It's all about product safety
No animals were harmed in the creation of this image.

It's all about product safety

This issue is part of a series: the AI Act in bite-sized chunks.

?

A lot of people think that the AIA is like the GDPR, except that it’s for AI.

It’s not. It is fundamentally different.

The GDPR was about creating a legal regime whereby individuals had rights against people processing their data.

The AIA is not about rights for individuals. It’s about product safety. It’s about making sure that AI systems on the market in the EU are safe.

The EU has an existing legal framework covering product safety. It covers things like lifts, medical devices, toys, electrical devices, and so on. Each of those devices can only be put in the market in the EU if it has a CE mark, and it can only get a CE mark it confirms with the product safety rules that govern its product type.

And it’s a criminal offence in most member states to put on the market, or try to sell, a device or piece of equipment that doesn’t have the right CE mark.

The AIA is part of that product safety regime, and that’s where a lot of the terminology comes from.

“Essential Requirements” are the essential requirements of the relevant regulation. If your product does not comply with the essential requirements, it cannot be traded in the EU.

“Conformity Assessment” is the process whereby the relevant product is confirmed as complying with the relevant regulation. For some products you can self-certify, for others you need to get third party notification (see Notified Body, further down).

“Harmonised Standards” are technical standards.? If your product conforms to the harmonised standards, then you get an automatic presumption that your product conforms to the Essential Requirements of the relevant legislation.

“Notified Body”. Some regulations require an authorised third-party to carry out all or part of the conformity assessment: that’s a Notified Body. You can get a list of the existing Notified Bodies from the NANDO website.

“Notifying Authorities” are the member state bodies that authorise and regulate Notified Bodies.

?

If you want to find out more about the product safety regime in the EU (which is useful if you want to get a better grip on how the AIA is going to work), take a look at the Blue Guide. It’s a free explanation of how product safety regulation works in the EU. It’s 156 pages long, but the first two chapters will give you an overview.

More on this and related elements in forthcoming issues of AI Legal.

?

?

?

?

?

要查看或添加评论,请登录

Mark Sherwood-Edwards的更多文章

  • The unspoken link between the GDPR and the AIA.

    The unspoken link between the GDPR and the AIA.

    There’s an unspoken link between the AIA and the GDPR. One of the key elements of the GDPR is the accountability…

  • 3 types of HRAIS, and "intended purpose".

    3 types of HRAIS, and "intended purpose".

    This is number 4 of a series of bite-sized chunks on the AIA. A previous edition of AI Legal explained that the AIA is…

  • Automated Decision Making

    Automated Decision Making

    Automated Decision Making Both the GDPR and the AIA (despite being primarily a set of rules about product safety) give…

  • Publicly Available is not the same as Free To Use

    Publicly Available is not the same as Free To Use

    LLMs need a lot of data on which to train. But just because material is publicly available on the internet doesn’t mean…

    4 条评论
  • When you use an LLM, who owns your output? Is it you?

    When you use an LLM, who owns your output? Is it you?

    LLMs create content, as we know. Who owns the content that they create? There’s two levels to this question (leaving…

    3 条评论
  • The AIA is extra-territorial

    The AIA is extra-territorial

    One of the things I’m going to do in AI Legal is explain the EU AI Act in bite-sized, easy to digest, chunks. Here’s…

  • Will OpenAI be lawful in the EU?

    Will OpenAI be lawful in the EU?

    One of the provisions of the AIA is that providers of general purpose AI systems – like OpenAI’s LLM – must “put in…

    7 条评论
  • GDPR, Schrems 2 and the rule of law

    GDPR, Schrems 2 and the rule of law

    In a recent post (ICO fines Cabinet Office £500,000) I wrote how cheering it was to see the rule of law implemented…

    3 条评论
  • Wirecard, Outsourcing & OpRes

    Wirecard, Outsourcing & OpRes

    When Wirecard collapsed, a number of companies that had outsourced their payments processing to it found themselves in…

  • Software development contracts – the good, the bad, and the ugly.

    Software development contracts – the good, the bad, and the ugly.

    I recently helped a client put in a place a software development contract. It was one of those least worst-case…

    1 条评论

社区洞察