This blog addresses the privacy challenges of generative AI and related regulations for data protection.

AI and Data Privacy: Key Challenges and Regulations

Healthcare systems are currently adapting to digital technologies, producing large quantities of novel data. Based on these data, machine-learning algorithms have been developed to support practitioners in labor-intensive workflows. Efforts have started worldwide to establish guidelines for evaluating machine learning for health (ML4H) tools, highlighting the necessity to evaluate models for bias, interpretability, robustness, and possible failure modes.

ML4H Auditing: From Paper to Practice

On 25 July 2024, the U.S. Department of State published its “Risk Management Profile for Artificial Intelligence and Human Rights”, which applied the National Institute of Standards and Technology’s AI Risk Management Framework to the human rights context. 

Risk Management Profile for Artificial Intelligence and Human Rights

This blog provides an overview of the implications of the EU AI Act on the future of AI-driven financial services. 

The implications of the EU AI Act for financial services

The European AI Office has taken a significant step forward in shaping the future regulatory landscape for general-purpose AI (GPAI) models by initiating the process of the first-ever Code of Practice for GPAI models. 

Shaping the Future of General-Purpose AI: Europe Begins Drafting the First Code of Practice for General-Purpose AI Models 

On 29 September 2024, California’s Governor Gavin Newsom vetoed the Safe and Secure Innovation for Frontier Artificial Models Act (“SB1047”). 

California Governor Newsom vetoes Safe & Secure AI Innovation Bill (SB1047)

 On 31 August 2024, the California legislature concluded its 2024 session, setting the stage for new AI regulations across the state. 

California 2024 AI Legislation Roundup

A complaint to the FTC from NHeLP, EPIC, and Upturn against Deloitte over its Medicaid eligibility system TIERS has cited the OECD AI Principles, Blueprint for an AI Bill of Rights, Universal Guidelines for AI, Executive Order 14110, and NIST AI RMF to support its case.

Can voluntary AI frameworks be used to bring legal action? 

In the EU, the use and processing of personal data is primarily governed by the GDPR but the AI Act also has data governance provisions, meaning the two legislative frameworks will interact.

The Data Governance Regime under the EU AI Act: Intersections with the GDPR and Personal Data Protection

The Public Authority Algorithmic and Automated Decision-Making Systems Bill regulates the use of AI in public sector decision-making, emphasizing transparency, fairness, and accountability.

UK Introduces New Bill to Regulate Automated Decision-Making in the Public Sector

On 5 September 2024, the Council of Europe’s (CoE) Framework Convention on Artificial Intelligence and Human Rights, Democracy, and the Rule of Law, the first binding international legal instrument addressing AI Governance, opened for signature at the Conference of Ministers of Justice in Vilnius, Lithuania. 

The first internationally binding AI convention opens for signature

HB3773 amends the Illinois Human Rights Act to make it a civil rights violation to use AI in discriminatory way in employment decisions.

Regulating AI in employment decisions: What you need to know about Illinois’ HB3773 

The new UK government under Labor will use both existing and new regulation to regulate AI and integrate it into government services. 

AI policy under a Labour government: Will the UK move on from its light-touch approach?  

On 25 August 2024, the first independent audit period for Very Large Online Platforms (VLOPs) and Very Large Online Search Engines (VLOSEs) closed after commencing on 25 August 2023. 

The conclusion of the first independent DSA audit period for VLOPs and VLOSEs 

AI watermarking creates a unique signature that is algorithmically identifiable and can be traced back to a model but there is a lack of standardization around AI watermarking techniques. 

How effective is watermarking for AI-generated content?

On 14 August 2024, The Federal Trade Commission (FTC) announced a significant update to its regulations with the introduction of a final rule (16 CFR Part 465) designed to crack down on deceptive practices involving consumer reviews and testimonials. 

