AI for European owner's representatives and family offices.

Law no. 1.565 of 3 December 2024 replaced Monaco's 1993 data-protection law and created the APDP, Monaco's data protection authority, with administrative fines up to EUR 10 million or 4 percent of worldwide turnover. The staff files, guest data and preference sheets in an office's AI tools now sit under a modern regime and a regulator establishing its practice.

Under the EU AI Act, the European Union's AI law, the AI literacy duty has applied to organisations deploying AI since 2 February 2025, with no small-office carve-out: an office in Luxembourg or Dublin running ChatGPT or Copilot is inside it, with national authorities supervising from August 2026.

The Act's high-risk list catches AI used for recruitment, selection and evaluation, so an office or its recruiters screening household staff, office hires or crew with AI tooling picks up the deployer duties: competent human oversight, input-data relevance, monitoring, log retention, informing affected workers. Those duties now arrive on a deferred clock ending December 2027 under the EU's AI omnibus (Regulation (EU) 2026/1744, in force since 27 July 2026).

A single family office in Monaco requires government authorisation to operate and is otherwise unregulated in its functions; a multi-family office is a regulated activity under Law n° 1.439 of 2016, with CCAF authorisation, Monaco's supervisor of financial activities, and EUR 300,000 minimum capital for the advisory category. A regulated office reads governance artifacts as licence hygiene; an unregulated one holds the same artifacts as fiduciary practice.

The family office's professional advisers, the lawyers, accountants, corporate service provider and management company, all renew professional indemnity against the Lloyd's Market Association's published AI question list and the Browne Jacobson proposal-form set. The office that asks its own advisers what they answered on the AI section discovers the questionnaire culture one renewal before it reaches the office itself.

The broker's incentive ends at the sale, the yard's at delivery, the management company's at contract renewal. When a loss crosses one of those seams, each party's file shows their piece done, and the shortfall reaches the owner you answer to. Stitching the seams between those parties is the daily craft of the role.

Across the industry, refit projects routinely run 30 to 50 percent over first scope, milestone payments proceed against progress the owner cannot independently verify, and a competent rep's fee on a mid-size refit earns itself back through scope discipline alone. The fee stays defensible exactly as long as the variance stays contained.

A crewed 50-metre runs a dozen-plus employees, a seven-figure operating budget and regulatory exposure across flag, class and port states. A private company of that shape carries an auditor, delegated authorities and minuted decisions; the portfolio side of your desk reconciles overnight while the vessel reports by PDF, a month behind.

Forty-three percent of family offices experienced a cyberattack in the preceding one to two years surveyed, and class rules now require cyber security to be evidenced on new builds, which covers the hull and leaves the office, the crew's phones and the guest data where they were. The sector's own press now pairs cyber and AI governance as a single fiduciary agenda.

Reps are routinely engaged after the build contract is signed, inheriting terms they would have fought, and the role carries no protected title. You hold fiduciary-grade responsibility on a consultant's tenure, terminable at will, which is why the written record you build around the asset is also the record that protects you.