Halide Yılmaz Governance
7 posts
Governance10 minThe EU AI Act's New Timeline: What the 2026 Omnibus Changed and What Is Actually in Force Today
The EU AI Act was not delayed; part of it was. What Regulation (EU) 2026/1744 actually changed, why Article 50 transparency has applied since 2 August 2026, and how the 2 December 2027 and 2 August 2028 deadlines now work, traced to primary sources.
Governance9 minHigh-Risk AI Systems: What an ML Team Actually Has to Build Before December 2027
The Article 9-15 obligations for high-risk AI systems, translated from legal language into engineering deliverables: a risk register, data governance, Annex IV technical documentation, event logging, an accuracy declaration and a human oversight design.
Governance9 minLabelling AI-Generated Content: Article 50, Machine-Readable Watermarks and C2PA
Article 50 transparency obligations took effect on 2 August 2026 and were not deferred. What machine-readable marking actually means, hard binding versus soft binding, C2PA content credentials, and why a watermark usually dies at the first re-encode.
Governance8 minISO/IEC 42001 for Engineers: What an AI Management System Actually Requires — and Why It Is Not AI Act Compliance
What ISO/IEC 42001 actually requires, how its Annex A controls map onto real ML artefacts, what ISO/IEC 42005 and 42006 added, and why the standard is not harmonised and therefore grants no presumption of conformity under the EU AI Act.
Governance8 minThe NIST AI Risk Management Framework in Practice: Turning Govern-Map-Measure-Manage into Engineering Work
Instead of restating the four functions of the NIST AI RMF, this post turns them into engineering work. Why the MEASURE function is the one most teams leave empty, what the Generative AI Profile added, and why the framework is currently under revision.
Governance9 minAI Impact Assessment: How FRIA, ISO 42005 and a DPIA Differ — and How to Run One
A fundamental rights impact assessment, an ISO/IEC 42005 impact assessment and a data protection impact assessment are three different documents. Who each one binds, when it is required, when it applies, and how to run them together without doing the work three times.
Governance2 minModel Cards and AI Governance: Documenting a Model
A model card records what a model does, where it fails, and what data trained it. A practical look at governance, auditability and risk classification.