IE Law School and ECIJA present their report on Governance and Regulatory Compliance in the era of AI

An event organized by the IE-ECIJA Digital Law Observatory at IE Law School.

The key to success in Artificial Intelligence (AI) governance lies not only in complying with existing regulations but also in embedding compliance as a strategic value within organizations. This is one of the main conclusions of the report “Governance and Regulatory Compliance in the Era of AI: A Report on Impact and Management in Legal Departments”, prepared by the IE-ECIJA Digital Law Observatory at IE Law School. The report is based on insights from a focus group involving leading professionals from major companies and experts in technology and regulation.

The report, part of the third edition of this Observatory, was presented on December 12 at the Paper Pavilion of IE University. It examines critical aspects such as AI usage policies, the current state of applicable regulations, and the allocation of roles and responsibilities required for effective and ethical management of this technology. Additionally, it offers a compilation of corporate best practices and explores how regulatory frameworks can be adapted to the rapid evolution of technology.

The event began with a welcome address by Macarena Plaza, Head of International Corporate Development and Legal Innovation at IE Law School, and featured a distinguished panel of experts, including:

• Silvia Zamorano, Compliance Lawyer at ECIJA.
• Elena González Blanco, professor at IE University, expert in artificial intelligence and digital innovation and moderator of the discussion.
• Miguel Retana, DPO of Mahou San Miguel Group.
• Chelo Borrás, Corporate Legal Director of Banesco Internacional.
• Pablo Salas, Data Protection & Cybersecurity Legal Counsel at Iberdrola.

During the discussion, participants emphasized that responsible AI management is not just a technical challenge but also an ethical and strategic imperative. “If AI is equipped with appropriate safeguards and well-structured information, it should not produce inadequate responses,” noted González Blanco.

A major focus of the report is the observation that many companies remain in the early stages of developing specific corporate policies for AI use. “AI represents an opportunity to enhance customer service and manage risks more effectively,” stated Borrás.

Retana highlighted that while organizations are enthusiastic about AI for streamlining processes and reducing costs, compliance is not always a priority. “Compliance must be integrated from the business design phase and idea generation, not just when issues arise. We don’t want to be seen as stoppers,” he asserted.

The report highlights the increasing accessibility of AI tools, which can be used by any employee with access to a license, increasing the possibility of misuse or uses that are not aligned with the organization’s corporate policies. “Internal communication is key to knowing how to use AI within the organization,” said Salas.

About the IE-ECIJA Digital Law Observatory

The IE-ECIJA Digital Law Observatory was established with the purpose of exploring and researching the diverse legal dimensions and implications of the digital economy. The Observatory aims to become a platform for legal and academic research and dissemination within this new legal framework.