Artificial Intelligence Act

European Union regulation on artificial intelligence

RegulationEuropean Union regulation

Title| Regulation ... laying down harmonised rules on artificial intelligence (Artificial Intelligence Act)
Preparative texts
Commission proposal| 2021/206

The Artificial Intelligence Act (AI Act) is a European Union regulation on artificial intelligence (AI) in the European Union. It aims to establish a common regulatory and legal framework for AI.[1] Proposed by the European Commission on 21 April 2021[2] and passed in the European Parliament on 13 March 2024,[3] it was approved by the EU Council on 21 May 2024.

Its scope would encompass all types of AI in a broad range of sectors (exceptions include AI systems used solely for military, national security, research, and non-professional purpose[4]). As a piece of product regulation, it would not confer rights on individuals, but would regulate the providers of AI systems, and entities using AI in a professional context.[5]

The AI Act was revised following the rise in popularity of generative AI systems such as ChatGPT, whose general-purpose capabilities present different stakes and did not fit the defined framework.[6] More restrictive regulations are planned for powerful generative AI systems with systemic impact.[7]

The EU Artificial Intelligence Act aims to classify and regulate AI applications based on their risk to cause harm. This classification includes four categories of risk ("unacceptable", "high", "limited" and "minimal"), plus one additional category for general-purpose AI. Applications deemed to represent unacceptable risks are banned. High-risk ones must comply to security, transparency and quality obligations and undergo conformity assessments. Limited-risk AI applications only have transparency obligations, and those representing minimal risks are not regulated. For general-purpose AI, transparency requirements are imposed, with additional and thorough evaluations when representing particularly high risks.[7][8]

The Act creates a European Artificial Intelligence Board to promote national cooperation and ensure compliance with the regulation.[9]

The AI Act is expected to have a large impact on the economy. Like the European Union's General Data Protection Regulation, it can apply extraterritorially to providers from outside the EU, if they have products within the EU.[5]

## Provisions[edit]

### Risk categories[edit]

There are different risk categories depending on the type of application, and one specifically dedicated to general-purpose generative AI :

* Unacceptable risk: AI applications that fall under this category are banned. This includes AI applications that manipulate human behaviour, those that use real-time remote biometric identification (including facial recognition) in public spaces, and those used for social scoring (ranking people based on their personal characteristics, socio-economic status or behaviour).[8]
* High-risk: the AI applications that pose significant threats to health, safety, or the fundamental rights of persons. Notably, AI systems used in health, education, recruitment, critical infrastructure management, law enforcement or justice. They are subject to quality, transparency, human oversight and safety obligations, and in some cases a Fundamental Rights Impact Assessment[10] is required. They must be evaluated before they are placed on the market, as well as during their life cycle. The list of high-risk applications can be expanded without requiring to modify the AI Act itself.[5]
* General-purpose AI ("GPAI"): this category was added in 2023, and includes in particular foundation models like ChatGPT. They are subject to transparency requirements. High-impact general-purpose AI systems which could pose systemic risks (notably those trained using a computation capability of more than 1025 FLOPS[11]) must also undergo a thorough evaluation process.[8]
* Limited risk: these systems are subject to transparency obligations aimed at informing users that they are interacting with an artificial intelligence system and allowing them to exercise their choices. This category includes, for example, AI applications that make it possible to generate or manipulate images, sound or videos (like deepfakes).[8] In this category, free and open-source models whose parameters are publicly available are not regulated, with some exceptions.[11][12]
* Minimal risk: this includes for example AI systems used for video games or spam filters. Most AI applications are expected to be in this category.[13] They are not regulated, and Member States are prevented from further regulating them via maximum harmonisation. Existing national laws related to the design or use of such systems are disapplied. However, a voluntary code of conduct is suggested.[14]

### Institutional governance[edit]

The AI Act, per the European Parliament Legislative Resolution of 13 March 2024, includes the establishment of various new institutions in Article 64 and the following articles. These institutions are tasked with implementing and enforcing the AI Act. The approach is characterized by a multidimensional combination of centralized and decentralized, as well as public and private enforcement aspects, due to the interaction of various institutions and actors at both EU and national levels.

