Understanding the EU AI Act

A guide to the world’s first comprehensive Artificial Intelligence (AI) regulation. How will it impact your company?

The EU’s AI Act is a comprehensive new law designed to regulate the use of artificial intelligence systems in the European Union. It is one of the world’s first regulatory attempts to control the use of AI as this rapidly evolving technology has incredibly broad societal and economic implications. The AI Act will likely set a global standard for countries who want to both harness the potential benefits of AI while mitigate against its possible risks.

Once it comes into force, it will be the world’s first comprehensive legislation on AI and could set a standard for laws enacted in other parts of the world. The EU’s AI Act will prevent operators from certain uses of the technology and will require transparency on its use. While countries worldwide are taking legislative action to try and rein in AI, the EU’s AI Act will likely be a game changer. Similar to the way that the EU set a high standard for data protection with the General Data Protection Regulation (GDPR), which said anyone who wants to do business in the EU must respect EU laws, the impact of the AI Act will likely be as strong and will inspire a host of similar regulations throughout the world.

Any company with an AI system in the EU market or an AI system that impacts people in the EU will need to be compliant with the regulation. Of course, it is unclear how AI will evolve. We are just beginning to see what this technology can do. But with this regulation it is clear that the EU is serious about the technology and wants to protect users’ fundamental rights and freedoms.

After a final deal is reached on the AI Act, it will come into force by 2025. Its widespread impact means that companies need to start understanding now what will be expected of them.

And that is why we created this guide. It will help you understand what the EU AI Act is, how that will affect the global response to regulating AI and, most significantly, it will clarify what impact all this will have on your company.

Guide to Understanding the EU AI Act

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

“In a world older and more complete than ours they move finished and complete, gifted with extensions of the senses we have lost or never attained, living by voices we shall never hear.”