Trust us, says EU, our AI Act will make AI trustworthy by banning the nasty ones
(2023/12/11)
- Reference: 1702276224
- News link: https://www.theregister.co.uk/2023/12/11/eu_agrees_ai_act/
- Source link:
The European Union (EU) on Saturday reached provisional agreement on the AI Act – a broad legal framework limiting how artificial intelligence can be used.
"The EU's AI Act is the first-ever comprehensive legal framework on Artificial Intelligence worldwide," [1]claimed EU Commission president Ursula von der Leyen.
According to von der Leyen, the agreement focuses on identifiable risks, thereby creating legal certainty for the industry and the technology's development.
[2]
The Commission's [3]description of the Act outlines a tiered risk management system, with different AIs categorized by their impact on rights.
[4]
[5]
The majority of AI systems fit within the "minimal risk" category, the classification used for auto recommendation systems, spam filters and the like. Participation in AI codes of conduct for providers of such services will be voluntary.
AI systems deemed "high-risk" – such as those related to critical infrastructures, education access assessment, law enforcement, or biometric identification – will be subjected to stricter requirements.
[6]
Regulations could demand detailed documentation, higher quality data sets, human oversight and risk-mitigation systems.
Anything presenting a clear threat to fundamental rights falls in the "unacceptable risk" tier and is not permitted.
AIs in this category include predictive policing, workplace emotional recognition systems, manipulation of human behavior to circumvent free will, or categorizing people based on qualities including political or religious persuasion, race, or sexual orientation.
[7]
The Act will also require labelling of deepfakes and AI generated content, while chatbot users must be made aware they are conversing with a machine.
Meanwhile, foundational models used in AI that require training upwards of 10 25 flops will face additional regulation in 12 months' time.
[8]US and EU infosec authorities pen intel-sharing pact
[9]Mere minority of orgs put GenAI in production after year of hype
[10]Dell CTO says enterprises will have GenAI in production next year – what could go wrong?
[11]EU running in circles trying to get AI Act out the door
With a six-month lead time to compliance, AI developers will need to ensure any feature that falls within the unacceptable risk category is quickly removed from their products. Compliance with regs for "high risk" AI must also be in place within half a year of the Act's passage.
Being found afoul of the Act brings substantial fines that AI law expert Barry Scannell evaluated as "a significant financial risk" for businesses.
These fines are anywhere from 1.5 percent of their global turnover or $8 million, to seven percent or $37.7 million – depending on the violation and the developer's capacity.
The Commission did hint it could explore "more proportionate caps" on fines for startups and SMEs.
According to [12]Scanell , there's a lot for businesses to consider. Those that invest in biometric and emotion recognition may need "major strategic shifts."
"Additionally, enhanced transparency requirements might challenge the protection of intellectual property, necessitating a balance between disclosure and maintaining trade secrets," wrote the Dublin-based attorney.
He also assessed that upgrading data quality and acquiring advanced bias management tools could raise operational costs. The increased documentation and human oversight could also present a business nuisance in the form of time and money.
The agreement was signed after 38 hours of negotiation. European Parliament member Svenja Hahn [13]praised the result as preventing massive overregulation, but expressed concerned it could use "more openness to innovation and an even stronger commitment to civil rights."
The lawmaker was disappointed by the failure to prevent allowance of real-time biometric identification "against the massive headwind from the member states," but expressed she was pleased by the prevention of biometric mass surveillance.
Big Tech was also not entirely satisfied with the Act. The Computer and Communications Industry Association (CCIA) [14]quipped that "the outcome seems to indicate that future-proof AI legislation was sacrificed for a quick deal" and "is likely to slow down innovation in Europe."
CCIA members represent a who's who of internet services, software and telecom companies – including names like Amazon, Apple, Cloudflare, Intel, Google, Samsung, and Red Hat.
The CCIA complained in its canned statement about the increased requirements for some technologies and the full on bans for those deemed an "unacceptable risk."
"This could lead to an exodus of European AI companies and talent seeking growth elsewhere," asserted the CCIA.
While the agreement is fairly set, it's not an absolutely done deal. It still must pass formal approval by the European Parliament and the Council. It will enter into force 20 days after publication in the Official Journal.
