EDPO (European Data Protection Office)’s Post

What I like about EU is the focus on human rights protection. Started from GDPR regulations which came into force back in May 2018 and now moving towards the AI Act regulating AI technology development and implementation. The AI Act was adopted by EU parliament this week. It is expected to be published in May-June this year. "Rules covering AI models like ChatGPT will enter into force 12 months after the law becomes official, while companies must comply with most other provisions in two years." https://lnkd.in/desD_8zJ - love the concise description in the Explorer and Chequer from the official website assisting to navigate through the main concepts of the EU AI Act. https://lnkd.in/dYishXGC - 8 minutes news brief on the Act and the next steps, as well as the impact on the day-to-day experience of EU residents #aiact #regulations #ai #eu https://lnkd.in/dgTqG757

EU AI Act gains committee support, full parliament vote next. #EUAIAct 🤝 Follow us on Discord 🔜: https://lnkd.in/gt823Zd3 🤝 Follow us on Whatsapp 🔜 https://wapia.in/wabeta _ ❇️ Summary: The European Parliament's civil liberties and internal market committees have endorsed draft legislation for regulating applications of artificial intelligence. The EU AI Act sets rules for AI developers based on the power of their models and the purpose for which they intend to apply AI. It includes a list of prohibited uses of AI and rules for high-risk uses, as well as transparency requirements for general purpose AIs and tools like deepfakes and AI chatbots. The law is expected to be adopted and enter into force later this year, with legal requirements increasing between 2024 and 2027. Hashtags: #chatGPT 1. #EUAIAct 2. #AIregulation

🤖 🇪🇺 This weekend, the European Union reached an agreement on the landmark EU AI Act. Fun fact: it covers data governance just as much as, if not more than, AI governance. For example, ⚖️ The Act is particularly concerned with high-risk AI systems; governing them (rather than outlawing them) is key to ensuring the safety of AI without hindering it's development. The first and most important step in doing so is ensuring the quality of the input data - and making sure it’s compliant with existing data privacy regulations. 🔗 The Act underlines the importance of AI “supply chains” - the developer of an AI model becomes responsible for the lineage and provenance of any data they use to train the model. 🚚 Similarly, the developer of an AI model is responsible for how the data produced by that model gets used. The Act mentions the example of an AI operator based in the EU, who uses completely compliant data to train a low-risk model that never even goes to market, but whose outputs are then used by a third party outside of the EU. As data is increasingly consumed by machines rather than humans, the practice of sharing data will become more widespread. It's therefore crucial to ensure data gets shared and distributed in a safe, traceable way. Stay tuned for more details on how we're helping our customers achieve this. https://lnkd.in/ejuB9CRW #ai #gooddata #dataquality #datasharing #datamonetization #gdpr #datapostie

The EU never sleeps on technology. Much like GDPR, this decision will impact the use and reach of AI well beyond the EU's borders. It's one of the largest contiguous economic markets in the world. You may see other governments follow the EU's lead to some degree or another. #AI #artificialintelligence #aistartup https://lnkd.in/dhziiuPM

Today, the European Parliament gave their approval to the EU’s brand new AI law named "The AI Act". This act took 3 years to develop to this point and is widely believed to be transformational in much the same way as the general data regulation (GDPR) was to privacy and information governance. GDPR saw the development of similar regulations globally, so this is quite the moment in how law makers will start to handle AI. Read the full report for further information. If you are time constrained, this is my summary below: 1. Bans and Restrictions: The AI Act will ban certain risky uses of AI that could harm our fundamental rights. By the end of this year, it’ll also outlaw specific cases where the risk is just too much. 2. Transparency and Compliance: Tech companies using AI will need to label AI-generated content and deepfakes. Plus, they’ll have new rules for handling data and making sure humans oversee AI systems. 3. Citizen Empowerment: Brace yourselves—we’re getting an European AI Office. Citizens can complain about AI systems there and demand explanations for AI decisions. https://lnkd.in/d77g6j4v #AI #GDPR #governance #generativeai #deepfakes

The EU's AI Act: A Game Changer for Responsible AI Development #AI #ArtificialIntelligence #EU #Regulation #GDPR The European Union (#EU) has taken a historic step towards shaping the future of Artificial Intelligence (AI) with the implementation of the groundbreaking AI Act. This landmark legislation establishes the first-ever comprehensive #legal framework for AI, aiming to ensure the responsible development, deployment, and use of AI systems across the EU. Here are the key points of the EU AI Act: #Risk-Based Approach: The Act classifies AI #applications into prohibited, high-risk, and low-risk categories. Prohibited applications include social scoring systems used by governments, while high-risk applications like recruitment tools face stricter regulations. #Focus on Safety and Trust: The Act emphasizes the importance of safety, fairness, transparency, and accountability in AI development. It mandates rigorous testing and risk assessments for #high-risk applications. #Human Oversight: The Act emphasizes the need for human oversight in critical decision-making processes involving AI. The Potential Impact of the EU AI Act: The AI Act has the potential to be as transformative as the General Data Protection Regulation (#GDPR) for data privacy. Here's why: #Global Influence: The EU's leadership in AI regulation is likely to set a #global precedent. Companies operating internationally will likely need to comply with the Act's standards, even outside the EU. #Standardization and Trust: The Act promotes clear and consistent rules for AI development, fostering trust and encouraging responsible #innovation. #Consumer Protection: The Act empowers individuals by granting them rights regarding their data used in AI systems and offering avenues to challenge biased or unfair outcomes. The EU AI Act: A Stepping Stone for the #Future of AI The EU AI Act is a significant step towards ensuring the responsible development and use of AI. As with the GDPR, it has the potential to become a global benchmark for ethical AI practices. By prioritizing safety, fairness, and transparency, the Act paves the way for a future where AI benefits society as a whole. What are your thoughts on the EU AI Act? #AIRegulation #FutureofAI #ResponsibleAI #technology #finance #AI #compliance #risk #riskmanagement

