From the book · How to Bring AI into Your Company

Sources, note by note

The address of every note in appendix D, chapter by chapter. Where the source is a book or a document with no address, the line says so.

Introduction

Chapter 1 · What you buy when you buy AI

(c01-01) https://www.ae-info.org/ae/Acad_Main/News2_Archive/AI%20opportunities%20and%20challenges
(c01-02) https://www.canlii.org/en/bc/bccrt/doc/2024/2024bccrt149/2024bccrt149.html · https://www.youtube.com/watch?v=aEVqXnwWaig (checked on 13 October 2026: 403 to automated download)
(c01-03) https://www.youtube.com/watch?v=zjkBMFhNj_g
(c01-04) https://www.youtube.com/watch?v=zjkBMFhNj_g
(c01-05) https://sloanreview.mit.edu/article/how-ai-helps-the-best-and-hurts-the-rest/
(c01-06) https://hai.stanford.edu/assets/files/ai_index_report_2026.pdf · https://www.hbs.edu/ris/Publication%20Files/dell-acqua-et-al-2026-navigating-the-jagged-technological-frontier_5c589c8c-fbb5-458f-b285-c944746cd717.pdf
(c01-07) https://www.bbc.co.uk/news/technology-68025677
(c01-08) https://www.youtube.com/watch?v=zjkBMFhNj_g
(c01-09) https://www.legislation.gov.uk/ukpga/2024/13/section/182 · https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/05/ico-warns-organisations-must-not-ignore-data-protection-risks-as-it-concludes-snap-my-ai-chatbot-investigation/

Chapter 2 · Using is not implementing: which rung your company is on

Chapter 3 · Your first case, with an owner and two figures

(c03-01) https://drucker.institute/quote-library/
(c03-02) https://openlibrary.org/isbn/9780870210594
(c03-03) (no public address: the author's own work for this book, not published separately)
(c03-04) https://www.mckinsey.com/capabilities/quantumblack/our-insights/the-state-of-ai-how-organizations-are-rewiring-to-capture-value (checked on 13 October 2026: McKinsey does not answer automated download)
(c03-05) (no public address: the author's own work for this book, not published separately)
(c03-06) https://www.youtube.com/watch?v=XSkXzjtaRc0 · https://www.youtube.com/watch?v=KEQjwE7hDjk
(c03-07) https://www.klarna.com/international/press/klarna-ai-assistant-handles-two-thirds-of-customer-service-chats-in-its-first-month/ · https://www.youtube.com/watch?v=fr78adfAnuA · https://www.youtube.com/watch?v=K8v7fdVWYw4 · https://www.youtube.com/watch?v=QGEdsRlo7sI · https://www.youtube.com/watch?v=yxsv1YKEUQM · https://www.bloomberg.com/news/articles/2017-02-28/jpmorgan-marshals-an-army-of-developers-to-automate-high-finance · https://mitsloan.mit.edu/press/mit-sloan-study-finds-financial-benefits-to-having-a-digitally-savvy-board · https://www.microsoft.com/en/customers/story/1501304071775762777-carmax-retailer-azure-openai-service · https://www.mckinsey.com/capabilities/tech-and-ai/how-we-help-clients/rewiring-the-way-mckinsey-works-with-lilli · https://www.mckinsey.com/about-us/new-at-mckinsey-blog/meet-lilli-our-generative-ai-tool (checked on 13 October 2026: 403 to automated download; McKinsey does not answer automated download)
(c03-08) https://fortune.com/2025/05/09/klarna-ai-humans-return-on-investment/
(c03-09) https://www.fsunion.org.au/cba-backflips-on-ai-cuts-but-the-threat-remains/ · https://www.abc.net.au/news/2025-08-21/cba-backtracks-on-ai-job-cuts-as-chatbot-lifts-call-volumes/105679492 (checked on 13 October 2026: 403 to automated download)
(c03-12) https://www.financialcontent.com/article/bizwire-2026-10-13-strong-roi-for-ai-nearly-3x-more-common-when-companies-measure-growth-versus-efficiency-alone-wharton-gbk-study-finds