The following new institutions will be established:[15][16]

1. AI Office: Attached to the European Commission, this authority will coordinate the implementation of the AI Act in all Member States and oversee the compliance of GPAI providers.
2. European Artificial Intelligence Board: Composed of one representative from each Member State, the Board will advise and assist the Commission and Member States to facilitate the consistent and effective application of the AI Act. Its tasks include gathering and sharing technical and regulatory expertise, providing recommendations, written opinions, and other advice.
3. Advisory Forum: Established to advise and provide technical expertise to the Board and the Commission, this forum will represent a balanced selection of stakeholders, including industry, start-ups, small and medium-sized enterprises, civil society, and academia, ensuring that a broad spectrum of opinions is represented during the implementation and application process.
4. Scientific Panel of Independent Experts: This panel will provide technical advice and input to the AI Office and national authorities, enforce rules for GPAI models (notably by launching qualified alerts of possible risks to the AI Office), and ensure that the rules and implementations of the AI Act correspond to the latest scientific findings.

While the establishment of new institutions is planned at the EU level, Member States will have to designate "national competent authorities".[17] These authorities will be responsible for ensuring the application and implementation of the AI Act, and for conducting "market surveillance".[18] They will verify that AI systems comply with the regulations, notably by checking the proper performance of conformity assessments and by appointing third-parties to carry out external conformity assessments.

### Enforcement[edit]

The Act regulates the entry to the EU internal market using the New Legislative Framework. The AI Act contains the most important provisions that all AI systems that want access to the EU internal market will have to comply with. These requirements are called 'essential requirements'. Under the New Legislative Framework, these essential requirements are passed on to European Standardisation Organisations who draw up technical standards that further specify the essential requirements.[19]

The Act requires that member states set up their own notifying bodies. Conformity assessments should take place in order to check whether AI-systems indeed conform to the standards as set out in the AI-Act.[20] This conformity assessment is either done by self-assessment, which means that the provider of the AI-system checks for conformity themselves, or this is done through third party conformity assessment which means that the notifying body will carry out the assessment.[21] Notifying bodies do retain the possibility to carry out audits to check whether conformity assessment is carried out properly.[22]

There has been criticism that many high-risk AI-systems do not require third party conformity assessment.[22][23][24][25] These critiques are based on the fact that high-risk AI-systems should be assessed by an independent third party to fully secure its safety. Concerns have also been raised by legal scholars surrounding the issue of whether deepfakes used to spread political misinformation or create non-consensual intimate imagery should be considered high-risk AI systems, potentially leading to stricter regulation.[26]

## Legislative procedure[edit]

In February 2020, the European Commission published "White Paper on Artificial Intelligence – A European approach to excellence and trust".[27] In October 2020, debates between EU leaders took place in the European Council. On 21 April 2021, the AI Act was officially proposed by the Commission. On 6 December 2022, the European Council adopted the general orientation, allowing negotiations to begin with the European Parliament. On 9 December 2023, after three days of "marathon" talks, the EU Council and Parliament concluded an agreement.[28]

The law was passed in the European Parliament with an overwhelming majority on 13 March 2024, and was approved by the EU Council on 21 May 2024.[29] It will come into force 20 days after being published in the Official Journal at the end of the legislative term in May.[3][30] After coming into force, there will be a delay before it becomes applicable, which depends on the type of application. This delay is 6 months for bans on "unacceptable risk" AI systems, 9 months for codes of practice, 12 months for general-purpose AI systems, 36 months for some obligations related to "high-risk" AI systems, and 24 months for everything else.[31][30]

Further information: European Union legislative procedure

## See also[edit]

* Ethics of artificial intelligence
* Regulation of artificial intelligence
* Regulation of algorithms
* Algorithmic bias

