Here’s what it means for U.S. tech firms

The AI Act is a piece of EU legislation governing artificial intelligence. First proposed by the European Commission in 2020, the law aims to address the negative impacts of AI.

It will primarily target large U.S. technology companies, which are currently the primary builders and developers of the most advanced AI systems.

However, plenty other businesses will come under the scope of the rules — even non-tech firms.

The regulation sets out a comprehensive and harmonized regulatory framework for AI across the EU, applying a risk-based approach to regulating the technology.

Tanguy Van Overstraeten, head of law firm Linklaters’ technology, media and technology practice in Brussels, said the EU AI Act is “the first of its kind in the world.”

“It is likely to impact many businesses, especially those developing AI systems but also those deploying or merely using them in certain circumstances.”

The legislation applies a risk-based approach to regulating AI which means that different applications of the technology are regulated differently depending on the level of risk they pose to society.

For AI applications deemed to be “high-risk,” for example, strict obligations will be introduced under the AI Act. Such obligations include adequate risk assessment and mitigation systems, high-quality training datasets to minimize the risk of bias, routine logging of activity, and mandatory sharing of detailed documentation on models with authorities to assess compliance.

Examples of high-risk AI systems include autonomous vehicles, medical devices, loan decisioning systems, educational scoring, and remote biometric identification systems.

The law also imposes a blanket ban on any applications of AI deemed “unacceptable” in terms of their risk level.

Unacceptable-risk AI applications include “social scoring” systems that rank citizens based on aggregation and analysis of their data, predictive policing, and the use of emotional recognition technology in the workplace or schools.