The Economist sheds a critical light on Friday's compromises to reach a deal in the #European Trilog on the upcoming #AI_Act: Europe, a laggard in AI, seizes the lead in its regulation https://lnkd.in/dJn5Muy6 from The Economist The article is sceptical that the #AI_Act will result in the same #Brussels_Effect as the #GDPR and concludes: "But instead of trying to be first, Europe might have done better trying to be best—and come up with an ai act that has more rigour and less piling of exceptions on top of exceptions." #weisser_law #ai #KI

🌐 The AI Act has been officially published in the Official Journal of the EU. 📅 Effective from August 1st, 2024, the Act mandates the cessation of prohibited AI use cases' development within six months in the EU. High-risk use cases face additional stringent requirements within two years. The Act has direct responsibilities on providers and deployers/ users of AI systems (yes, even companies just using AI internally). It also has extra territorial scope on Israeli companies. It's crucial to grasp these requirements now and prepare for the era of responsible AI! 🔍 How do you intend to navigate this transformative journey? Would love to help you with this. Read our newsletter on the main items here: https://lnkd.in/drShmr7P Masha Yudashkin Barnea Jaffa Lande #ai_act #AI #gdpr #compliance

Ahead of Tuesday's key meeting, European lawmakers remain undecided on various aspects of the upcoming artificial intelligence regulations, potentially postponing a resolution until December. The discussions surround the regulation of foundation models like OpenAI's ChatGPT. Spain, currently holding the EU presidency, has proposed specific compromises, including measures for models with over 45 million users. The aim is to finalize an agreement before year's end, but delays could extend discussions into next year. Key figures like EU industry chief #ThierryBreton and co-rapporteurs for the AI Act, #DragoșTudorache and #BrandoBenifei, remain hopeful. #AIRegulations #EuropeanParliament https://lnkd.in/eXfGKj35

📢 #AI Act (draft) - new proposals made by EU-Presidency (17 October 2023) for upcoming fourth political trilogue, which will take place on 24 October 2023: 👉 #Foundation models: - all models: subject to transparency obligations (before & after model is put on market) - "very capable" models: additional obligations, particularly red-teaming through vetted red-testers, risk assessment/mitigation and regular compliance controls through independent auditors. 💡 "Very capable" foundation models should be those whose capabilities go beyond the current state-of-the-art and may not yet be fully understood. Threshold (compute power used to train model in FLOPS) to be introduced that triggers (rebuttable) assumption that model is "very capable". 👉#GPAI (General Purpose AI) systems: - all provider of GPAI systems: explicit statement whether GPAI can be used for high-risk uses. Where high-risk is excluded: measures to detect and prevent such use need to be introduced. Where high-risk is allowed: GPAI system needs to comply with requirements for high-risk AI systems. - GPAI systems used "at scale" in EU: subject to regular red-teaming through vetted red-testers & risk assessment/mitigation. 💡 Whether a GPAI system is used "at scale" is to be based on the impact and reach. Relevant threshold proposed: 10,000 registered business users (i.e. developers) or 45 million registered end users. (Note for comparison: ChatGPT has currently approx. 100+ million users.) 👉 #Copyright & foundation models: Providers of foundation models must: - demonstrate that adequate measures to ensure training in compliance with EU copyright law have been taken, respecting right holders' opt-out from their content to be used for training purposes (Text and Data Mining exception) - make publicly available sufficient detailed summary re content used for training & policies to manage copyright-related aspects 👉 AI-generated #output: - Providers of AI systems that generate output: ensure that output is detectable as AI generated / manipulated (Presidency notes at the same time that this might be difficult for generated text ...) 👉 Centralised #supervision / #enforcement concerning foundation models & GPAI "at scale": - AI Office shall (amongst others) have power to carry out compliance controls by its own or with support of auditors, carry out investigations upon alerts and take corrective measures (including suspension of model). 💡 "Being the first body worldwide with powers to enforce rules on foundation models and GPAI, the #AIOffice would become an international reference point for AI governance." 📝Further topics for discussion on this (very interesting) agenda: - #Classification of AI systems as high-risk - List of #high-risk AI use cases (Annex III) - Testing high risk AI systems in real world conditions outside AI regulatory #sandboxes For details, see the document attached. Alexander Brown Angus McLean Minesh Tanna Drew Winlaw Rasmus Rothe