## References[edit]

1. ^ "Proposal for a Regulation laying down harmonised rules on artificial intelligence | Shaping Europe's digital future". digital-strategy.ec.europa.eu. 21 April 2021. Archived from the original on 4 January 2023. Retrieved 9 January 2023.
2. ^ "EUR-Lex - 52021PC0206 - EN - EUR-Lex". eur-lex.europa.eu. Archived from the original on 23 August 2021. Retrieved 7 September 2021.
3. ^ a b "World's first major act to regulate AI passed by European lawmakers". CNBC. 14 March 2024. Archived from the original on 13 March 2024. Retrieved 13 March 2024.
4. ^ "Artificial intelligence act: Council and Parliament strike a deal on the first rules for AI in the world". Council of the EU. 9 December 2023. Archived from the original on 10 January 2024. Retrieved 6 January 2024.
5. ^ a b c Mueller, Benjamin (4 May 2021). "The Artificial Intelligence Act: A Quick Explainer". Center for Data Innovation. Archived from the original on 14 October 2022. Retrieved 6 January 2024.
6. ^ Coulter, Martin (7 December 2023). "What is the EU AI Act and when will regulation come into effect?". Reuters. Archived from the original on 10 December 2023. Retrieved 11 January 2024.
7. ^ a b Espinoza, Javier (9 December 2023). "EU agrees landmark rules on artificial intelligence". Financial Times. Archived from the original on 29 December 2023. Retrieved 6 January 2024.
8. ^ a b c d "EU AI Act: first regulation on artificial intelligence". European Parliament News. Archived from the original on 10 January 2024. Retrieved 6 January 2024.
9. ^ Propp, Mark MacCarthy and Kenneth (4 May 2021). "Machines learn that Brussels writes the rules: The EU's new AI regulation". Brookings. Archived from the original on 27 October 2022. Retrieved 7 September 2021.
10. ^ Mantelero, Alessandro (2022), Beyond Data. Human Rights, Ethical and Social Impact Assessment in AI, Information Technology and Law Series, vol. 36, The Hague: Springer-T.M.C. Asser Press, doi:10.1007/978-94-6265-531-7, ISBN 978-94-6265-533-1
11. ^ a b Bertuzzi, Luca (7 December 2023). "AI Act: EU policymakers nail down rules on AI models, butt heads on law enforcement". Euractiv. Archived from the original on 8 January 2024. Retrieved 6 January 2024.
12. ^ "Regulating Chatbots and Deepfakes". mhc.ie. Mason Hayes & Curran. Archived from the original on 9 January 2024. Retrieved 11 January 2024.
13. ^ Liboreiro, Jorge (21 April 2021). "'Higher risk, stricter rules': EU's new artificial intelligence rules". Euronews. Archived from the original on 6 January 2024. Retrieved 6 January 2024.
14. ^ Veale, Michael (2021). "Demystifying the Draft EU Artificial Intelligence Act". Computer Law Review International. 22 (4). arXiv:2107.03721. doi:10.31235/osf.io/38p5f. S2CID 241559535.
15. ^ Bertuzzi, Luca (21 November 2023). "EU lawmakers to discuss AI rulebook's revised governance structure". Euractiv. Archived from the original on 22 May 2024. Retrieved 18 April 2024.
16. ^ Friedl, Paul; Gasiola, Gustavo Gil (7 February 2024). "Examining the EU's Artificial Intelligence Act". Verfassungsblog. Archived from the original on 22 May 2024. Retrieved 16 April 2024.
17. ^ "Artificial Intelligence Act". European Parliament. 13 March 2024. Archived from the original on 18 April 2024. Retrieved 18 April 2024. Article 3 - definitions. Excerpt: "‘national competent authority’ means the national supervisory authority, the notifying authority and the market surveillance authority;"
18. ^ "Artificial Intelligence – Questions and Answers". European Commission. 12 December 2023. Archived from the original on 6 April 2024. Retrieved 17 April 2024.
19. ^ Tartaro, Alessio (2023). "Regulating by standards: current progress and main challenges in the standardisation of Artificial Intelligence in support of the AI Act". European Journal of Privacy Law and Technologies. 1 (1). Archived from the original on 3 December 2023. Retrieved 10 December 2023.
20. ^ "EUR-Lex - 52021SC0084 - EN - EUR-Lex". eur-lex.europa.eu. Archived from the original on 17 April 2023. Retrieved 17 April 2023.
21. ^ Veale, Michael; Borgesius, Frederik Zuiderveen (1 August 2021). "Demystifying the Draft EU Artificial Intelligence Act — Analysing the good, the bad, and the unclear elements of the proposed approach". Computer Law Review International. 22 (4): 97–112. arXiv:2107.03721. doi:10.9785/cri-2021-220402. ISSN 2194-4164. S2CID 235765823.
22. ^ a b Casarosa, Federica (1 June 2022). "Cybersecurity certification of Artificial Intelligence: a missed opportunity to coordinate between the Artificial Intelligence Act and the Cybersecurity Act". International Cybersecurity Law Review. 3 (1): 115–130. doi:10.1365/s43439-021-00043-6. ISSN 2662-9739. S2CID 258697805.
23. ^ Smuha, Nathalie A.; Ahmed-Rengers, Emma; Harkens, Adam; Li, Wenlong; MacLaren, James; Piselli, Riccardo; Yeung, Karen (5 August 2021). "How the EU Can Achieve Legally Trustworthy AI: A Response to the European Commission's Proposal for an Artificial Intelligence Act". doi:10.2139/ssrn.3899991. S2CID 239717302. SSRN 3899991. Archived from the original on 26 February 2024. Retrieved 14 March 2024.
24. ^ Almada, Marco; Petit, Nicolas (27 October 2023). "The EU AI Act: Between Product Safety and Fundamental Rights". Robert Schuman Centre for Advanced Studies Research Paper No. 2023/59. doi:10.2139/ssrn.4308072. S2CID 255388310. SSRN 4308072. Archived from the original on 17 April 2023. Retrieved 14 March 2024.
25. ^ Ebers, Martin; Hoch, Veronica R. S.; Rosenkranz, Frank; Ruschemeier, Hannah; Steinrötter, Björn (December 2021). "The European Commission's Proposal for an Artificial Intelligence Act—A Critical Assessment by Members of the Robotics and AI Law Society (RAILS)". J. 4 (4): 589–603. doi:10.3390/j4040043. ISSN 2571-8800.
26. ^ Romero-Moreno, Felipe (29 March 2024). "Generative AI and deepfakes: a human rights approach to tackling harmful content". International Review of Law, Computers & Technology. 39 (2): 1–30. doi:10.1080/13600869.2024.2324540. hdl:2299/20431. ISSN 1360-0869.
27. ^ "White Paper on Artificial Intelligence – a European approach to excellence and trust". European Commission. 19 February 2020. Archived from the original on 5 January 2024. Retrieved 6 January 2024.
28. ^ "Timeline - Artificial intelligence". European Council. Archived from the original on 6 January 2024. Retrieved 6 January 2024.
29. ^ Browne, Ryan (21 May 2024). "World's first major law for artificial intelligence gets final EU green light". CNBC. Archived from the original on 21 May 2024. Retrieved 22 May 2024.
30. ^ a b David, Emilia (14 December 2023). "The EU AI Act passed — now comes the waiting". The Verge. Archived from the original on 10 January 2024. Retrieved 6 January 2024.
31. ^ "Artificial Intelligence Act: MEPs adopt landmark law". European Parliament. 13 March 2024. Archived from the original on 15 March 2024. Retrieved 14 March 2024.

