Appliessince Feb 2025
Prohibited practices
Art. 5
Bans on manipulative AI, social scoring, real-time biometric identification and emotion recognition in certain contexts. New bans on sexual deepfakes from Dec 2026.
Boutique law firm. Hands-on legal AI.
Legal clarity.By design.
Legal advice on privacy and the GDPR, the AI Act, and EU data and platform regulation. And legal AI — tools, agents and workflows, built and implemented for your business.
Illustrative workflow · lawyer review built in
[ Mission ] Not just advice — legal infrastructure.
Legal advice tells you what the law requires. I also build the tools that put it into practice.
[01] ADVISE
Strategic, pragmatic legal advice — AI-assisted, in German and English.
[02] BUILD
Legal AI tools, agents and skills that turn regulation into structured, verifiable workflows.
[03] IMPLEMENT
Implementation advisory, training and workshops — so your team can put legal AI to work.
[ AI Act ]
The AI Act applies.Are you prepared?
The EU AI Act is in force, and the first obligations already apply. What you have to do depends on your role — provider or deployer — and on the risk category of each AI system.
Appliessince Feb 2025
AI literacy
Art. 4
Measures to build AI literacy among staff who work with AI. Softened by the Digital Omnibus, but still in force.
Appliessince Aug 2026
Transparency
Art. 50
Tell people when they are dealing with AI, label deepfakes and mark AI-generated content.
Appliessince Aug 2025
General-purpose AI models
Art. 53 ff.
Technical documentation, a copyright policy and a training-data summary for providers of general-purpose AI models.
From Dec 2027
High-risk AI
Annex III · Art. 9–15, 26
Risk management, data governance, technical documentation, human oversight and conformity assessment — for example in recruitment, credit scoring or education.
From Aug 2028
High-risk AI in products
Annex I
AI as a safety component of products under EU product legislation, such as machinery or medical devices.
Not sure where your AI systems fall?
I'll classify them and build your compliance roadmap.
[01] Legal advice
Digital lawfor the AI era.
Close to your business. Clear on the law.
Specialist advice for technology businesses and organisations working with data and AI. From a focused question to ongoing support as part of your team.
Data Protection, GDPR & ePrivacy
Strategic privacy advice, DPIAs, breach response, international transfers and external DPO services.
Artificial Intelligence & AI Act
Risk classification, compliance roadmaps, AI governance, documentation and AI literacy training.
Digital & Online Law
DSA, DMA, DDG — navigating the EU's digital regulation stack for platforms, apps, and SaaS.
Online Marketing & AdTech
Cookie compliance, consent management, tracking frameworks, ePrivacy requirements, and unfair competition law.
Data & Cloud
EU Data Act compliance, cloud contracts, SaaS agreements, IoT data sharing.
Cyber & IT Security
NIS2, DORA, Cyber Resilience Act — regulatory compliance and incident response.
One project. Or the long term.
A single question, a defined project, a monthly retainer or an external DPO mandate — in whichever model fits you.
[02] Legal AI Studio
Built for law. Powered by AI.
Legal expertise.Deployed.
From legal knowledge to a working system.
Legal AI tools, agents and multi-agent workflows for legal teams, law firms and AI platforms — model-agnostic, from frontier models to fully local AI. From designing the legal logic to implementation, testing and training your team.
Tools & agents
Own legal AI applications — Breach Sentinel, LIA, Verity — plus agent skills and multi-agent workflows with human review built in.
Implementation & training
Advising AI platforms and legal teams on putting legal AI to work, plus hands-on workshops — taught by someone who uses it daily.
Open source
Legal AI skills, published openly on GitHub and lawve.ai — free to use, read and audit.
Legal requirement→Encoded method→AI workflow→Lawyer review
> system: CV screening tool
Art. 6(2) + Annex III(4)(a)… match
risk tier: HIGH-RISK
obligations: Art. 9–15, 26
status: draft → lawyer review ✓
- Lawful basis identified (Art. 6)
- Records of processing (Art. 30)
- DPIA threshold assessed (Art. 35)
- Processor terms in place (Art. 28)
- Transfer mechanism checked (Ch. V)
5 / 5
| clause | position | escalation |
|---|---|---|
| Limitation of liability | Cap at annual fees | Escalate if uncapped |
| Data processing | Art. 28 terms attached | Escalate if no DPA |
| Governing law | German or EU law | Escalate if non-EU |
--:--:--
Berlin
Illustrative workflow · lawyer review built in
[ In practice ] · Legal depth × technical delivery
Advice. Implementation.Often, both.
Ongoing counsel
A legal partner. On retainer.
Ongoing advice for a software company on privacy, AI and contracts — close to the business.
Legal AI implementation
A contract playbook. Made machine-readable.
A large playbook implementation with a legal AI platform: translating a client's legal review points into machine-readable checks and playbooks for AI-assisted contract review.
Platform advisory
Privacy expertise. Built into AI agents.
Legal and technical input on privacy workflows, agent skills and system prompts for an AI platform provider.
Training
From first prompt. To own skills.
A multi-session programme for an in-house legal team, from foundations to building and reviewing their own skills.
[ Update · Nov 2026 ]
New rules.New dates.
AI Act · after the Digital Omnibus
The Digital Omnibus on AI has moved key AI Act deadlines. Where things stand:
- Feb 2025Prohibited practices & AI literacy (Art. 4, softened by the Omnibus)in force
- Aug 2025General-purpose AI modelsin force
- Aug 2026Transparency (Art. 50) & general applicationin force
- Dec 2026New bans on sexual deepfakes (Art. 5(1)(ba)/(bb)) · Art. 50(2) marking deadline for systems already on the marketupcoming
- Dec 2027High-risk (Annex III)was Aug 2026moved
- Aug 2028High-risk (Annex I products)was Aug 2027moved
Cyber Resilience Act
The complete guide: scope, obligations, reporting, dates. Reporting obligations apply since 11 Sep 2026.
[ Insights ]
From the blog.
[ AI Act ]
The Digital Omnibus on AI: what changed in the AI Act — and what applies now
Regulation (EU) 2026/1744 has moved the AI Act's high-risk deadlines, softened the AI literacy duty and added two new prohibitions. The new timeline, the substantive changes, and what did not change.
8 November 2026
[ GDPR ]
EDPB Work Programme 2026-2027: Templates, AI Act Guidance, and What It Means for Practitioners
The EDPB's new work programme introduces EU-wide compliance templates and joint AI Act/GDPR guidelines. An analysis of the two most significant deliverables and their practical implications.
18 February 2026
[ Legal Tech ]
GDPR Compliance Skills for AI Agents: Portable Legal Expertise, Open Source
Introducing three open-source skills that teach AI agents how to handle GDPR workflows — breach response, privacy notices, and DPIAs. What skills are, why they matter, and how they work.
12 February 2026
[ The person behind OneZero ]
Personal. Specialised.Technology-driven.
Rechtsanwalt · LL.M. · Legal AI Engineer
Oliver Schmidt-Prietz
Experience from international law firms and senior in-house roles at technology companies — brought together in my own practice for data protection, AI regulation and EU digital law.
I work directly with clients, combining legal judgment with hands-on technical work.
AI is part of how I practise — and part of what I help others build.
- Based in Germany
- German & English
- DPO (TÜV®)
- AI Officer
[ Contact ] · A good place to begin
What's on your mind?
Ongoing legal support. A specific question. A legal AI project you want to make work.
Free initial call · German or English