FTC Final Rule Targets Fake Reviews and AI-Generated Testimonials

The EU AI Act introduces regulatory sandboxes as controlled environments that allow the developers of AI systems to innovatively experiment with their AI systems before making them available on the EU market

Experimenting before marketing: Regulatory sandboxes under the EU AI Act

SB1047 is a unique bill that targets developers of the most advanced AI systems with obligations including an independent audit and creates a Frontier Model Division with the existing Government Operations Agency

10 things you need to know about the Safe and Secure Innovation for Frontier Artificial Intelligence Models Act 

The EU AI Act will interact with the EU's existing comprehensive product safety framework

How the EU AI Act interacts with EU product safety legislation

On 26 July 2024, NIST unveiled 5 key updates to support the objectives of the AI executive order - two new documents and three finalized

NIST releases finalized documents and draft guidance on AI

The EU AI Act will influence the competition dynamics of markets and interact with existing EU competition law

AI and Competition: How the EU AI Act will shape dynamics and enforcement

On 24 July 2024, US Senators Senators John Hickenlooper and Shelley Moore Capito introduced the Validation and Evaluation for Trustworthy Artificial Intelligence (VET AI) Act to create guidelines for third-party AI audits. 

Senators Hinkenlooper and Capito introduce VET AI Act to create guidelines for AI Assurance

On 23 July 2024, competition authorities from the UK, US, and EU published a joint statement on generative AI foundation models and AI products. 

International competition authorities publish a joint statement on competition in generative AI 

The AI Act specifies considerations to be made for small and medium-sized enterprises and start-ups. These range from giving them free access to regulatory sandboxes, to being more lenient regarding documentation.

What Considerations Have Been Made for SMEs Under the EU AI Act?

The European Commission has initiated compliance investigations into gatekeepers under the DMA as part of a crack down on unfair digital market practices. 

Do not pass go: European Commission’s investigations into monopolies under the Digital Markets Act

The Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law FCAI is set to be the first international convention in the regulation of AI technologies 

What you need to know about the Framework Convention on AI Human Rights, Democracy and the Rule of Law 

Today, 12 July 2024, the EU AI Act was published in the Official Journal of the EU, commencing the beginning of the implementation timeline

The EU AI Act Published in the Official Journal of the EU 

One of the central pillars of the EU AI Act’s framework is the emphasis on transparency requirements, which seek to address growing concerns surrounding the transparency of AI models and systems

Unveiling the Curtain of AI: AI Act and Transparency

AI tools can support the green transition in mining by monitoring conditions, automating tasks and finding balance between investment and environmental, social and economic outcomes.

How can AI work towards an effective and just “green transition” in the mining industry? 

The EU AI Act takes a risk-based approach to AI regulation, where AI systems that are considered high-risk must undergo conformity assessments to demonstrate compliants with the associated requirements.

Conformity Assessments in the EU AI Act: What You Need to Know

The blog offers insights into the debate surrounding AI's eligibility as an inventor under patent law.

Navigating the Intersection of AI and Patent Law: The Global Debate on AI Inventorship

This blog explores the current position on AI in syndicated lending. 

Artificial Intelligence in Syndicated Lending

This blog summarises the problems, risks, and types of misalignment resulting from inadequate alignment of AI systems. 

AI Alignment: Risks, Approaches, Challenges and Benefits 

This article examines the diverse AI governance mechanisms across several APAC jurisdictions and provides observations on their strategic approaches to managing AI-related risks.

Regulating AI in the Asia-Pacific Region 

To prepare for compliance with the EU AI Act, it is imperative that entities understand whether they are within the scope of the law, what type of market player they are considered to be, and how the Act applies to them

Decoding the scope of the EU AI Act: How to identify if your organization is a covered entity

This blog provides an overview of the AI landscape over the first six months of 2024. 

The AI Landscape in 2024: A 6-Month Update

The AI Seoul Summit 2024 brought together leaders from government, industry, academia, and civil society to explore global cooperation on AI safety, innovation, and inclusivity.

Advancing Global Collaboration in AI Governance: Insights from the AI Seoul Summit 2024

Colorado has passed several AI laws targeting a variety of technologies over the past few years.

The Key AI Laws you need to know in Colorado

This blog covers the most common use-cases of AI in the entertainment industry, the legal implications of its use, and the ways in which it is being regulated. 

How Is AI Impacting the Entertainment Industry?

Launched by the Commission, the AI Pact is intended to encourage voluntary commitment from industry players to comply with the forthcoming AI Act before it takes effect.

The AI Pact: Establishing a Common Understanding Around The EU AI Act

AI governance is the many technical and non-technical guardrails and tools that make AI safer, secure, and more ethical. 

AI Governance: What you need to know

This blog provides an overview of the issue of bias in healthcare and the regulatory initiatives being undertaken in the US to mitigate it.  

