Artificial Intelligence Act
The Artificial Intelligence Act (AI Act) is a proposed regulation of the European Union. Proposed by the European Commission on 21 April 2021,[1] it aims to introduce a common regulatory and legal framework for artificial intelligence.[2] Its scope encompasses all sectors (except for military), and to all types of artificial intelligence. As a piece of product regulation, it would not confer rights on individuals, but would regulate the providers of artificial intelligence systems, and entities making use of them in a professional capacity.
The proposed EU Artificial Intelligence Act aims to classify and regulate artificial intelligence applications based on their risk to cause harm. This classification primarily falls into three categories: banned practices, high-risk systems, and other AI systems.[3]
Banned practices are those that employ artificial intelligence to cause subliminal manipulation or exploit people's vulnerabilities that may result in physical or psychological harm, make indiscriminate use of real-time remote biometric identification in public spaces for law enforcement, or use AI-derived 'social scores' by authorities to unfairly disadvantage individuals or groups. The Act entirely prohibits the latter, while an authorisation regime is proposed for the first three in the context of law enforcement.[4]
High-risk systems, as per the Act, are those that pose significant threats to health, safety, or the fundamental rights of persons. They require a compulsory conformity assessment, undertaken as self-assessment by the provider, before being launched in the market. Particularly critical applications, such as those for medical devices, require the provider's self-assessment under AI Act requirements to be considered by the notified body conducting the assessment under existing EU regulations, like the Medical Devices Regulation.
AI systems outside the categories above are not subject to any regulation, with Member States largely prevented from further regulating them via maximum harmonisation. Existing national laws related to the design or use of such systems are disapplied. However, a voluntary code of conduct for such systems is envisaged, though not from the outset.[3]
The Act further proposes the introduction of a European Artificial Intelligence Board to promote national cooperation and ensure compliance with the regulation.[5]
Like the European Union's General Data Protection Regulation, the AI Act could become a global standard.[6] It is already having impact beyond Europe; in September 2021, Brazil's Congress passed a bill that creates a legal framework for artificial intelligence.[7] The European Council adopted its general approach on the AI Act on 6 December 2022.[8] Germany supports the Council's position but still sees some need for further improvement as formulated in an accompanying statement by the member state.[9] Among the measures likely to be proposed is for AI developers for products such as Open AI's ChatGPT to declare whether copyrighted material was used to train their technology.[10]
Enforcement
The Act regulates the entry to the EU internal market. To this extent it uses the New Legislative Framework, which can be traced back to the New Approach which dates back to 1985. How this works is as follows: The EU legislator creates the AI-act, this Act contains the most important provisions that all AI-systems that want access to the EU internal market will have to comply with. These requirements are called 'essential requirements'. Under the New Legislative Framework, these essential requirements are passed on to European Standardisation Organisations who draw up technical standards that further specify the essential requirements.
As mentioned above, the Act requires Member States to set up their own notifying bodies. To check whether AI-systems are indeed conform the standards as set out in the AI-Act conformity assessment takes place.[11] This conformity assessment is either done by self-assessment, which means that the provider of the AI-system checks for conformity themselves, or this is done through third party conformity assessment which means that the notifying body will carry out the assessment.[12] Notifying bodies do retain the possibility to carry out audits to check whether conformity assessment is carried out properly.[13]
Under the current proposal it seems to be the case that many high-risk AI-systems do not require third party conformity assessment which is critiqued by some.[13][14][15][16] These critiques are based on the fact that high-risk AI-systems should be assessed by an independent third party to fully secure its safety.
See also
References
- "EUR-Lex - 52021PC0206 - EN - EUR-Lex". eur-lex.europa.eu. Archived from the original on 23 August 2021. Retrieved 7 September 2021.
- "Proposal for a Regulation laying down harmonised rules on artificial intelligence | Shaping Europe's digital future". digital-strategy.ec.europa.eu. Archived from the original on 4 January 2023. Retrieved 9 January 2023.