Chapter 4 · The cases that work all have the same shape

(c04-01) https://landing.ai/wp-content/uploads/2020/05/LandingAI_Transformation_Playbook_11-19.pdf
(c04-02) https://www.madesmarter.uk/resources/blog-how-manufacturers-are-already-using-ai/
(c04-03) https://www.madesmarter.uk/resources/blog-how-manufacturers-are-already-using-ai/
(c04-04) https://www.madesmarter.uk/media/iwnbgpcu/cognitive-computing-ai-machine-learning-tech-guide.pdf
(c04-05) (no public address: the author's own reading of the cases cited in chapter 4, not published)
(c04-06) https://www.madesmarter.uk/media/iwnbgpcu/cognitive-computing-ai-machine-learning-tech-guide.pdf · https://www.madesmarter.uk/resources/blog-how-manufacturers-are-already-using-ai/
(c04-07) https://www.youtube.com/watch?v=9RvWcXVaAng
(c04-08) https://conseil.bpifrance.fr/accelerez-ia/cas-usage/bluetainer
(c04-10) https://www.gov.uk/government/news/statement-from-roger-taylor-chair-ofqual
(c04-13) https://hbr.org/2016/10/noise
(c04-14) https://www.legislation.gov.uk/eur/2016/679/article/22A · https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/how-do-we-ensure-individual-rights-in-our-ai-systems/ · https://www.legislation.gov.uk/ukpga/2010/15/section/39 · https://eur-lex.europa.eu/eli/reg/2026/1744/oj · https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/how-do-we-ensure-fairness-in-ai/what-is-the-impact-of-article-22-of-the-uk-gdpr-on-fairness/ (checked on 14 October 2026: EUR-Lex answers 202 to automated download and opens in a browser)

Chapter 5 · Stopping in time is a good result too

(c05-01) https://openlibrary.org/isbn/9780870210594
(c05-02) https://www.technologyreview.com/2025/06/11/1118233/amsterdam-fair-welfare-ai-discriminatory-algorithms-failure/
(c05-03) https://www.technologyreview.com/2025/06/11/1118233/amsterdam-fair-welfare-ai-discriminatory-algorithms-failure/
(c05-04) https://www.technologyreview.com/2025/06/11/1118233/amsterdam-fair-welfare-ai-discriminatory-algorithms-failure/
(c05-05) (no public address: the author's own work for this book, not published separately)
(c05-06) (no public address: the author's own work for this book, not published separately)
(c05-07) https://hbr.org/2007/09/performing-a-project-premortem
(c05-08) https://www.journalism.co.uk/what-the-financial-times-learned-from-experimenting-with-ai/
(c05-10) https://www.gartner.com/en/newsroom/press-releases/2024-07-29-gartner-predicts-30-percent-of-generative-ai-projects-will-be-abandoned-after-proof-of-concept-by-end-of-2025 · https://www.gartner.com/en/articles/genai-project-failure (checked on 13 October 2026: 403 to automated download)
(c05-11) https://www.spglobal.com/market-intelligence/en/news-insights/research/ai-experiences-rapid-adoption-but-with-mixed-outcomes-highlights-from-vote-ai-machine-learning (checked on 13 October 2026: 403 to automated download)