## External links[edit]

* Artificial Intelligence Act
* Proposal for a Regulation of the European Parliament and of the Council Laying Down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act) on EUR-Lex
* Procedure 2021/0106/COD on EUR-Lex
* Procedure 2021/0106(COD) on ŒIL

Authority control databases |

* VIAF

|

* v
* t
* e

Existential risk from artificial intelligence

Concepts|

* AGI
* AI alignment
* AI capability control
* AI safety
* AI takeover
* Consequentialism
* Effective accelerationism
* Ethics of artificial intelligence
* Existential risk from artificial general intelligence
* Friendly artificial intelligence
* Instrumental convergence
* Intelligence explosion
* Longtermism
* Machine ethics
* Suffering risks
* Superintelligence
* Technological singularity

Organizations|

* Alignment Research Center
* Center for AI Safety
* Center for Applied Rationality
* Center for Human-Compatible Artificial Intelligence
* Centre for the Study of Existential Risk
* EleutherAI
* Future of Humanity Institute
* Future of Life Institute
* Google DeepMind
* Humanity+
* Institute for Ethics and Emerging Technologies
* Leverhulme Centre for the Future of Intelligence
* Machine Intelligence Research Institute
* OpenAI

People|

* Scott Alexander
* Sam Altman
* Yoshua Bengio
* Nick Bostrom
* Paul Christiano
* Eric Drexler
* Sam Harris
* Stephen Hawking
* Dan Hendrycks
* Geoffrey Hinton
* Bill Joy
* Shane Legg
* Elon Musk
* Steve Omohundro
* Huw Price
* Martin Rees
* Stuart J. Russell
* Jaan Tallinn
* Max Tegmark
* Frank Wilczek
* Roman Yampolskiy
* Eliezer Yudkowsky

Other|

* Statement on AI risk of extinction
* Human Compatible
* Open letter on artificial intelligence (2015)
* Our Final Invention
* The Precipice
* Superintelligence: Paths, Dangers, Strategies
* Do You Trust This Computer?
* Artificial Intelligence Act

Category
*[v]: View this template
*[t]: Discuss this template
*[e]: Edit this template