Original article by Joel George, Senior Lawyer, LegalVision
On 8 December 2023, the European Union (EU) reached an important agreement on regulating Artificial Intelligence (AI) to ensure safety, protect fundamental rights, and maintain democracy while fostering business growth. The EU’s new Artificial Intelligence Act (EU AI Act) aims to strike a balance between fostering innovation and safeguarding fundamental rights, democracy, and the environment. The rules set obligations for AI systems based on their potential risks and impact levels. This article provides a breakdown of the new rules and recommendations for Australian businesses.
The EU AI Act recognises AI’s potential risks to citizens’ rights and democracy. The new law prohibits certain AI systems, including:
While stringent rules are in place, there are exceptions (with safeguards) for law enforcement purposes. In particular, there must be prior judicial authorisation to use biometric identification systems in publicly accessible spaces for law enforcement. Likewise, there are strictly defined lists of crimes.
For AI systems classified as high-risk, there are clear obligations to ensure fundamental rights, safety, and democratic values. This includes mandatory fundamental rights impact assessments relevant to sectors like insurance and banking.
Importantly, citizens will have the right to launch complaints about AI systems affecting their rights.
The new laws also set transparency requirements for general-purpose AI (GPAI) systems to address the wide range of tasks AI systems can perform. Examples of these systems include OpenAI’s GPT-4, which powers ChatGPT, and Google’s Bard. Transparency requirements can look like the following:
Stricter obligations will apply to high-impact GPAI systems with systemic risk.
Notably, the EU AI Act aims to support businesses, especially small and medium-sized enterprises (SMEs), by promoting regulatory sandboxes and real-world testing. These initiatives, overseen by national authorities, allow the development and training of innovative AI solutions before they enter the market.
The prohibitions on banned AI systems will take effect in 6 months, and the transparency requirements will take effect in 12 months. The full set of rules will take effect in around 2 years.
Non-compliance with the rules may result in fines ranging from:
The fine will depend on the severity of the infringement and the size of the company responsible for the breach.
The EU AI Act applies to all businesses that deploy AI systems in the EU market or make them available within the EU, regardless of location. Accordingly, Australian businesses conducting any of the following will have to comply with the legislation:
The EU’s new Artificial Intelligence Act (EU AI Act) sets obligations for AI systems based on their potential risks and impact levels. As an Australian business owner, the new laws will apply if you deploy AI systems in the EU market or make them available within the EU. By proactively addressing your systems, you can effectively align with best practices and navigate the evolving AI regulatory landscape.
LegalVision is actively assisting organisations in understanding their legal and ethical responsibilities concerning AI product development and usage. For guidance on AI regulation in Australia, our experienced artificial intelligence lawyers can assist as part of our LegalVision membership. For a low monthly fee, you will have unlimited access to lawyers to answer your questions and draft and review your documents. Call us today on 1300 544 755 or visit our membership page.