Business agents
Deterministic agents for the most frequent SME questions in the US and the EU. Each answers who is affected, the decision, obligation, risk, action, deadline and verification.
Machine readable: /api/public/v1/business-agent. Not legal advice. Source: NovaCopilot.
Compliance
- European Union: What must we report under NIS2 after a cyber incident?
Affects: Essential or important entity
- European Union: Must a manufacturer report exploited vulnerabilities in its products?
Affects: Manufacturer
Employment
- United States: Do I have to give notice before laying off many employees?
Affects: Employer
- United States: Must I give employees unpaid family and medical leave?
Affects: Employer
- United States: What do I have to check when I hire someone?
Affects: Employer, SME
- United States: Can I treat this worker as an independent contractor?
Affects: Employer, SME
- United States: Which anti-discrimination rules apply to my company?
Affects: Employer
- European Union: What must employers disclose about pay under the new EU rules?
Affects: Employer
- United States: Which payroll records must I keep, and for how long?
Affects: Employer
- United States: Must I offer continued health coverage when an employee leaves?
Affects: Employer
- United States: Must I report newly hired employees to the state?
Affects: Employer
- United States: Must I file workforce data with the EEOC?
Affects: Employer
Privacy
- United States: Does the California privacy law apply to my business?
Affects: Online retailer, Online service, SME
- United States: Do I need parental consent to collect data from children?
Affects: Online service
- United States: What must a clinic do after a health data breach?
Affects: Healthcare provider, Processor
- European Union: Must I report a data breach to the authority?
Affects: Controller, Processor, SME
- European Union: Does my small company need a GDPR processing register?
Affects: Controller, Processor, SME
- European Union: How fast must I answer a request for personal data?
Affects: Controller, SME
- United States: How must my business handle consumer privacy requests in the United States?
Affects: Controller, Online retailer, Online service, SME
- United States: Must I delete a consumer's personal data on request in the United States?
Affects: Controller, Online retailer, Online service, SME
- United States: What must I give a consumer who asks to see their personal data?
Affects: Controller, Online retailer, Online service, SME
- United States: What must my privacy notice contain under US state privacy laws?
Affects: Controller, Online retailer, Online service, SME
- United States: Do I need consent to process sensitive personal data in the United States?
Affects: Controller, Healthcare provider, Online service, SME
- United States: Must I let consumers opt out of sale, sharing and targeted advertising?
Affects: Controller, Online retailer, Online service, SME
Tax
- United States: When do I have to pay withheld payroll taxes?
Affects: Employer, SME
- United States: Which year-end tax forms must my business file?
Affects: Employer, SME
- United States: Do I have to collect sales tax in other states?
Affects: Online retailer, SME
- European Union: Which country's VAT do I charge on online sales to consumers in other EU countries?
Affects: Online retailer, SME
- United States: Do I have to pay federal unemployment tax?
Affects: Employer
AI governance
- United States: What federal rules apply when my business uses or markets AI?
Affects: AI deployer, AI provider, SME
- European Union: Which uses of AI are banned in the EU?
Affects: AI deployer, AI provider
- European Union: Do my staff need AI training under the AI Act?
Affects: AI deployer, AI provider, SME
- European Union: What must my company do when using a high-risk AI system?
Affects: AI deployer, Employer
Financial regulation
- United States: When must a listed company disclose a cyber incident?
Affects: Public company
- United States: Must a non-bank financial firm report a data breach to the FTC?
Affects: Financial services firm
- European Union: What must a financial entity report after a major ICT incident?
Affects: Financial services firm
- European Union: What is needed before offering a crypto-asset to the public in the EU?
Affects: Crypto-asset offeror
- European Union: Do I need a licence to provide crypto-asset services in the EU?
Affects: Crypto-asset service provider
- European Union: What is required to issue an asset-referenced token in the EU?
Affects: Crypto-asset offeror
- European Union: Who may issue an e-money token or stablecoin in the EU?
Affects: Crypto-asset offeror
- European Union: Must I verify the identity of my customers?
Affects: Financial services firm, Obliged entity
- European Union: What must I do if a transaction looks like money laundering?
Affects: Financial services firm, Obliged entity