Artificial Intelligence Act

Here you'll find all relevant and recent updates on the AI Act.

Introduction on the AI Act of the European Union

In April 2021, the European Commission presented its proposal for a Regulation of the European Parliament and of the Council laying down harmonised rules for AI, also known as the AI Act of the European Union. Three years later, the legislative process is completed.

Here, our AI Lawyers provide relevant background and information as well as the current status on the AI Act proposal: 

  • An article feed with relevant articles and comments, 
  • the Taylor Wessing legislation tracker,
  • links to all relevant documents,
  • graphic overviews on specific AI Act topics,
  • frequently asked questions and answers,
  • as well as relevant links for other information and further research.

We advise our clients on IT, telecommunications and data protection law and have particular experience in legal issues relating to digitalization and artificial intelligence.

The AI Act of the European Union is still in the making and this page is continuously updated. We encourage all visitors to contribute with ideas and suggestions. Do not hesitate to get in touch with us!

Artificial Intelligence Act

Planned guidelines regarding "AI liability" - cause for contractual regulations?

10 April 2024
Briefing

by Dr. Philipp Behrendt, LL.M. (UNSW) and Arno Maria Gotting, M.A., LL.M. (King’s College London)

Click here to find out more
Artificial intelligence

EU AI Act and the insurance industry - an interview with Allianz | Tech Me Up! Session #2

9 April 2024

by Dr. Christian Frank, Licencié en droit (Paris II / Panthéon-Assas)

Click here to find out more
Artificial Intelligence Act

The EU AI Act and general-purpose AI

28 March 2024
Briefing

by Thanos Rammos, LL.M. and Richard Gläser

Click here to find out more
Artificial intelligence

Tracking the EU AI Act, an interview with tech journalist Luca Bertuzzi | Tech Me Up! Session #1

7 March 2024

by multiple authors

Click here to find out more

The AI Act of the European Union: Legislation tracker

The AI Act is adopted as a European regulation under an ordinary legislative procedure in accordance with Art. 294 TFEU. The AI Act proposed by the European Commission must be adopted jointly by the European Parliament and the Council of the EU.

The Council published its position on the draft proposal back in December 2022. The European Parliament also subsequently drew up a position in its committees. In the case of the AI Regulation, the Internal Market Committee (IMCO) and the Committee on Civil Liberties, Justice and Home Affairs (LIBE) are taking the lead. In addition, other committees are responsible for individual topics and articles within the AI Regulation. Following the revision of the Commission's draft, the plenary voted on the legislative text. The Commission, Council and Parliament then began the final negotiations (known as the "trilogue") on the basis of the parliamentary proposal. In December 2023, the parties involved then reached a provisional agreement on a final draft, which was published in January 2024. In February 2024, the Member States and the parliamentary committees approved this draft.

The final vote in the European Parliament took place on 13 March 2024. Shortly afterwards, the AI Regulation will be published in the Official Journal of the EU and will enter into force on the 20th day after publication.

Below you will find all relevant documents in our legislation tracker, with which we keep you up to date on the legislative process of the AI Act.

PARLIAMENT

On 27 April 2023, the Parliament agreed on a draft. The key committees voted on the draft on 11 May 2023. The final vote in plenary took place in June 2023. A final version of the text was leaked in January 2024. In March 2024 a final numbered version was published. 

Date

Document

Document Type

Link

Description

06 March 2024 Consolidated version Consolidated version EN Version with final wording and final numbering
22 January 2024  Voting version  Consolidated version EN Version for further votes in the relevant parliamentary committees. Contains the text agreed by the Parliament and Council negotiators. 
11 May 2023 Position adopted by the key committees (IMCO and LIBE) Position on Proposal
EN  The Parliament also proposed amendments in its position on the legislative proposal. In particular, the heated discussions about general-purpose and generative AI – most prominent example: ChatGPT – gave rise to intensive revisions. First, the AI definition was brought in line with the OECD definition. Also, further AI practices were prohibited: Biometric identification systems, for example, are to be completely banned – contrary to what was originally proposed – without providing for exceptions for cases of terrorist attacks or kidnapping, for example. General-purpose AI and generative AI are to be regulated according to a tiered approach. According to this, the main responsibility should first fall on economic actors who integrate such AI into their applications. Providers of general-purpose AI should only have a supporting role with transparency obligations. In the case of generative AI, such as ChatGPT, on the other hand, a summary of the proprietary training data must be provided and it must be disclosed that the text is AI-generated. For classification as a high-risk AI system, it should now additionally be a condition that the system poses a significant risk to people’s health, safety or fundamental rights.
COUNCIL OF THE EU

