Regulation for AI is first step – comment from The DPO Centre following the European Union’s first regulatory framework governing the use of artificial intelligence published on the 21st April 2021.

Rob Masson from The DPO Centre commented

“Whilst this first regulatory framework is an important step in help companies understand their Artificial intelligence (AI) responsibilities it seems to be a case of legislation running to catch up with technology, but the technology is already many steps ahead.”

“Many organisations come to The DPO Centre seeking to understand their regulatory and legal AI obligations. In particular, high-quality, accurate, unbiased data is key to building robust models for AI systems and the EU has said it wants to ensure legal clarity in AI-based applications, especially regarding data. Any company using AI systems will now need to look at its practices to ensure they understand the proposed new rules and meet the required standards.”

“One area where the regulation is very clear is in protecting the rights of EU citizens by banning the use of AI systems that can manipulate human behaviour as well as AI systems that are used for surveillance and social scoring. ”

There are likely to be heavy fines imposed for those organisations that get it wrong, so much like compliance failures related to the GDPR, we are likely to see some significant penalties imposed once the regulation has been adopted.”


About The DPO Centre

Founded in 2017 by Rob Masson, The DPO Centre is the UK’s leading independent data protection resource centre, offering expert advice and ensuring organisations have access to the level of knowledge and expertise they require to comply with the highest standards of privacy and data protection.  Follow the DPO Centre on LinkedIn https://www.linkedin.com/company/dpo-centre/ The DPO Centre’s services include: • Providing outsourced Data Protection Officers on a ‘fractional’ basis (so 1 to 8 days per month) that become integral and trusted members of the client’s team • Interim and overflow resources to support and extend existing compliance teams • EU and UK representation as required by Article 27 of the GDPR • and a full range of privacy and data protection consultancy and training services to companies across all sectors in the UK.