, privacy and GDPR

What really happens to the data that goes into an AI tool, and what the law says should happen to it.

🛡️

Security and scams

Cloned voices, flawless emails and impersonation. The side of AI that is already affecting people today.

🔍

Transparency and traceability

Being able to explain what a system decided, why, and who is accountable. Without that, nothing can be corrected.

👥

AI and work

How the job changes for the person facing the AI every day, and who decides how it gets used.

Own project · Art. 4 EU AI Act

Already in force

AlfabetIA: the AI training the law already asks for

If someone at a company uses ChatGPT to draft an email, they are already within scope. Article 4 of the EU AI Act requires every organisation using AI —with no minimum size: small companies and sole traders too— to make sure its people use it properly and to be able to show it.

2 Feb 2025The obligation is already in force
August 2026Authorities can ask for evidence
September 2026I finished AlfabetIA

The moments when you have to show the paperwork are an inspection, a data incident or a tender. I built AlfabetIA to find out what it takes to answer that without hand-waving: a short course, a test, named certificates and a compliance dossier. Its page explains the content.

AlfabetIA✓ Art. 4 EU AI Act
Team trainedLogged, with a date✓
CertificatesNamed, per person✓
Compliance dossierReady to show✓
AI usage policyIncluded✓

Own project · IAètica

ParsIA: how far document extraction can go

A tool I built to read invoices, delivery notes, contracts and payslips and pull the data out of them. I made it to answer one specific question: whether that can be done without the data leaving the building. It installs on the user's own servers and uses APIs that do not train models on the data or keep it longer than necessary.

What ParsIA is →
ParsIA✓ Data extracted
NumberFAC-2024-0312✓
Supplier VAT no.B-59992701✓
Net amount1.240,00 €✓
Total1.500,40 €✓

Own project · IAètica

MemorIA: the memory that sticky notes do not have

The second experiment: a system that gathers the contacts arriving through different channels, keeps them in order, and flags whoever has been waiting too long for a reply. It was my way of understanding how far a simple tool can go before you need anything complicated.

What MemorIA is →
MemorIA✓ Weekly summary
First contactNo reply · 12 days!
Second contactAwaiting reply · 4 days!
Third contactResolved✓
New contactLogged automatically✓

Training material I have put together

Two pieces of my own, each explained in detail on its page: AlfabetIA, on Article 4 of the EU AI Act, and one on automation with AI.

See what AlfabetIA is →

Materials

The training material

I have put together two pieces of training material on artificial intelligence. These pages explain what they cover, how they are built and what I learned making them. Both pages are in Catalan.

📘

AlfabetIA

What Article 4 of the EU AI Act asks for and how it can be answered: six modules, a test, certificates and a dossier. Read more →

⚙️

Automation with AI

How to work out which repetitive tasks in a small company can be automated, and which cannot. Read more →

Who writes this

Laura Graells

IT project manager. I write here about the ethics and law of artificial intelligence: what I am reading, what I am applying, and what I am still unsure about.

If you write to me, I will gladly answer questions about what I publish.