This whitepaper summarises the fast-moving legal landscape around generative AI into practical guidance for creative organisations, sucha as agencies, studios, newsrooms, cultural institutions and freelancers. It explains the AI Act’s scope, roles (provider vs deployer) and risk-based duties, translating transparency and provenance obligations for synthetic media and deepfakes into concrete steps for creative workflows. It clarifies when AI-influenced outputs may attract protection (AI-assisted vs AI-generated), how human selection, editing and composition can be protected, and how to avoid unlawful “lookalikes.” On training data, it maps lawful access under EU text-and-data-mining rules and opt-outs, and situates these against evolving non-EU approaches. A dedicated section addresses output-side risks (unlawful reproduction/communication to the public) and personality and voice rights under European privacy and expression frameworks, with clear guidance for satire, pastiche and artistic uses that avoid deception. The GDPR chapter covers roles and lawful bases, transparency, DPIAs, minimisation, international transfers and common creative scenarios (voice cloning, VFX, marketing). Finally, it highlights contract issues in AI tool terms, such as ownership and licensing, training defaults, attribution, warranties, indemnities and liability, so teams can procure and deploy responsibly. Developed by AP University of Applied Sciences and Arts Antwerp and Timelex, with the support of VLAIO.