Advancing Healthcare: AI Adoption, Bias, and Regulatory Initiatives in the US

On 30 May 2024, Singapore made headlines with the release of the Model AI Governance Framework for Generative AI, a collaborative effort between the Infocomm Media Development Authority (IMDA) and the AI Verify Foundation.

Singapore Unveils Comprehensive Framework for Governing Generative AI 

In this blog post, we will explore the latest governance framework introduced by the EU AI Act, discussing the specific roles and responsibilities of each component.

Navigating the Governance Architecture of the EU AI Act 

This article explores the scope, implementation, and implications of the standardization scheme to be developed under the AI Act. 

Setting The Standards for AI: The EU AI Act’s Scheme for the Standardization of AI Systems 

In this blog post, we outline the key things you need to know about Colorado’s SB-205.

10 Things You Need to Know about Colorado’s SB205 Consumer Protections for Artificial Intelligence

In this blog post, we outline what you need to know about NIST ’s Generative AI Use Case Profiles. 

NIST AI RMF Generative AI Use Case Profiles   

In this blogpost, we address the possible copyright issues around the AI systems in light of the EU AI Act. 

AI and IP at the Crossroads: How does the EU AI Act Approach Copyright Law?

As GenAI systems become increasingly sophisticated in replicating and generating content, the intersection of AI and copyright law has become a focal point of legal discourse.

Why are copyright laws relevant to AI?

On 8 May 2024, the American state of Colorado passed SB24-205, enacting protections for consumers in their interactions with AI systems. 

Colorado passes law enacting consumer protections for AI

In this blog post, we explore the key international developments and partnerships over the past few months addressing AI. 

Towards International Cooperation on Responsible AI

In this blog post, we’ll give an in-depth overview of the Playbook, including the first steps organizations can take to implement it. 

NIST’s AI Risk Management Framework Playbook: A Deep Dive 

In this blog post, we recap the progress made so far in the six months since the publication of the Executive Order, and the steps still to fulfil. 

Biden Executive Order 14110 – A 6-Month Update

In this blog post, we provide an overview of the ways in which AI tools are used in marketing, the associated risks and harms, and how responsible AI can be operationalized within organizations using AI in their marketing.  

How can we ensure responsible AI in marketing? 

In this article, we will explore the obligation of deployers of high-risk AI (“HRAI”) systems to conduct FRIA.

Individuals at the Heart of the EU AI Act: Decoding the Fundamental Rights Impact Assessment

In this blog post we will explore the EU AI Act’s most recent framework on the cybersecurity of AI systems and models and the interplay between other cybersecurity legislations.  

Navigating the Nexus: The EU's Cybersecurity Framework and AI Act in Concert 

The NIST AI RMF is operationalised through a combination of five tools or elements, which help establish the principles a trustworthy AI system should have, what actions should be taken to ensure trustworthiness in an AI system’s development and deployment lifecycles, as well as practical guidance on doing the same. 

Elements of NIST’s AI Risk Management Framework: An Overview

On 15 April 2024, the American National Security Agency’s Artificial Intelligence Security Center (NSA AISC) released a joint guidance on Deploying AI Systems Securely, which suggests best practices for deploying and using externally developed AI systems. 

International Joint Guidance on Deploying AI Systems Securely

In 2024, 4.2 billion voters worldwide face the threat of AI-driven election misinformation, prompting urgent legislative and collaborative measures to uphold democratic integrity amid deepfake proliferation.

AI and Elections: Policy Makers Crack Down

On Sunday 7 April 2024, US senators announced a discussion draft for a bipartisan proposal for the American Privacy Rights Act (APRA), which would have important implications for AI.

What you need to know about the proposed American Privacy Rights Act for AI

On 3 April 2024,  a joint statement on the Enforcement of Civil Rights, Fair Competition, Consumer Protection, and Equal Opportunity Laws in Automated Systems was announced by several US federal agencies. 

US Federal Agencies Release a Joint Statement on Automated Systems

The AI Act introduces a risk-based framework for classifying AI systems, exclusively categorizing systems as being prohibited, high-risk, and low (or minimal) risk.

AI Red Flags: Navigating Prohibited Practices under the AI Act

AI's ability to sift through massive amounts of data poses opportunities for improving ESG reporting, which is often plagued by data collection and analyzing challenges.

How can AI enhance ESG Reporting?