Chapter 6 · What it costs with 500 users, and the 7 questions for the supplier

Chapter 7 · All the AI your company already uses, even if nobody decided it

Chapter 8 · AI opens what your employee's keys open

(c08-01) https://www.youtube.com/watch?v=K8v7fdVWYw4
(c08-02) https://www.computerworld.com/article/3542000/microsoft-365-copilot-rollouts-slowed-by-data-security-roi-concerns.html
(c08-03) https://www.computerworld.com/article/3542000/microsoft-365-copilot-rollouts-slowed-by-data-security-roi-concerns.html
(c08-04) https://www.computerworld.com/article/3542000/microsoft-365-copilot-rollouts-slowed-by-data-security-roi-concerns.html
(c08-16) https://www.computerworld.com/article/3542000/microsoft-365-copilot-rollouts-slowed-by-data-security-roi-concerns.html
(c08-05) https://www.gov.uk/government/publications/ai-playbook-for-the-uk-government · https://assets.publishing.service.gov.uk/media/67aca2f7e400ae62338324bd/AI_Playbook_for_the_UK_Government__12_02_.pdf
(c08-06) https://www.youtube.com/watch?v=yxsv1YKEUQM · https://www.osohq.com/research · https://www.cyera.com/research/96-of-enterprise-permissions-go-unused-ai-agents-wont-leave-them-that-way
(c08-07) https://www.iso.org/standard/87195.html (checked on 13 October 2026: 403 to automated download)
(c08-08) https://www.gartner.com/en/newsroom/press-releases/2025-02-26-lack-of-ai-ready-data-puts-ai-projects-at-risk (checked on 13 October 2026: 403 to automated download)
(c08-17) https://www.legislation.gov.uk/ukpga/2018/12/section/3
(c08-09) https://openai.com/enterprise-privacy/ · https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training · https://learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-privacy · https://knowledge.workspace.google.com/admin/generative-ai/generative-ai-in-google-workspace-privacy-hub (checked on 13 October 2026: 403 to automated download)
(c08-10) https://openai.com/enterprise-privacy/ · https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training (checked on 13 October 2026: 403 to automated download)
(c08-11) https://www.wiz.io/blog/38-terabytes-of-private-data-accidentally-exposed-by-microsoft-ai-researchers
(c08-12) https://www.ncsc.gov.uk/blog-post/prompt-injection-is-not-sql-injection
(c08-13) https://www.gov.uk/government/publications/ai-playbook-for-the-uk-government · https://www.judiciary.uk/guidance-and-resources/artificial-intelligence-ai-judicial-guidance-october-2025/ · https://assets.publishing.service.gov.uk/media/67aca2f7e400ae62338324bd/AI_Playbook_for_the_UK_Government__12_02_.pdf
(c08-14) https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/what-do-we-need-to-know-about-accuracy-and-statistical-accuracy/ · https://www.legislation.gov.uk/ukpga/2018/12/section/3