Von der Leyen promised to continue the work of AI regulation at an international level – through involvement in the G7, OECD, Council of Europe, G20 and UN. ®
Get our [15]Tech Resources
[1] https://ec.europa.eu/commission/presscorner/detail/en/statement_23_6474
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZXbr2rqyarm8@WmTbeWUqAAAANE&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://ec.europa.eu/commission/presscorner/detail/en/IP_23_6473
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZXbr2rqyarm8@WmTbeWUqAAAANE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZXbr2rqyarm8@WmTbeWUqAAAANE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZXbr2rqyarm8@WmTbeWUqAAAANE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZXbr2rqyarm8@WmTbeWUqAAAANE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2023/12/07/cisa_enisa_intel_sharing/
[9] https://www.theregister.com/2023/12/06/organizations_gnererative_ai_use/
[10] https://www.theregister.com/2023/12/05/dell_gen_ai_in_production/
[11] https://www.theregister.com/2023/12/06/eu_ai_act_negotiations/
[12] https://www.linkedin.com/posts/activity-7139192581099253760-IE6x/
[13] https://www.svenja-hahn.eu/post/ai-act-trilogue-outcome
[14] https://ccianet.org/news/2023/12/ai-act-negotiations-result-in-half-baked-eu-deal-more-work-needed-tech-industry-emphasises/
[15] https://whitepapers.theregister.com/
"The EU's AI Act is the first-ever comprehensive legal framework on Artificial Intelligence worldwide," [1]claimed EU Commission president Ursula von der Leyen.
According to von der Leyen, the agreement focuses on identifiable risks, thereby creating legal certainty for the industry and the technology's development.
[2]
The Commission's [3]description of the Act outlines a tiered risk management system, with different AIs categorized by their impact on rights.
[4]
[5]
The majority of AI systems fit within the "minimal risk" category, the classification used for auto recommendation systems, spam filters and the like. Participation in AI codes of conduct for providers of such services will be voluntary.
AI systems deemed "high-risk" – such as those related to critical infrastructures, education access assessment, law enforcement, or biometric identification – will be subjected to stricter requirements.
[6]
Regulations could demand detailed documentation, higher quality data sets, human oversight and risk-mitigation systems.
Anything presenting a clear threat to fundamental rights falls in the "unacceptable risk" tier and is not permitted.
AIs in this category include predictive policing, workplace emotional recognition systems, manipulation of human behavior to circumvent free will, or categorizing people based on qualities including political or religious persuasion, race, or sexual orientation.
[7]
The Act will also require labelling of deepfakes and AI generated content, while chatbot users must be made aware they are conversing with a machine.
Meanwhile, foundational models used in AI that require training upwards of 10 25 flops will face additional regulation in 12 months' time.
[8]US and EU infosec authorities pen intel-sharing pact
[9]Mere minority of orgs put GenAI in production after year of hype
[10]Dell CTO says enterprises will have GenAI in production next year – what could go wrong?
[11]EU running in circles trying to get AI Act out the door
With a six-month lead time to compliance, AI developers will need to ensure any feature that falls within the unacceptable risk category is quickly removed from their products. Compliance with regs for "high risk" AI must also be in place within half a year of the Act's passage.
Being found afoul of the Act brings substantial fines that AI law expert Barry Scannell evaluated as "a significant financial risk" for businesses.
These fines are anywhere from 1.5 percent of their global turnover or $8 million, to seven percent or $37.7 million – depending on the violation and the developer's capacity.
The Commission did hint it could explore "more proportionate caps" on fines for startups and SMEs.
According to [12]Scanell , there's a lot for businesses to consider. Those that invest in biometric and emotion recognition may need "major strategic shifts."
"Additionally, enhanced transparency requirements might challenge the protection of intellectual property, necessitating a balance between disclosure and maintaining trade secrets," wrote the Dublin-based attorney.
He also assessed that upgrading data quality and acquiring advanced bias management tools could raise operational costs. The increased documentation and human oversight could also present a business nuisance in the form of time and money.
The agreement was signed after 38 hours of negotiation. European Parliament member Svenja Hahn [13]praised the result as preventing massive overregulation, but expressed concerned it could use "more openness to innovation and an even stronger commitment to civil rights."
