RegTech4AI
Bringing AI Law into Practice
An NGF-funded research initiative making EU AI regulation work in practice through regulatory technology. We develop technical methods to implement GDPR and the AI Act, bridging the gap between legal requirements and real-world applications.
Research Focus
GDPR & AI Act Implementation
Developing practical tools and frameworks to help organizations comply with European data protection and AI regulations through automated technical solutions.
Interdisciplinary Approach
Combining expertise from law, computer science, HCI, and NLP to create RegTech solutions that work at the intersection of technology and legal compliance.
Open Research & Tools
Publishing our findings openly and building accessible tools that help the broader community understand and implement AI regulation effectively.
The Humans
Our team brings together researchers from computer science, law, HCI, and NLP at Maastricht University.
Research Team
Konrad Kollnig
Project Lead & Associate Professor in CS and Law
Kamil Szostak
PhD Student
Bram Rijsbosch
PhD Student
Lucas Giovanni Uberti-Bona Marin
PhD Student
Ishitaa Narwane
PhD Student
Defne Halil
External PhD Student
Supporting Faculty
Gijs van Dijck
Professor
Johanna T. Gunawan
Assistant Professor in CS/HCI/Law
Marta Kołacz
Assistant Professor in Law
Jerry Spanakis
Assistant Professor in NLP and Law
Publications
Our latest research on AI regulation, data protection, and compliance technology.
" If I Had to Buy Just ONE: Galaxy S26 Ultra": Auditing AI-Generated Product Recommendations
L. Marin, T. Bertaglia, G. Astante, B. Rijsbosch, G. van Dijck, A. Hannák, ..., et al.
arXiv
Read PaperBuilding AI (In)dependence through EU's AI Factories
D. Halil, B. Rijsbosch, K. Kollnig
SSRN
Read PaperCan the GPC standard eliminate consent banners in the EU?
S. Zimmeck, H. Pandit, F. Borgesius, C. Santos, K. Kollnig, R. Berjon
Computer Law & Security Review
Read PaperDrowning in AI Slop: How Social Media Platforms (Do Not) Label AI and Deepfake Content under EU law
B. Rijsbosch, L. Bekavac, H. Tari, G. van Dijck, K. Kollnig
arXiv
Read PaperExploring the "Banality" of Deception in Generative AI
I. Narwane, J. Gunawan, K. Kollnig
arXiv
Read PaperIs your AI Model Accurate Enough? The Difficult Choices Behind Rigorous AI Development and the EU AI Act
L. Uberti-Bona Marin, B. Rijsbosch, K. Meding, G. Spanakis, G. van Dijck, ..., et al.
ACM FAccT
Read PaperMissing the Mark: Adoption of Watermarking for Generative AI Systems in Practice and Implications Under the New EU AI Act
B. Rijsbosch, G. van Dijck, K. Kollnig
Policy & Internet
Read PaperSoK: Measuring Compliance With Privacy and Data Protection Laws After the GDPR
N. Reitinger, N. Apthorpe, K. Kollnig, A. Tamò-Larrieux, M. Xiao, S. Egelman, ..., et al.
Northwestern Law & Econ Research Paper, 26-33
Read PaperAre Companies Taking AI Risks Seriously? A Systematic Analysis of Companies' AI Risk Disclosures in SEC 10-K forms
L. Marin, B. Rijsbosch, G. Spanakis, K. Kollnig
PKDD/ECML Workshops
Read PaperBig is Not Bad, but Big AI Might Be: EU Merger Law and the Future of AI Competition
D. Halil, K. Kollnig
SSRN
Read PaperData portability strategies in the EU: Moving beyond individual rights
Y. Chao, M. Xu, A. Tamò-Larrieux, K. Kollnig
Computer Law & Security Review
Read PaperMind the Competitiveness Gap: Measuring the AI Act's Extraterritorial Reach
K. Szostak, G. van Dijck, K. Kollnig
Computer Law & Security Review
Read PaperRegulating pressing systemic risks: But not too soon?
D. Halil, K. Kollnig, A. Tamò-Larrieux
Internet Policy Review
Read PaperLegal, Technical, and Social Limitations of Data Portability through Decentralized Applications
Y. Chao, M. Xu, A. Tamò-Larrieux, K. Garcia, K. Kollnig
Solid Symposium 2024