When an AI system causes harm, the question soon turns to the management board. The session sets out the board's duties of oversight under company law, the AI Act and data protection law, the decisions that should be documented before deployment, and the warning signs that an AI project has outgrown its governance. Examples come from court cases and regulatory decisions on AI.