Polish AI harness, part 3: AI in line with the law and with evidence

Series · episode 3 of 3

From 28 October, the provisions of the Polish Act on Artificial Intelligence Systems on inspections, complaints and fines apply. In the last part of the series, we show how to use AI lawfully and be able to prove it

This time, an assistant similar to the one that prepared an offer in part 1 ends up in the HR department and starts assessing job candidates. The chat window looks the same, but the effects of the system and its legal classification are completely different. That is why we start the conversation about compliance with a description of the task, and only then choose the tools that help to demonstrate it

What to check before launch

Use case cardpurpose, users, people affected by decisions, data sources, permitted actions and the process owner
AI Act deadlinesprohibitions in Article 5 from 2 February 2025, transparency under Article 50 from 2 August 2026, high-risk systems in Annex III from 2 December 2027
The Polish actinspections, complaints and fines from 28 October 2026; as a rule, an inspection no earlier than 7 days after the notice is delivered, and an individual opinion for PLN 150
GDPRpurpose and legal basis of processing, data minimisation in queries to the model, an impact assessment where the risk is high
Human involvementoversight by people with the competence, authority and time for assessment, and a test on a wrong proposal

Evidence collected by SAIE

An inspection holds no surprises when the evidence is ready

  • PROXY:AI records model calls, costs and decision context in a log that cannot be altered
  • PROXY:AI prepares evidence packages for the AI Act, DORA and NIS2, among others
  • the CDF methodology brings order to the assessment of the application, accountability and decisions on moving to the next stages
  • a record saying that sending requires approval corresponds to a working block confirmed by a test

A Polish AI harness makes sense when an organisation can show, on a specific process, how it protects data, supports people and controls the effects of the system

This is the last part of the series. All three parts can be found in the Article series section

Contact us