AI Act agreed, what you need to know on the upcoming EU artificial intelligence law!

The EU Parliament’s Committees have agreed on the AI Act. However, Google’s decision to postpone the launch of Bard in the European Union prompts questions about the direction we’re headed in.

The Compromise Text on the EU AI Act regulates Foundation Models (like ChatGPT, GPT4, Palm, etc.), which are AI models trained on extensive data designed for a wide range of tasks.

Here are some insights on the regulations applicable to them:

1. Providers of generative AI foundation models, such as Midjourney, Dall-E, and ChatGPT, must comply with transparency obligations, safeguard against EU law breaches, and publicly document the use of copyright-protected training data ???Notably, the text does not cross-reference the EU Copyright Text and data mining exemption, which could resolve disputes.
2. Prior to releasing a foundation model, providers must comply with the EU AI Act. This involves risk management in areas like health, safety, fundamental rights, and more, using independent expert involvement. They should also use datasets with robust data governance measures ???These broad principles might lead to inconsistent interpretations by authorities and courts. It is the same approach as the GDPR. Still, the GDPR was built on 20 years of privacy legislation where principles had already been decrypted, while we never had legislation on artificial intelligence.
3. Providers must design foundation models with high performance, safety, and cybersecurity standards, assessed by independent experts, documented analysis, and extensive testing. Providers should document compliance for ten years post-release. Also, they need to provide extensive technical documentation and establish a quality management system to ensure compliance with the Act’s requirements ???ISO technical standards will gain relevance to guide providers and users in this process.
4. AI Impact Assessments should clearly outline the system’s intended purpose, use scope, and categories of affected persons ???These assessments touch on multiple legal areas like privacy and intellectual property. Finding efficient, cost-effective solutions for these assessments will be critical.

This expansive legislation has garnered reactions from AI developers, such as Google’s decision to delay Google Bard’s EU launch. One can’t help but wonder if the AI Act agreed by the Committees of the EU Parliament and the recent actions by the Italian data protection authority against Open AI’s ChatGPT influenced this decision.?If so, it sends a cautionary message to EU legislators and authorities – innovation in the EU may face delays.

On a similar topic, you can find the following article interesting “The Italian case on ChatGPT benchmarks generative AI’s privacy compliance?“.

Revolutionizing Privacy Compliance: EU Ruling Redefines Anonymity in Pseudonymized Data

Pseudnomized data might lead to anonymity, according to a recent ruling of the European General Court that can potentially have a massive impact on data protection compliance and sharing of (originally) personal data in the life sciences, banking, and any other sector.Read more

CJEU: There is NO threshold for damage claims regarding a GDPR breach

The mere violation of the GDPR does not entitle per se to compensation, but it is not necessary for the damage suffered to reach a certain threshold of severity to produce a right to compensation.Read more

Cybersecurity in the age of artificial intelligence (AI): evolution of threats and defenses

Artificial intelligence (AI) developments have led to significant advances in several fields and introduced new cyber risks requiring more robust cybersecurity defenses.Read more

Legal Tech Tools and Offerings

Transfer - DLA Piper legal tech solution to support Transfer Impact Assessments

This presentation shows DLA Piper legal tech tool named "Transfer" to support our clients to perform a transfer impact assessment after the Schrems II case. Read more

DLA Piper Turnkey solution on NFT and Metaverse projects

You can have a look at DLA Piper capabilities and areas for NFT and Metaverse projects. Read more