Guides
The reading, turned into practice.
Plain-language writing on the EU AI Act, DPIAs, children's-safety and privacy regulation for the people who build and sign off products. Every regulatory claim is grounded in the same source obligations Landfall maps — with links straight into the obligation explorer so you can check the primary material yourself.
Looking for the in-app user guides (EN/NL)? Read them here.
EU AI Act and DPIA
Scoping, classification and the duties that follow, for deployers in the public sector and regulated industries.
EU AI Act Risk Tiers Explained for Deployers
What high-risk means under Regulation (EU) 2024/1689, the Annex III areas, how provider and deployer duties differ, and the Art. 2(3) and 2(6) exclusions.
5 September 2026
Does the EU AI Act Apply to My Project?
A scoping walk-through: AI system or not, provider or deployer, Annex III areas, exclusions, body type, Art. 50 features, and what out of scope means.
5 September 2026
FRIA Under Article 27 for Public Bodies
Who must perform a fundamental rights impact assessment, the six elements it contains, how it relates to a GDPR DPIA, and how the Dutch IAMA fits.
5 September 2026
Registering High-Risk AI as a Public Authority Deployer
The Art. 49(3) EU database duty for public authorities, the Dutch Algoritmeregister entry, what a tool can pre-fill, and which fields always need a human.
5 September 2026
DPIA Screening Criteria for AI Systems
The nine WP248 criteria for a GDPR Art. 35 DPIA, how they behave when an AI system is involved, and when Art. 36 prior consultation is possible.
5 September 2026
Prohibited AI Practices Under Article 5
The eight practices Regulation (EU) 2024/1689 bans outright, in force since 2 February 2025, and why a screening tool should say review rather than pass.
5 September 2026
Transparency Duties Under Article 50
Art. 50 disclosure duties for chatbots, emotion recognition, biometric categorisation, deep fakes and AI-generated public text, and how to evidence them.
5 September 2026
Finding AI in a Codebase
What static detection of ML frameworks, LLM SDKs, model artifacts, scoring logic and agent frameworks can and cannot tell you about AI Act scope.
5 September 2026
Keeping PII Out of US-Hosted Models
EU-hosted and local model options, a per-project residency policy that fails closed, and the questions to put in an AI provider procurement checklist.
5 September 2026
Children's safety and privacy
Age-appropriate design codes and privacy statutes, read as engineering work.
IEEE 2089 requirements: what the age-appropriate design standard actually asks of your product
A plain-engineering read of IEEE 2089-2021 — its fifteen obligations grouped into the themes an engineering team can act on, and how the voluntary standard lines up with binding law like the UK AADC.
23 July 2026
AADC vs COPPA: why 'under 18' and 'under 13' are different compliance universes
COPPA is a data-privacy statute that gates collection from under-13s behind parental consent; the UK AADC is a design code protecting every under-18 through age-appropriate defaults. The gap is where teams get caught.
23 July 2026
The UK Children's Code: Fifteen Standards as a Checklist
The ICO's Age Appropriate Design Code, in force since September 2021, turned standard by standard into the product decision each one asks for.
5 September 2026
COPPA Verifiable Parental Consent Methods
COPPA parental-verification methods, their notice and disclosure conditions, the 2025 dates, and the distinction between voice recordings and biometric identifiers.
5 September 2026
California's Age-Appropriate Design Code: What Still Applies
AB 2273, the NetChoice v. Bonta injunctions, which provisions have been enjoined, and what a product team should still build while the litigation runs.
5 September 2026
UK Online Safety Act Duties for Children's Services
Children's access assessment, children's risk assessment, the Protection of Children Codes and highly effective age assurance, with Ofcom's 2025 deadlines.
5 September 2026
DSA Article 28: Protecting Minors on Online Platforms
The four paragraphs of Art. 28, who counts as accessible to minors, and the Commission's July 2025 guidelines on age assurance, defaults and recommenders.
5 September 2026
Age Assurance Methods Compared
Self-declaration, age estimation, age verification and parental attestation: what the UK AADC, UK OSA and EU DSA expect, and how to keep the data minimal.
5 September 2026
High-Privacy Defaults for Child Accounts
Visibility, contact, geolocation, profiling, nudge techniques and parental controls, set feature by feature under AADC standards 7 to 13 and DSA Art. 28.
5 September 2026
Australia's Under-16 Social Media Minimum Age
The Social Media Minimum Age Act 2024, in effect from 10 December 2025: reasonable steps, which services are in scope, and the eSafety Commissioner's role.
5 September 2026