The policy directs federal agencies to further AI innovation and governance while establishing and managing the risks arising from the use of AI, especially those that affect the safety and rights of the American public. 

OMB Policy on Governance, Innovation, and Risk Management 

In this blog, we’ll go further in depth into AI’s impact on the environment.

EU AI Act and Sustainability: Environmental Provisions in the EU AI Act 

The use of algorithms and artificial intelligence (AI) in the insurance sector has received widespread attention from policymakers recently due to the risks that the technology poses when it goes unchecked or is used without appropriate safeguards. Colorado's SB169 aims to prevent unfair discrimination in insurance but the rules to support enforcement are still being developed.

How Colorado is Regulating Insurtech with SB21-169

This is the first installment of our blogs series on the NIST AI RMF.

NIST AI RMF Core Explained 

Our horizon scan below highlights the key laws in the US that have been proposed and implemented to regulate insurance. 

Horizon Scan: The Key AI Laws Targeting Insurance You Need to Know in the US 

In this blog, we present an overview of what reflections the EU AI Act may have on generative AI technologies.

Balancing Creativity and Regulation: The EU AI Act’s Impact on Generative AI

This blog post explores strategies for AI developers to mitigate the harmful impacts of AI on the environment, examine the potential environmental benefits of AI, and survey global regulations governing AI and the environment. 

AI and ESG: Harnessing AI for Sustainable Practices  

The capacity and versatility of GPAI models introduce potential systemic risks that differ from those posed by other AI models as well as systems, and the EU AI Act acknowledges this by imposing distinct obligations on GPAI providers.

The EU AI Act and General Purpose AI Systems: What you need to know

On 13 March 2024, the European Union's groundbreaking AI Act was approved by the European Parliament in a significant plenary session. This marks a pivotal step in the legislative journey of this landmark regulation.

EU AI Act approved by the European Parliament

The computing power needed for AI to work – especially Large Language Models (LLMs) – requires significant amounts of energy, where most of the energy is used for inference.

AI and ESG: Understanding the Environmental Impact of AI and LLMs  

Singapore's National AI Strategy (NAIS) was first released in 2019 and was recently updated in June 2023 to emphasis the necessity of AI and global collaboration

Singapore’s National AI Strategy 2.0: What you need to know

Explore our detailed guide on identifying high-risk AI systems under the EU AI Act [2024], covering the Act's impact, compliance obligations, and strategies for organizations using AI in the EU to manage regulatory risks effectively. 

How to Identify High-Risk AI Systems According to the EU AI Act

In spite of the wave of AI-specific laws that have been introduced around the world, AI systems are not exempt from existing laws and non-compliance has resulted in hefty penalties.

The high cost of non-compliance: Penalties issued for AI under existing laws

On 28 February 2024, President Biden issued the Executive Order on Preventing Access to Americans' Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern, which will have important implications for the development, monitoring, and deployment of AI within the US.

Securing the Digital Realm from Foreign Actors through Data Rules: Unlocking Biden's Executive Order on Personal Data and National Security

AI systems used in medical devices may be considered high-risk under the EU AI Act, requiring strict adherence to regulatory requirements and responsibilities for medical device market participants.

Tech and Treatment: Comprehending the EU AI Act's Impact on Medical Devices

There are several key pieces of horizontal and vertical legislation emerging at the federal level in the US that organizations need to keep in mind to maximise compliance. 

US Federal AI Legislation in 2024: The Current Landscape

On 2 February 2024, the Federal Communications Commission issued a Declaratory Ruling clarifying the application of the Telephone Consumer Protection Act of 1991 to artificial intelligence.

FCC Declares AI-Generated Robocalls Illegal: A Step Towards Consumer Protection

Many AI systems used in autonomous vehicles will be classified as high-risk under the EU AI Act, but the ordinary high-risk regime may not apply to them in the same way. 

Driving Innovation: Navigating the EU AI Act's Impact on Autonomous Vehicles

On 1 February 2024, the Federal Artificial Intelligence Environmental Impacts Act of 2024 to assess and mitigate the environmental impacts of AI technologies.

Artificial Intelligence Environmental Impacts Act 2024

On 20 February 2024, Derek Mobley submitted an amended complaint in the ongoing class action lawsuit against Workday, Inc. contending that Workday's AI systems are created by humans with both conscious and unconscious motivation to discriminate.