Chapter 9 · The 5 clauses that protect you when you sign

Chapter 10 · When AI decides about a person: what already binds you

(c10-01) https://caselaw.nationalarchives.gov.uk/ewca/civ/2020/1058
(c10-02) https://ico.org.uk/media2/woalogoc/20240219-serco-leisure-operating-limited-en.pdf · https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/02/ico-orders-serco-leisure-to-stop-using-facial-recognition-technology/
(c10-03) https://ico.org.uk/media2/woalogoc/20240219-serco-leisure-operating-limited-en.pdf
(c10-22) https://ico.org.uk/media2/woalogoc/20240219-serco-leisure-operating-limited-en.pdf
(c10-04) https://ico.org.uk/media2/woalogoc/20240219-serco-leisure-operating-limited-en.pdf
(c10-05) https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/how-do-we-ensure-individual-rights-in-our-ai-systems/ · https://www.legislation.gov.uk/eur/2016/679/article/22A · https://www.legislation.gov.uk/eur/2016/679/article/35 · https://www.legislation.gov.uk/ukpga/2010/15/section/39 · https://eur-lex.europa.eu/eli/reg/2026/1744/oj · https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/how-do-we-ensure-fairness-in-ai/what-is-the-impact-of-article-22-of-the-uk-gdpr-on-fairness/ (checked on 14 October 2026: EUR-Lex answers 202 to automated download and opens in a browser)
(c10-06) https://www.legislation.gov.uk/eur/2016/679/article/22A · https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/how-do-we-ensure-individual-rights-in-our-ai-systems/ · https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/03/automated-decisions-can-streamline-the-hiring-process-with-the-right-safeguards-in-place/ · https://ico.org.uk/about-the-ico/what-we-do/our-plans-for-new-and-updated-guidance/technology/
(c10-07) https://publications.parliament.uk/pa/jt5902/jtselect/jtrights/160/report.html · https://eur-lex.europa.eu/eli/reg/2026/1744/oj · https://www.legislation.gov.uk/eur/2016/679/article/35 · https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/02/ico-orders-serco-leisure-to-stop-using-facial-recognition-technology/ · https://committees-api.parliament.uk/api/Publications/54971/Document/304882/OriginalFormat · https://ico.org.uk/media2/migrated/4021971/biometrics-foresight-report.pdf (checked on 14 October 2026: 403 to automated download; EUR-Lex answers 202 to automated download and opens in a browser)
(c10-08) https://www.gov.uk/government/consultations/ai-regulation-a-pro-innovation-approach-policy-proposals/outcome/a-pro-innovation-approach-to-ai-regulation-government-response · https://eur-lex.europa.eu/eli/reg/2024/1689/oj (checked on 14 October 2026: EUR-Lex answers 202 to automated download and opens in a browser)
(c10-09) https://www.gov.uk/government/speeches/the-kings-speech-2026 · https://bills.parliament.uk/bills/3942 · https://publications.parliament.uk/pa/jt5902/jtselect/jtrights/160/report.html · https://bills-api.parliament.uk/api/v1/Bills?SearchTerm=artificial%20intelligence&Take=20 · https://committees-api.parliament.uk/api/Publications/54971/Document/304882/OriginalFormat (checked on 14 October 2026: 403 to automated download)
(c10-10) https://eur-lex.europa.eu/eli/reg/2024/1689/oj · https://www.legislation.gov.uk/eur/2016/679/article/28 · https://www.legislation.gov.uk/ukpga/2010/15/section/39 · https://www.legislation.gov.uk/ukpga/2010/15/section/109 (checked on 14 October 2026: EUR-Lex answers 202 to automated download and opens in a browser)
(c10-11) https://www.legislation.gov.uk/ukpga/1996/18/section/1 · https://www.legislation.gov.uk/eur/2016/679/article/13 · https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/monitoring-workers/data-protection-and-monitoring-workers/ · https://www.legislation.gov.uk/eur/2016/679/chapter/III/section/1
(c10-13) https://www.gov.uk/government/consultations/make-work-pay-workplace-monitoring-technologies
(c10-14) https://www.legislation.gov.uk/eur/2016/679/article/22A · https://www.legislation.gov.uk/eur/2016/679/article/22B · https://www.legislation.gov.uk/eur/2016/679/article/22C
(c10-15) https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/how-do-we-ensure-individual-rights-in-our-ai-systems/
(c10-16) https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/03/automated-decisions-can-streamline-the-hiring-process-with-the-right-safeguards-in-place/ · https://ico.org.uk/about-the-ico/what-we-do/recruitment-rewired/
(c10-17) https://www.theguardian.com/technology/2018/oct/10/amazon-hiring-ai-gender-bias-recruiting-engine
(c10-19) https://www.equalityhumanrights.com/sites/default/files/2024/Equality%20and%20Human%20Rights%20Commission%20Annual%20Report%20and%20Accounts%202023-2024.pdf
(c10-20) https://www.autoriteitpersoonsgegevens.nl/uploads/imported/boetebesluit_belastingdienst.pdf · https://www.autoriteitpersoonsgegevens.nl/actueel/boete-belastingdienst-voor-discriminerende-en-onrechtmatige-werkwijze
(c10-21) https://www.legislation.gov.uk/ukpga/2018/12/section/3 · https://www.legislation.gov.uk/ukpga/2025/18/contents · https://www.legislation.gov.uk/eur/2016/679/article/22A · https://www.legislation.gov.uk/eur/2016/679/chapter/III/section/1 · https://www.legislation.gov.uk/uksi/2026/425/made · https://www.legislation.gov.uk/ukpga/2018/12/section/164A · https://www.legislation.gov.uk/uksi/2026/1015/made · https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/03/automated-decisions-can-streamline-the-hiring-process-with-the-right-safeguards-in-place/ · https://www.gov.uk/government/consultations/make-work-pay-workplace-monitoring-technologies · https://eur-lex.europa.eu/eli/reg/2026/1744/oj · https://www.legislation.gov.uk/uksi/2026/82/pdfs/uksi_20260082_en.pdf · https://www.legislation.gov.uk/uksi/2026/425/pdfs/uksi_20260425_en.pdf · https://www.legislation.gov.uk/uksi/2026/1015/pdfs/uksi_20261015_en.pdf (checked on 14 October 2026: EUR-Lex answers 202 to automated download and opens in a browser)

