EU AI Act — Legal Sector Guidance
EU AI Act Compliance for Irish Law Firms
The AI Office of Ireland is the statutory coordinating body for implementation, working with designated competent authorities. Check the current authority and commencement provisions for the obligation concerned. High-risk obligations were deferred to December 2027 by the May 2026 Digital Omnibus — but for Irish solicitors and law firms using AI in practice, the August items are an immediate compliance obligation.
2 Aug 2026
literacy enforcement begins
What changed in May 2026 (Digital Omnibus): high-risk obligations were deferred to 2 December 2027. What did not change: from 2 August 2026, supervision and enforcement of the Article 4 AI literacy obligation begin and Article 50 transparency rules apply. The AI Office of Ireland is the statutory coordinating body for implementation, working with designated competent authorities. Check the current authority and commencement provisions for the obligation concerned. Firms using AI in client work, HR or intake processes need to assess their position now.
How common legal AI tools are classified
The EU AI Act classifies AI systems by risk — not by vendor or product name. The same tool can carry different obligations depending on how it is used. Below is a practical guide to how AI tools commonly used in Irish legal practice tend to classify. Every firm must conduct its own assessment — this table is a starting point, not a substitute for structured review.
| AI Tool / Use Case | Likely Risk Tier | Key Consideration |
|---|---|---|
| Document review and contract analysis | Limited risk | Typically limited risk — but firms must be able to verify outputs and maintain human review. |
| AI legal research (Lexis+AI, Harvey, Westlaw AI) | Limited risk | Generally limited risk. Assess by use case — research assistance differs from advice generation. |
| AI-assisted drafting | Limited risk | Limited risk in most configurations. Solicitor accountability for output content is unchanged. |
| Predictive analytics — case outcome forecasting | Potentially high-risk | Where outputs materially influence advice affecting clients' legal rights, high-risk classification may apply. |
| Client intake and automated legal advice | Potentially high-risk | Systems that provide or substitute for legal advice require careful classification and governance. |
| AI used in hiring or HR decisions | High-risk (Annex III) | Explicitly listed as high-risk under EU AI Act Annex III. Full conformity assessment required. |
Law Society of Ireland — professional obligations do not pause for AI
The Law Society of Ireland has made clear that professional responsibility for legal work product remains with the solicitor, regardless of whether AI was used in its preparation. Solicitors cannot outsource judgment to an AI tool.
This aligns directly with the EU AI Act's deployer accountability framework. Under the Act, the practice — as deployer — is responsible for AI outputs, not the vendor. The Law Society and the EU AI Act create overlapping but consistent obligations. A practice that assumes these can be addressed separately, or that vendor contracts transfer accountability, is exposed on both fronts.
Acuity provides practical AI governance advice grounded in the work, approved tools and oversight responsibilities of each organisation.
5-step action checklist for Irish law firms
These are the steps every Irish law firm using AI in practice should complete against the obligations that apply to each use — with high-risk conformity work scheduled against the December 2027 deadline.
Step 1
Inventory all AI tools in use
Document every AI system your practice deploys — including tools embedded in practice management software, Microsoft 365 Copilot, contract platforms and any third-party vendor tools. Many practices underestimate how many AI-enabled tools they already use.
Step 2
Classify each tool by risk category
Map each tool against the EU AI Act's risk tiers: unacceptable risk, high-risk (Annex III), limited risk, and minimal risk. The classification depends on how the tool is used, not just what the vendor markets it as. A structured assessment is needed.
Step 3
For high-risk systems — run a conformity assessment
For a high-risk system, establish who is the provider, what conformity documentation is required and what the firm must do as deployer. Check the applicable transition provisions, including those for existing systems.
Step 4
Implement required governance
High-risk and limited-risk AI systems require human oversight mechanisms, decision logging, bias monitoring, and — where relevant — transparency disclosures to clients. These measures must be operational, not just documented in policy.
Step 5
Document accountability and assign responsibility
Designate an individual responsible for AI governance in the practice. Record the risk classification, oversight measures and review cadence for each AI tool. This documentation is what the AI Office of Ireland will examine if it conducts an inspection.