Date

Document 

Document Type

Link

Description

22 January 2024  Voting version  Four-column document  EN  Version for the votes in the Council on 24 January 2024 and 2 February 2024. Contains the original version of the Commission's proposal for the AI Regulation, the amendments requested in accordance with the negotiating positions of the Council and Parliament and the text of the negotiators' agreement. 
06 December 2022 General Approach
Final Position on Proposal EN In its position, the Council has proposed changes to the original proposal of the Commission. For example, the position includes a restricted definition of AI. In addition, AI systems that serve military purposes or national security, as well as AI use by private individuals, are to be excluded from the scope of application. Social scoring should also be prohibited for private individuals – and not only for public authorities. But the list of high-risk AI systems has also been adjusted: For example, AI systems for the detection of deepfakes by law enforcement authorities and for crime analysis and evaluation of large data sets are no longer to be classified as high-risk. On the other hand, AI systems for risk assessment in life and health insurance and for use as security components in critical digital infrastructure were added as high-risk AI systems.
25 November 2022 Position on Proposal Note on General Approach from Permanent Representatives Committee to Secretariat of the Council EN  
COMMISSION

Date

Document

Document Type

Link

Description

28 September 2022 Proposal AI Liability Directive  Legislative Proposal
EN  The proposed directive aims to adapt the civil-law rules of non-contractual liability to the AI age. In particular, it provides for disclosure obligations for evidence and rebuttable presumptions. These are intended to take effect when obligations under the AI Act are breached and, in this way, improve the chances of success for harmed parties to claim damages. The AI Liability Directive is thus closely intertwined with the AI Act.
21 April 2021  Proposal AI Act

Legislative Proposal  EN

The legislative proposal divides AI systems into four different risk categories according to its risk-based approach. Based on this, the proposal contains regulations on bans, lays down strict requirements and obligations for high-risk AI systems and provides for relatively lenient transparency obligations for other AI systems. In this way, the development, putting onto the market and use of AI systems in the European Union are to be regulated in a harmonised manner.
21 April 2021  Proposal AI Act Annex   Legislative Proposal  EN  The annexes contain further specifications that are referred to in the provisions of the regulation. For example: the techniques and concepts of Artificial Intelligence relevant to the AI Act, a list of high-risk systems or specifications on the conformity assessment.

Other relevant documents on the AI Act

EUROPEAN INSTITUTIONS AND CONSULTATIVE BODIES (without Legislative Power)

Date

Document

Document Type

Link

Description

29 December 2021 European Central Bank I
European Central Bank II
Opinion EN 
EN
 
02 December 2021 European Committee of the Regions Opinion EN
 
22 September 2021 European Economic and Social Committee (EESC) Opinion
EN
 
 18 June 2021 European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) Opinion EN   
21 April 2021 Final Impact Assessment
(EU Commission)
Impact Assessment EN  
23 July 2020 Inception Impact Assessment (EU Commission)
Impact Assessment EN
 
19 February 2020 White Paper (EU Commission)   EN  
08 April 2019 European Commission about Guidelines for Trustworthy Artificial Intelligence Guidelines  EN   
07 December 2018 Coordinated Plan for Artificial Intelligence of the European Commission
Annex to the Coordinated Plan
Coordinated Plan EN
EN
 
 25 April 2018 AI Strategy of the European Commission Strategy EN   
OTHERS

Date

Document

Document Type

Link

Description

 25 November 2022 Statement by Germany on General Approach of the Council of the EU Note  EN  
 November 2022 Intellera Consulting Report  EN  Estimating compliance costs for a small-medium AI provider
 November 2022 Open Loop
(supported by Meta)
Report  EN Testing of some articles of the AI Act with companies around the world to assess how understandable, feasible, and effective they are 
05 October 2022 European Digital SME Alliance Opinion EN   
05 October 2022 European Association of the Machine Tool Industries and Related Manufacturing Technologies (CECIMO) Opinion  EN   
26 September 2022 Expert Statements in German Parliament Opinion  DE   
19 September 2022
German Opinion Opinion  EN   
30 March 2022 German Insurance Association Opinion DE  
25 November 2021 German Bar Association  Opinion DE   
10 August 2021 German Banking Industry Opinion DE  
06 August 2021 German Electro and Digital Industry Association Opinion EN   
06 August 2021  German AI Association Opinion EN  
04 August 2021 German Medical Technology Association Opinion DE  
30 June 2021 German Women Lawyers Association Opinion

DE

 

AI Act – Overviews

AI act tracker

AI Act: Competent Parliamentary Committees

Learn more (pdf)

More

Overview of employment-related restricted shares

AI Act: Fines

Learn more (pdf)

More

AI act tracker

AI Act: Addressees

Learn more (pdf)

More

Summary of growth shares

AI Act: Prohibited AI Practices

Learn more (pdf)

More

FAQ on the AI Act (created with the help of ChatGPT)

What is Artificial Intelligence (according to the AI Act)?

