In December 2023, European Union (EU) lawmakers reached an agreement on the EU AI Act. In our prior article titled “An Introduction to the EU AI Act,” we focused on the applicability, timing, and penalties of the EU AI Act. We also described the threshold related to identifying high-risk AI systems. Next, we focus on the requirements of Chapter 2, Articles 9-15 titled “Requirements for High-Risk AI Systems” in the EU AI Act.
- Article 9 – Implementing a risk management system: Requires that providers of high-risk AI systems adopt risk management systems that are both implemented and documented. Per Article 9, risk management systems are to include the following: a) an analysis of the known and potential risks associated with the system, b) an evaluation of the risks associated with the system both when it is utilized for its intended purpose but also if the system is misused and c) the adoption of risk management measures that includes a testing protocol to ensure the system is performing consistent with its intended purpose.
- Article 10 – Data and data governance: This is focused on the training, validation, and testing of the underlying AI models. Specifically, Article…