What non-compliance looks like
From August 2026, the AI Office of Ireland coordinates supervision — with compulsory information powers from December 2026 — and competent authorities can inspect, request documentation, and sanction non-compliant AI use as the obligations phase in. For law firms, the exposure is threefold:
- Financial penalties of up to 15 million euro or 3% of global annual turnover for non-compliant use of high-risk AI — whichever is higher (up to 35 million euro or 7% for prohibited practices).
- Reputational damage: the AI Office can publish enforcement decisions. For a legal practice, this is a materially different risk than for other sectors.
- Professional conduct exposure: the Law Society of Ireland is engaged with AI compliance. Non-compliance with a major EU regulatory framework may attract regulatory scrutiny beyond AI Act sanctions.
Most Irish law firms are not using AI systems that are prohibited or that carry the most serious penalties. But limited-risk obligations — transparency, oversight, documentation — apply broadly, and the gap between current practice and compliance is typically addressable with a structured review before the deadline.
About Acuity AI Advisory
Acuity AI Advisory is led by Ger Perdisatt, former COO of Microsoft Enterprise Western Europe. Acuity provides practical AI governance advice grounded in the work, approved tools and oversight responsibilities of each organisation.
We work with law firms across Ireland and advise practices on both the EU AI Act compliance obligations and the Law Society's professional responsibility framework. These are addressed together, not in sequence.
Understand your organisation's AI obligations
Discuss how your organisation uses AI and which governance questions need attention. We scope the work around your operations and responsibilities.
Talk to usCommon questions
Does the EU AI Act apply to AI tools used by Irish solicitors and barristers?
Yes. The EU AI Act applies to any organisation — including legal practices — that deploys AI systems within the EU. The AI Office of Ireland is the statutory coordinating body for implementation, working with designated competent authorities. Check the current authority and commencement provisions for the obligation concerned. High-risk obligations follow on 2 December 2027 under the Digital Omnibus timetable. Legal practices using AI for document review, due diligence, client intake or HR are subject to deployer obligations under the Act. The risk classification of a specific tool depends on how it is used: AI that assists decision-making affecting legal rights or obligations warrants close scrutiny.
What are the Law Society of Ireland's expectations around AI use?
The Law Society of Ireland has made clear that professional responsibility for all work product — including AI-assisted work — remains with the solicitor. This aligns with the EU AI Act's deployer accountability framework. Solicitors cannot outsource judgment to AI tools. Practices need oversight mechanisms, verification steps and governance structures that satisfy both professional conduct standards and the EU AI Act's deployer requirements. These obligations overlap but must be addressed together.
Are predictive legal analytics tools high-risk under the EU AI Act?
AI used for ordinary legal drafting, research or document review is not automatically high-risk. Annex III addresses defined intended uses, including certain systems used by or on behalf of judicial authorities and alternative dispute resolution bodies. A law firm must assess each use, including any employment or other listed use, and its role as provider or deployer.
What happens if a law firm does not comply by August 2026?
From August 2026, the AI Office of Ireland coordinates supervision and the obligations actually enforceable at that point are the Article 4 AI literacy obligation and Article 50 transparency rules — high-risk conformity follows in December 2027. Non-compliant use of high-risk AI systems can ultimately attract fines of up to 15 million euro or 3% of global annual turnover, whichever is higher (35 million euro or 7% applies to prohibited practices). For law firms, there is also significant reputational risk: the Law Society of Ireland is closely engaged with the EU AI Act, and non-compliance with a major regulatory framework may attract professional conduct consequences in addition to regulatory fines.
Can law firms rely on their AI vendors for compliance?
No. The EU AI Act distinguishes between providers (who build AI systems) and deployers (who put them into use). As a law firm deploying AI — even tools purchased entirely from third-party vendors — you carry deployer obligations. These include maintaining documentation of intended use, ensuring human oversight is operational, monitoring for bias and accuracy, and being able to demonstrate compliance to regulators. Vendor contracts may apportion some obligations, but deployer responsibility cannot be fully outsourced.
Next step
The first obligation enforced from August 2026 is AI literacy. For legal practices, that means documented, role-appropriate training for solicitors and staff who use AI.
AI literacy training for solicitorsEnforcement begins August 2026
Book an EU AI Act Readiness Review
A structured, fixed-fee review covering your firm's AI inventory, risk classification, conformity assessment and governance requirements. with scope, fees and timing agreed before work begins.