Rafael Luque Ocaña
Founder of Alethexis
Twenty-five years leading data projects in corporate environments: platforms on Azure and Databricks, and data governance and GDPR compliance at leading IBEX-listed companies, in the public sector and elsewhere.
Since 2017, adjunct lecturer at the Universitat Oberta de Catalunya on the Master's in Business Intelligence, Big Data, Data Science and Machine Learning.
Alethexis grew out of something that kept recurring in those projects: organisations knew which systems they had, but could not demonstrate how they had decided to use them.
Verifiable credentials
- CDMP DAMA Associate20250629
- PMP, PMI3371904
- ITIL 4 FoundationGR671117375RL
- TOGAF 9 Foundation140385
- PRINCE2 FoundationGR633126928RL
Articles by this author
- AI literacy: what Article 4 requires now that the Omnibus rewrote it
- Private healthcare: the sector where high risk really is in the core activity — and through two different routes
- AI regulatory sandboxes slipped to 2027, and almost nobody has covered it
- Annex III: the high-risk date is December 2027, not August 2026
- When you stop being the deployer and become the provider: the three scenarios under Article 25
- Serious incidents: the provider reports, but the clock starts when you find out
- Post-market monitoring: the system belongs to the provider, the information is yours
- What an authority can ask you: the article that usually gets cited belongs to the provider, not you
- Annex IV is not an obligation: it's the index of someone else's document
- Minimal risk or high risk: what each one requires, article by article
The articles on this blog cite the text of the Regulation and its amendments. They are not a substitute for legal advice.