The lawmaker was disappointed by the failure to prevent allowance of real-time biometric identification "against the massive headwind from the member states," but expressed she was pleased by the prevention of biometric mass surveillance.
Big Tech was also not entirely satisfied with the Act. The Computer and Communications Industry Association (CCIA) [14]quipped that "the outcome seems to indicate that future-proof AI legislation was sacrificed for a quick deal" and "is likely to slow down innovation in Europe."
CCIA members represent a who's who of internet services, software and telecom companies – including names like Amazon, Apple, Cloudflare, Intel, Google, Samsung, and Red Hat.
The CCIA complained in its canned statement about the increased requirements for some technologies and the full on bans for those deemed an "unacceptable risk."
"This could lead to an exodus of European AI companies and talent seeking growth elsewhere," asserted the CCIA.
While the agreement is fairly set, it's not an absolutely done deal. It still must pass formal approval by the European Parliament and the Council. It will enter into force 20 days after publication in the Official Journal.
Von der Leyen promised to continue the work of AI regulation at an international level – through involvement in the G7, OECD, Council of Europe, G20 and UN. ®
Get our [15]Tech Resources
[1] https://ec.europa.eu/commission/presscorner/detail/en/statement_23_6474
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZXbr2rqyarm8@WmTbeWUqAAAANE&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://ec.europa.eu/commission/presscorner/detail/en/IP_23_6473
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZXbr2rqyarm8@WmTbeWUqAAAANE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZXbr2rqyarm8@WmTbeWUqAAAANE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZXbr2rqyarm8@WmTbeWUqAAAANE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZXbr2rqyarm8@WmTbeWUqAAAANE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://www.theregister.com/2023/12/07/cisa_enisa_intel_sharing/
[9] https://www.theregister.com/2023/12/06/organizations_gnererative_ai_use/
[10] https://www.theregister.com/2023/12/05/dell_gen_ai_in_production/
[11] https://www.theregister.com/2023/12/06/eu_ai_act_negotiations/
[12] https://www.linkedin.com/posts/activity-7139192581099253760-IE6x/
[13] https://www.svenja-hahn.eu/post/ai-act-trilogue-outcome
[14] https://ccianet.org/news/2023/12/ai-act-negotiations-result-in-half-baked-eu-deal-more-work-needed-tech-industry-emphasises/
[15] https://whitepapers.theregister.com/
Re: Well see first...
UCAP
Agreed - what they currently refer to as "AI" is basically all A and absolutely no I.
Re: Well see first...
veti
Why?
The regs are clearly meant to apply to the sorts of learning systems we have today. If you think you'll escape regulation by bleating "but it's not real intelligence", prepare for a very rude awakening.
Re: Well see first...
Ian Johnston
If you are going to regulate something you really have to start with a definition of what you are trying to regulate. Since there is no accepted definition of "artificial intelligence" trying to regulate it per se is pointless.
Progress, just like the Truth, Always Finds and Delivers a Way to Present itself
amanfromMars 1
Trust us, says EU, our AI Act will make AI trustworthy by banning the nasty ones
“ Come into my parlour said the spider to the fly “ ....... springs immediately to mind, Laura, and is an APT* and quite appropriate reply to the result of the EU response to AI and the IT Sector as they spread their wings for future flights of fancy, systems takeovers and executive administrative makeovers
* Advanced Persistent Threat/Treat
veti
manipulation of human behavior to circumvent free will
Seriously? You want to give lawyers a reason to argue about "free will"?
A problem that has beaten the finest philosophical minds of the past three centuries, and you're giving freaking lawyers a licence to debate it at $500 an hour?
Can't think who drafted that bit.
UCAP
Can't think who drafted that bit.
A lawyer.
Zippy´s Sausage Factory
"manipulation of human behavior to circumvent free will
I think they're actually trying to do something about "dark patterns*" in UX here - you know, the "want to pay us 3 bones a month, forever? If you do not want this not to unhappen, please refrain from not unticking this box**" sort of business.
* or whatever it's called, I don't really remember right now
** apologies to Charlie Brooker for borrowing that
AMBxx
I think they're trying to ban all adverts!
Well see first...
First we have to actually have AI.