Chapter 11 · Who inspects you tomorrow, and how you win

Chapter 12 · Making AI show in the profit and loss account

(c12-01) https://srinstitute.utoronto.ca/news/power-and-prediction-avi-goldfarb-on-the-disruptive-economics-of-ai
(c12-02) https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/
(c12-03) https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/
(c12-04) https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/
(c12-05) https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/
(c12-06) https://www.mckinsey.com/capabilities/quantumblack/our-insights/the-state-of-ai (checked on 13 October 2026: McKinsey does not answer automated download)
(c12-07) https://www.mckinsey.com/capabilities/quantumblack/our-insights/the-state-of-ai-how-organizations-are-rewiring-to-capture-value (checked on 13 October 2026: McKinsey does not answer automated download)
(c12-08) https://www.mckinsey.com/capabilities/quantumblack/our-insights/the-state-of-ai (checked on 13 October 2026: McKinsey does not answer automated download)
(c12-09) https://www.bcg.com/publications/2025/closing-the-ai-impact-gap (checked on 13 October 2026: 403 to automated download)
(c12-10) https://www.bcg.com/publications/2026/ai-at-work-why-strategy-matters-more-than-tools (checked on 13 October 2026: 403 to automated download)
(c12-11) https://www.youtube.com/watch?v=KYGyvIjI2Vk · https://writer.com/blog/enterprise-ai-adoption-survey-results-press-release/ · https://www.youtube.com/watch?v=XSkXzjtaRc0 · https://www.youtube.com/watch?v=KEQjwE7hDjk
(c12-12) https://www.personneltoday.com/hr/ikea-interior-design-training/
(c12-13) https://www.youtube.com/watch?v=KEQjwE7hDjk
(c12-14) https://www.youtube.com/watch?v=KEQjwE7hDjk
(c12-15) https://www.cnbc.com/2025/04/07/shopify-ceo-prove-ai-cant-do-jobs-before-asking-for-more-headcount.html
(c12-21) https://www.oneusefulthing.org/p/co-existence-and-the-end-of-co-intelligence

Chapter 13 · If your reviewer never disagrees, the machine decides

Chapter 14 · The AI training each profile needs

(c14-01) https://www.gsb.stanford.edu/insights/co-intelligence-ai-masterclass-ethan-mollick
(c14-02) https://www.gov.uk/government/publications/microsoft-365-copilot-experiment-cross-government-findings-report
(c14-03) https://www.gov.uk/government/publications/microsoft-365-copilot-experiment-cross-government-findings-report
(c14-04) https://www.gov.uk/government/publications/an-evaluation-of-dwps-microsoft-copilot-365-trial
(c14-05) https://www.gov.uk/government/publications/an-evaluation-of-dwps-microsoft-copilot-365-trial
(c14-06) https://eur-lex.europa.eu/eli/reg/2026/1744/oj (checked on 14 October 2026: EUR-Lex answers 202 to automated download and opens in a browser)
(c14-07) https://eur-lex.europa.eu/eli/reg/2026/1744/oj (checked on 14 October 2026: EUR-Lex answers 202 to automated download and opens in a browser)
(c14-08) https://eur-lex.europa.eu/eli/reg/2026/1744/oj · https://www.gov.uk/government/consultations/ai-regulation-a-pro-innovation-approach-policy-proposals/outcome/a-pro-innovation-approach-to-ai-regulation-government-response (checked on 14 October 2026: EUR-Lex answers 202 to automated download and opens in a browser)
(c14-09) (no public address: the author's own proposal, not a published framework)
(c14-10) https://doi.org/10.1037/apl0000241
(c14-11) https://www.gallup.com/workplace/694682/manager-support-drives-employee-adoption.aspx
(c14-12) https://www.oneusefulthing.org/p/making-ai-work-leadership-lab-and
(c14-13) https://www.gov.uk/government/publications/ai-playbook-for-the-uk-government · https://assets.publishing.service.gov.uk/media/67aca2f7e400ae62338324bd/AI_Playbook_for_the_UK_Government__12_02_.pdf
(c14-16) https://www.gov.uk/government/publications/microsoft-365-copilot-experiment-cross-government-findings-report
(c14-17) https://www.nber.org/papers/w22951 · https://doi.org/10.1093/qje/qjx049 (checked on 13 October 2026: DOI registered; the publisher answers 403 to automated download)
(c14-19) https://www.gov.uk/government/publications/an-evaluation-of-dwps-microsoft-copilot-365-trial
(c14-14) https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/how-do-we-ensure-individual-rights-in-our-ai-systems/ · https://eur-lex.europa.eu/eli/reg/2026/1744/oj (checked on 14 October 2026: EUR-Lex answers 202 to automated download and opens in a browser)

