On the 2nd of February the first parts of the EU AI Act started to apply. Many in management have heard of it, few have read it. Here is what matters now.<\/p>\n
The first rules are prohibitions. Certain uses of AI are now banned in the EU, for example systems that manipulate people in harmful ways, social scoring and some forms of emotion recognition in the workplace. Most organisations don\u00b4t do any of that, but you need to be sure.<\/p>\n
The other requirement that applies now is easy to miss: AI literacy. Organisations that provide or use AI systems must make sure that their staff have sufficient knowledge of AI to use it responsibly. That covers a lot more organisations than the prohibitions do.<\/p>\n
More is coming. Rules for general purpose AI models apply from August this year, and most of the requirements for high risk systems follow in the coming years.<\/p>\n
So what should the board do? First, find out where AI is used in the organisation, including the AI built into products you already buy. Second, check that nothing falls under the prohibitions. Third, start a basic AI training programme for staff. Fourth, decide who owns AI governance. It shouldn\u00b4t be the IT department alone. It touches legal, HR, risk and the business.<\/p>\n
The AI Act isn\u00b4t only a compliance exercise. It is a reason to understand what you are actually doing with AI.<\/p>\n
You can\u00b4t govern what you haven\u00b4t found.<\/p>\n","protected":false},"excerpt":{"rendered":"
On the 2nd of February the first parts of the EU AI Act started to apply. Many in management have heard of it, few have read it. Here is what matters now. The first rules are prohibitions. Certain uses of AI are now banned in the EU, for example systems that manipulate people in harmful […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[11,4],"tags":[167,38,168],"class_list":["post-1471","post","type-post","status-publish","format-standard","hentry","category-business","category-security-architecture","tag-ai-governance","tag-business","tag-eu-ai-act"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1471","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1471"}],"version-history":[{"count":1,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1471\/revisions"}],"predecessor-version":[{"id":1518,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1471\/revisions\/1518"}],"wp:attachment":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1471"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1471"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1471"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}