Know when a consultant should stop and bring in deeper expertise.
Escalate legal interpretation, high-consequence employment or fundamental-rights questions, ambiguous prohibited-practice analysis and contract/liability disputes.
Escalate privacy issues involving special-category data, lawful basis, DPIAs or complex international data transfers to privacy specialists.
Escalate security architecture, adversarial robustness, model vulnerabilities and technical validation when the consultant cannot independently verify the evidence.
Choose the right escalation owner for four issues: biometric data, model jailbreak vulnerability, contract indemnity, and missing bias test evidence.
AI Act Ready internal consulting method. This is an operational training convention, not a legal rule or accredited certification requirement.