Earlier chapters met the law one article at a time: Chapter 12 as chains of answerability, Chapter 13 as the duties of the management body, Chapter 18 as the duties of a director in a public authority. This chapter collects them. It reads the articles that reach a leader, says whom each addresses, and turns each into a duty with a named holder, an artefact and evidence with an age. It concerns all five leadership functions. L1 Orient: the law bounds the strategy a leader can choose. L2 Decide: some decisions belong to a body, an office or a person, and the law says which. L3 Organise: duties of oversight and competence fix how human-agent work is structured. L4 Enable: the literacy and training duties are the law's part of development. L5 Answer: every instrument ends in a person or a body that must answer, and none lets a system do so.
Everything below is framed as an organisational and architectural implication and not as legal advice. Each article was read in the Official Journal text or in the official or consolidated national publication on 11 November 2026, and each quotation is from the text read. What could not be verified is listed in the last section. The chapter builds on earlier conclusions: that someone must turn each article into a control (The Transformed Security Architect, Chapter 18), that a register mapping each obligation to a control and an evidence artefact with an age is re-read against the live text every six months (AI Purple, Chapter 21), and that decision rights are requirements with a holder, deputies and a ceiling for AI (AI Operations, Chapter 22) (225, Nordqvist, 2026) (228, Nordqvist, 2026) (229, Nordqvist, 2026).
An article is not yet a duty. It becomes one when four things are fixed: who is addressed, what the addressee must do, what the addressee must be able to show, and by when. The first is the one leaders get wrong most often, because the instruments of this chapter address three kinds of addressee, and the kind decides who may hold the duty.
Primary topics explored
- Reading an article as a duty
- The AI Act: Articles 4, 14, 26, 27 and 50
- DORA: Articles 5, 6 and 13
- NIS 2: Articles 20 and 21
- The GDPR: Articles 5, 22, 24 and 35
- Employment, equality and platform-work law at the boundary
About AI Leader
AI Leader is Book 11 of The Transformed Architecture. It takes leadership as its subject and asks what happens when AI is used broadly: the five leadership functions (orient, decide, organise, enable, answer), the delegation ladder and the Level 4 prohibitions, the answerability principle (name, explain, reach), the span and the middle layer, human-agent work, the board and the management body, change and adoption as claims that need evidence, regulation (the AI Act, DORA, NIS 2, the GDPR), ethics and sovereignty, and the leader as a person, for European enterprises and public authorities.
It builds on the conclusions of Architecture as Code, AI Governance, AI Platform and Security, AI Red Team, AI Threat, The Transformed Security Architect, AI Boss, AI Blue, AI Purple and AI Operations.
chairs and members of boards, chief executives and executive teams, the changing C-suite, middle managers and first-line leaders, heads of public authorities and the politicians who oversee them, HR specialists, works councils and unions, architects who advise leaders, and supervisors and auditors.
Gunnar Nordqvist
Conceived, directed and published the books of The Transformed Architecture.
Continue with the full chapter
Chapter 24: Regulation as Constraint: The AI Act, DORA, NIS 2, the GDPR, Company Law and Public Law in AI Leader gives the detailed explanations, practical examples and implementation patterns behind this summary.
This whitepaper belongs to “Regulation, Ethics and Responsibility” and is one of 37 drawn from the manuscript.