Chapter 15 · Eighteen minutes a month that hold it all together

(c15-01) https://www.linkedin.com/pulse/enfoque-agile-operational-safety-en-el-ejercicio-sky-alejandro-a--6xhmf/
(c15-02) https://www.linkedin.com/pulse/enfoque-agile-operational-safety-en-el-ejercicio-sky-alejandro-a--6xhmf/
(c15-03) http://www.victoryprinciples.com/wp-content/uploads/2009/07/tc-25-20-ldrs-guide-aars.pdf (third-party copy; no official copy online)
(c15-04) https://doi.org/10.1177/0018720812448394 (checked on 13 October 2026: DOI registered; the publisher answers 403 to automated download)
(c15-05) https://hbr.org/2005/07/learning-in-the-thick-of-it
(c15-06) https://www.legislation.gov.uk/ukpga/2006/46/section/174
(c15-09) https://doi.org/10.1177/0956797614524255 · https://doi.org/10.1177/1745691615577794 (checked on 13 October 2026: DOI registered; the publisher answers 403 to automated download)
(c15-10) https://doi.org/10.1037/apl0000821
(c15-11) https://doi.org/10.1037/0021-9010.90.5.857

Chapter 16 · When AI fails: learning without looking for culprits

Chapter 17 · What you do on Monday

(c17-01) https://www.aboutamazon.com/news/company-news/2016-letter-to-shareholders
(c17-02) https://s2.q4cdn.com/299287126/files/doc_financials/annual/2015-Letter-to-Shareholders.PDF
(c17-03) (no public address: the course's own work («How to Bring AI into Your Company»); the sources for each line are in chapters 3 to 16)
(c17-04) https://www.aboutamazon.com/news/company-news/2016-letter-to-shareholders
(c17-05) https://www.youtube.com/watch?v=fr78adfAnuA
(c17-06) https://www.iese.edu/es/insight/articulos/amparo-moraleda-airbus-ia-gobierno-corporativo/
(c17-07) https://www.iese.edu/es/insight/articulos/amparo-moraleda-airbus-ia-gobierno-corporativo/
(c17-08) https://cisr.mit.edu/publication/2024_1201_EnterpriseAIMaturityModel_WeillWoernerSebastian · https://cisr.mit.edu/publication/2025_0801_EnterpriseAIMaturityUpdate_WoernerSebastianWeillKaganer

Appendix C · The tools, book version

(apC-01) https://www.legislation.gov.uk/eur/2016/679/article/13 · https://www.legislation.gov.uk/eur/2016/679/chapter/III/section/1 · https://www.legislation.gov.uk/ukpga/2018/12/section/164A · https://www.legislation.gov.uk/ukpga/1996/18/section/1
(apC-02) https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/ai-and-data-protection-risk-toolkit/ · https://www.gov.uk/government/consultations/ai-management-essentials-tool · https://eur-lex.europa.eu/eli/reg/2024/1689/oj (checked on 14 October 2026: EUR-Lex answers 202 to automated download and opens in a browser)
(apC-03) https://www.gov.uk/government/speeches/the-kings-speech-2026 · https://eur-lex.europa.eu/eli/reg/2024/1689/oj · https://eur-lex.europa.eu/eli/reg/2026/1744/oj · https://publications.parliament.uk/pa/jt5902/jtselect/jtrights/160/report.html (checked on 14 October 2026: EUR-Lex answers 202 to automated download and opens in a browser; 403 to automated download)
(apC-04) https://www.youtube.com/watch?v=9RvWcXVaAng
(apC-05) https://www.legislation.gov.uk/eur/2016/679/article/22A · https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/03/automated-decisions-can-streamline-the-hiring-process-with-the-right-safeguards-in-place/ · https://ico.org.uk/about-the-ico/what-we-do/our-plans-for-new-and-updated-guidance/technology/
(apC-06) https://www.legislation.gov.uk/eur/2016/679/article/22C · https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/how-do-we-ensure-individual-rights-in-our-ai-systems/
(apC-07) https://www.gov.uk/cma-cases/cloud-services-market-investigation · https://www.gov.uk/government/news/cma-announces-package-of-actions-on-business-software-and-cloud-services
(apC-08) https://www.gov.uk/government/publications/ai-playbook-for-the-uk-government · https://www.judiciary.uk/guidance-and-resources/artificial-intelligence-ai-judicial-guidance-october-2025/ · https://assets.publishing.service.gov.uk/media/67aca2f7e400ae62338324bd/AI_Playbook_for_the_UK_Government__12_02_.pdf

The next step

(ps-01) https://www.ukas.com/resources/latest-news/ukas-grants-first-aims-accreditation/ · https://www.gov.uk/government/speeches/the-kings-speech-2026

Everything from the book