As AI adoption accelerates and reshapes our future, organizations are adapting to evolving regulatory frameworks. In our report commissioned to Strand Companions, Unlocking Europe’s AI Potential within the Digital Decade 2025, 68% of European companies surveyed underlined that they wrestle to grasp their duties below the EU AI Act. European companies additionally highlighted that an estimated 40% of their IT spend goes in the direction of compliance-related prices, and people unsure about rules plan to take a position 28% much less in AI over the following yr. Extra readability round regulation and compliance is essential to satisfy the competitiveness targets set out by the European Fee.
The EU AI Act
The European Union’s Synthetic Intelligence Act (EU AI Act) establishes complete rules for the event, deployment, use, and provision of AI throughout the EU. It brings a risk-based regulatory framework with the overarching objective of defending basic rights and security. The EU AI Act entered into power on August 1, 2024, and can apply in phases, with most necessities changing into relevant over the following 14 months. The primary group of obligations on prohibited AI practices and AI literacy turned enforceable on February 1, 2025, with the remaining obligations to comply with regularly.
AWS prospects throughout industries use our AI providers for a myriad of functions, corresponding to to supply higher customer support, optimize their companies, or create new experiences for his or her prospects. We’re actively evaluating how our providers can finest assist prospects to satisfy their compliance obligations, whereas sustaining AWS’s personal compliance with the relevant provisions of the EU AI Act. Because the European Fee continues to publish compliance steerage, such because the Tips of Prohibited AI Practices and the Tips on AI System Definition, we’ll proceed to supply updates to our prospects by means of our AWS Weblog posts and different AWS channels.
The AWS method to the EU AI Act
AWS has lengthy been dedicated to AI options which are protected and respect basic rights. We take a people-centric method that prioritizes schooling, science, and our prospects’ must combine accountable AI throughout the end-to-end AI lifecycle. As a pacesetter in AI expertise, AWS prioritizes belief in our AI choices and helps the EU AI Act’s objective of selling reliable AI services. We do that in a number of methods:
- Amazon was among the many first signatories of the EU’s AI Pact, and the primary main cloud service supplier to announce ISO/IEC 42001 accredited certification for its AI providers, overlaying Amazon Bedrock, Amazon Q Enterprise, Amazon Textract, and Amazon Transcribe.
- AWS AI Service Playing cards and our frontier mannequin security framework improve transparency. AWS AI Service Playing cards present prospects with a single place to seek out info on the meant use circumstances and limitations, accountable AI design selections, and efficiency optimization finest practices for our AI providers and fashions. Amazon’s frontier mannequin security framework focuses on extreme dangers which are distinctive to frontier AI fashions as they scale in dimension and functionality, and which require specialised analysis strategies and safeguards.
- Amazon Bedrock Guardrails helps prospects implement safeguards tailor-made to their generative AI functions and aligned along with your accountable AI insurance policies.
- Our Accountable AI Information helps prospects suppose by means of tips on how to develop and design AI techniques with accountable issues throughout the AI lifecycle.
- As a part of our AI Prepared Dedication, we offer free academic assets that reach past expertise to embody folks, processes and tradition. Our programs cowl features like safety, compliance, and governance, in addition to foundational studying on introduction to accountable AI and accountable AI practices.
- Our Generative AI Innovation Heart provides technical steerage and finest practices to assist prospects set up efficient governance frameworks when constructing with our AI providers.
The EU AI Act requires all AI techniques to satisfy sure necessities for equity, transparency, accountability, and basic rights safety. Taking a risk-based method, the EU AI Act establishes completely different classes of AI techniques with corresponding necessities, and it brings obligations for all actors throughout the AI provide chain, together with suppliers, deployers, distributors, customers, and importers. AI techniques deemed to pose unacceptable dangers are prohibited. Excessive-risk AI techniques are allowed, however they’re topic to stricter necessities for documentation, information governance, human oversight, and threat administration procedures. As well as, sure AI techniques (for instance, these meant to work together straight with pure individuals) are thought of low threat and topic to transparency necessities. Aside from the necessities for AI techniques, the EU AI Act additionally brings a separate set of obligations for suppliers of general-purpose AI (GPAI) fashions, relying on whether or not they pose systemic dangers or not. The EU AI Act might apply to actions each inside and outdoors the EU. Subsequently, even when your group will not be established within the EU, you should still be required to adjust to the EU AI Act. We encourage all AWS prospects to conduct an intensive evaluation of their AI actions to find out whether or not they’re topic to the EU AI Act and their particular obligations, no matter their location.
Prohibited use circumstances
Starting February 1, 2025, the EU AI Act has prohibited sure AI practices deemed to current unacceptable dangers to basic rights. These prohibitions, a full checklist of which is offered below Article 5 of the EU AI Act, usually concentrate on manipulative or exploitative practices that may be dangerous or abusive and the analysis or classification of people based mostly on social habits, private traits, or biometric information.
AWS is dedicated to creating positive our AI providers meet relevant regulatory necessities, together with these of the EU AI Act. Though AWS providers assist a variety of buyer use case classes, none are designed or meant for practices prohibited below the EU AI Act, and we keep this dedication by means of our insurance policies, together with the AWS Acceptable Use Coverage, Accountable AI Coverage, and Accountable Use of AI Information.
Compliance with the EU AI Act is a shared journey as set out by the regulation and duties for builders (suppliers) and deployers of AI techniques, and though AWS gives the constructing blocks for compliant options, AWS prospects stay accountable for assessing how their use of AWS providers falls below the EU AI Act, implementing acceptable controls for his or her AI functions, and ensuring their particular use circumstances are compliant with the EU AI Act’s restrictions. We encourage AWS prospects to rigorously evaluation the checklist of prohibited practices below the EU AI Act when constructing AI options utilizing AWS providers and evaluation the European Fee’s not too long ago revealed tips on prohibited practices.
Transferring ahead with the EU AI Act
Because the regulatory panorama continues to evolve, prospects ought to keep knowledgeable in regards to the EU AI Act and assess the way it applies to their group’s use of AI. AWS stays engaged with EU establishments and related authorities throughout EU member states on the enforcement of the EU AI Act. We take part in business dialogues and contribute our data and expertise to assist balanced outcomes that safeguard towards dangers of this expertise, notably the place AI use circumstances have the potential to have an effect on people’ well being and security or basic rights, whereas enabling continued AI innovation in methods that may profit all. We’ll proceed to replace our prospects by means of our AWS ML Weblog posts and different AWS channels as new steerage emerges and extra parts of the EU AI Act take impact.
In case you have questions on compliance with the EU AI Act, or for those who require extra info on AWS AI governance instruments and assets, please contact your account consultant or request to be contacted.
For those who’d like to affix our group of innovators and find out about upcoming occasions and acquire professional insights, sensible steerage, and connections that assist you navigate the regulatory panorama, please categorical curiosity by registering.