- Veale, Michael (2021). "Demystifying the Draft EU Artificial Intelligence Act". Computer Law Review International. 22 (4). doi:10.31235/osf.io/38p5f. S2CID 241559535.
- Mueller, Benjamin (4 May 2021). "The Artificial Intelligence Act: A Quick Explainer". Center for Data Innovation. Archived from the original on 14 October 2022. Retrieved 14 November 2021.
- Propp, Mark MacCarthy and Kenneth (4 May 2021). "Machines learn that Brussels writes the rules: The EU's new AI regulation". Brookings. Archived from the original on 27 October 2022. Retrieved 7 September 2021.
- "Home". The Artificial Intelligence Act. 7 September 2021. Archived from the original on 17 February 2022. Retrieved 17 February 2022.
- "Câmara aprova projeto que regulamenta uso da inteligência artificial - Notícias". Portal da Câmara dos Deputados (in Brazilian Portuguese). Archived from the original on 17 February 2022. Retrieved 17 February 2022.
- "Artificial Intelligence Act: Council calls for promoting safe AI that respects fundamental rights". www.consilium.europa.eu. Archived from the original on 9 January 2023. Retrieved 9 January 2023.
- "Proposal for a Regulation of the European Parliament and of the Council laying down harmonised rules on artificial intelligence (Artificial Intelligence Act) and amending certain Union legislative acts General approach - Statement by Germany". www.data.consilium.europa.eu. Archived from the original on 27 January 2023. Retrieved 9 January 2023.
- "European parliament prepares tough measures over use of artificial intelligence". Financial Times. 14 April 2023. Archived from the original on 14 April 2023. Retrieved 14 April 2023.
- "EUR-Lex - 52021SC0084 - EN - EUR-Lex". eur-lex.europa.eu. Archived from the original on 17 April 2023. Retrieved 17 April 2023.
- Veale, Michael; Borgesius, Frederik Zuiderveen (1 August 2021). "Demystifying the Draft EU Artificial Intelligence Act — Analysing the good, the bad, and the unclear elements of the proposed approach". Computer Law Review International. 22 (4): 97–112. arXiv:2107.03721. doi:10.9785/cri-2021-220402. ISSN 2194-4164. S2CID 235765823. Archived from the original on 26 March 2023. Retrieved 17 April 2023.
- Casarosa, Federica (1 June 2022). "Cybersecurity certification of Artificial Intelligence: a missed opportunity to coordinate between the Artificial Intelligence Act and the Cybersecurity Act". International Cybersecurity Law Review. 3 (1): 115–130. doi:10.1365/s43439-021-00043-6. ISSN 2662-9739. S2CID 258697805.
- Smuha, Nathalie A.; Ahmed-Rengers, Emma; Harkens, Adam; Li, Wenlong; MacLaren, James; Piselli, Riccardo; Yeung, Karen (5 August 2021). "How the EU Can Achieve Legally Trustworthy AI: A Response to the European Commission's Proposal for an Artificial Intelligence Act". Rochester, NY. doi:10.2139/ssrn.3899991. S2CID 239717302. SSRN 3899991.
{{cite journal}}
: Cite journal requires|journal=
(help) - Almada, Marco; Petit, Nicolas (20 December 2022). "The EU AI Act: Between Product Safety and Fundamental Rights". Rochester, NY. SSRN 4308072.
{{cite journal}}
: Cite journal requires|journal=
(help) - Ebers, Martin; Hoch, Veronica R. S.; Rosenkranz, Frank; Ruschemeier, Hannah; Steinrötter, Björn (December 2021). "The European Commission's Proposal for an Artificial Intelligence Act—A Critical Assessment by Members of the Robotics and AI Law Society (RAILS)". J. 4 (4): 589–603. doi:10.3390/j4040043. ISSN 2571-8800.