Mobley v. Workday: Amended Complaint highlights Discrimination and AI Bias in Employment Screening 

On 2 February 2024, the Association of Southeast Asian Nations (ASEAN) released its Guide on AI Governance and Ethics to act as a blueprint for organizations and governments in Southeast Asia to navigate responsible AI practices.

The ASEAN Guide on AI Governance and Ethics: What you need to know

The European Commission aims to lead the world in Artificial Intelligence (AI) regulation with the proposed EU AI Act. This article explores the proposed penalties of the EU AI Act for organisations that are non-compliant with the Act.

Penalties of the EU AI Act: The High Cost of Non-Compliance

Two crucial processes that contribute to the assurance of generative AI are model evaluations and algorithm audits, which each serve a unique purpose in the journey towards responsible AI deploymen

Operationalising Safety in Generative AI: Model Evaluations and Algorithm Audits 

On 24 January 2024, the FTC issued orders to file a special report to tech industry leaders Alphabet, Inc., Amazon.com, Inc., Anthropic PBC, Microsoft Corp., and OpenAI, Inc. under section 6(b) of the Federal Trade Commission Act

FTC Launches Inquiry into Generative AI Investments: What you need to know

In 2022, China passed and enforced three distinct regulatory measures on the national, regional and local levels. This momentum has carried into 2023, where in January alone, China has already cracked down on deepfake technology through a national level legislation. In this blog, we survey China’s AI regulatory endeavours, highlighting interesting enforcement mechanisms and comment on China’s approach to AI governance.

Making Sense of China’s AI Regulations

The draft of the EU AI Act was unanimously endorsed by the Coreper I on 2 February 2024, signalling imminent formalisation of the landmark legislation.

Approaching the tape: The EU’s final strides in the AI legislation marathon

The Data Act enables the users of connected products or related services to access the data they created using these products and services and to govern the transfer of these data to third parties.

EU Data Act: Empowering Users Through Informed Data Governance

The regulation of artificial intelligence (AI) has started to become an urgent priority, with countries around the world proposing legislation aimed at promoting the responsible and safe application of AI to minimise the harms that it can pose. However, while these initiatives all aim to regulate the same technology, there is some divergence in how these different efforts define AI – getting lost in translation.

Lost in Transl(A)t(I)on: Differing Definitions of AI

On 17 January 2024, the Australian Government published an interim response addressing concerns and recommendations related to the regulation of artificial intelligence (AI) in the country

Safe and responsible AI in Australia: An overview of the Government's Interim Response

While healthcare is already a heavily regulated sector, lawmakers across the US are starting to propose laws to tackle the novel risks posed by the use of AI.

How is AI in healthcare being regulated in the US?

With autonomous vehicles becoming increasingly common, there has been a rise in related legislation. We explore what the US laws have to say about them.

Autonomous Vehicle Legislation in the US: The State of Play

On 24 January 2024, the European Commission announced the establishment of the European Artificial Intelligence Office.

European Artificial Intelligence Office Established

The legality of the training of generative AI models has been subject to debate and has resulted in several lawsuits.

Generative AI and copyright infringements: The key lawsuits you need to know

Within Europe, two significant legislations have taken center stage that impose safety obligations for online platforms the European Union's Digital Services Act (DSA) and the United Kingdom's Online Safety Act (OSA).

Navigating the 2024 Online Safety Landscape: A Comparative Analysis of the EU’s Digital Services Act and UK’s Online Safety Act 

On 10 January 2024, U.S. Congress members Ted W. Lieu, Zach Nunn, Don Beyer, and Marcus Molinaro announced the introduction of the Federal Artificial Intelligence Risk Management Act of 2024 (HR6936) to require federal agencies to use NIST's AI Risk Managament Framework

US Federal Artificial Intelligence Risk Management Act of 2024 introduced

New York City Local Law 144 was the first law of its kind and imposed bias audit requirements for automated employment decision tools and other states have since followed suit

Bias audit laws in the US: The state of play for automated employment decision tools

On 18 December 2023, the Committee on Artificial Intelligence, published the Draft Framework Convention on Artificial Intelligence, Human Rights, Democracy and the Rule of Law (“DFC”), a guiding international framework that sets out principles and norms for artificial intelligence in line with human rights, democracy, and the rule of law

Traversing AI regulation’s international terrain: Understanding the Council of Europe’s Draft Framework Convention

Annual conference on machine learning and computational neuroscience