An Honest Guide to AI Compliance

Are you being asked whether your organisation is "AI compliant" — and finding that the honest answer is more complicated than what you can see in a dashboard?
In this session we'll cut through the hype and look at what tools like Microsoft Purview genuinely deliver for organisations navigating UK GDPR, the EU AI Act, and sector-specific regulatory obligations in the age of Copilot.
Starting with a clear map of what the regulations actually require — not in abstract terms but in the specific language of what a compliance officer or DPO needs to demonstrate — we'll walk through what Purview covers, where its coverage ends, and what that gap means for your clients and your deployments.
We'll look at the sensitivity labelling architecture, DLP policy configuration for Copilot interactions, DSPM for AI, and the audit trail capabilities that make Purview genuinely useful. We'll also look at the shadow AI problem that sits outside Purview's perimeter, and the governance conversation you need to have with clients before they assume the tool has solved the compliance problem.

By the end of this session you'll have a clear-eyed picture of what instrumentation can and can't do, a framework for the client conversation that positions governance as an enabler rather than a blocker, and a practical checklist for assessing whether a deployment is genuinely compliant or merely documented.
Whether you're an M365 architect or SharePoint admin working in the regulated industry space, a consultant being asked the compliance question, or a business leader wanting to ensure your own organisation is genuinely in good shape and operationally protected this session will give you the language and the framework to answer it accurate.

Agenda
18:30 - Welcome
19:00 - Brian Painting
20:00 ish - Session closes*