According to the AI Act, an AI system is defined as "a machine-based system designed to operate with varying levels of autonomy, that may exhibit adaptiveness after deployment and that, for explicit or implicit objectives, infers, from the input it receives, how to generate outputs such as predictions, content, recommendations, or decisions that can influence physical or virtual environments."

This definition corresponds to the definition of the Organization for Economic Cooperation and Development (OECD). This use of an internationally developed and recognized definition can promote its acceptance and harmonization.

What does the AI Act regulate?

The AI Act is a proposed regulation by the European Union that aims to establish a legal framework for the development, deployment, and use of AI systems in the EU. The proposed regulation seeks to ensure that AI systems used in the EU are transparent, reliable, and safe, and that they respect fundamental rights and values.

The AI Act covers a wide range of AI applications, including but not limited to:

  • Biometric identification and categorization systems
  • Critical infrastructure, such as transport and energy systems
  • Educational and vocational training systems
  • Employment, workers, and human resources management systems
  • Law enforcement and judicial systems
  • Marketing and advertising systems
  • Recruitment and human resources systems
  • Social scoring systems

The regulation governs a variety of aspects related to the development, deployment and use of AI systems, including:

  • Classification of AI systems: The regulation distinguishes between different types of AI systems, depending on the level of risk they pose. High-risk AI systems, such as autonomous vehicles or credit scoring systems, are subject to stricter requirements and controls than lower-risk AI systems, such as chatbots.
  • Requirements for AI systems: The regulation sets out minimum requirements that AI systems must meet in order to be safe, transparent, reliable and accountable. These include requirements for data quality, human supervision and control, transparency and traceability of decisions, and compliance with ethical principles.
  • Conformity assessment and certification: The regulation provides that high-risk AI systems must be subject to conformity assessment and certification to ensure that they meet the requirements and standards of the regulation.
  • Responsibility and sanctions: The regulation stipulates that the responsibility for the use of AI systems lies primarily with the providers and deployers of the systems and provides for possible sanctions for violations of the regulation.
  • Monitoring and oversight: The regulation requires EU Member States to establish appropriate monitoring and oversight authorities to ensure compliance with the requirements and standards of the regulation.

The AI Act also establishes a European Artificial Intelligence Office, which, together with the Member State authorities, which will be responsible for overseeing the implementation and enforcement of the regulation across the EU.

Who is affected by the AI Act?

The AI Act will affect a wide range of stakeholders involved in the development, deployment, and use of AI systems in the EU. In particular, the AI Act will be relevant for the following stakeholders:

  • AI developers and providers: Companies and organizations that develop or provide AI systems in the EU will need to comply with the requirements and obligations set out in the regulation.
  • Deployers and operators of AI systems: Companies and organizations that use or operate AI systems in the EU will need to ensure that they comply with the requirements and obligations set out in the regulation.
  • Regulators and supervisory authorities: National authorities in the EU will be responsible for enforcing the regulation and ensuring that AI systems used in their respective countries comply with the requirements and obligations set out in the regulation. The European Artificial Intelligence Office will provide guidance and support to national authorities in this regard.
  • Consumers and citizens: The regulation aims to protect the rights and interests of consumers and citizens in the EU who interact with AI systems. This includes ensuring that AI systems are transparent and that users are informed about the use of AI in their interactions with companies and organizations.
Is the AI Act relevant outside the EU?

The AI Act is primarily aimed at regulating the development, deployment, and use of AI systems in the EU. However, its impact is likely to be felt beyond the borders of the EU, given the global nature of the AI industry and the potential for AI systems to be used across multiple jurisdictions.

There are a few reasons why the AI Act may be relevant outside the EU:

  • Compliance with the AI Act may be required for companies that operate in the EU or provide AI systems to customers in the EU. Companies based outside the EU that provide AI systems to EU customers will need to ensure that their systems comply with the requirements and obligations set out in the regulation.
  • The AI Act may influence the development of AI regulations in other jurisdictions. Other countries and regions may look to the EU's regulatory approach as a model for their own AI regulations, or may seek to align their regulations with the EU's standards in order to facilitate cross-border trade and cooperation.
  • The AI Act's focus on ethical and trustworthy AI may set a precedent for global AI governance. The regulation's emphasis on ensuring that AI systems respect fundamental rights and values, such as human dignity and privacy, reflects a growing global consensus on the need for ethical and responsible AI.
 
When does the AI Act take effect?

The AI Act has not yet been adopted. The European Commission proposed the regulation in April 2021, and it will need to be reviewed and approved by the European Parliament and the Council of the EU before it can become law.

On 6 December 2022, the Council of the EU published its general approach regarding the AI Act proposal. During the last votes in the Parliament, heated discussions about new, disruptive AI applications on the market – namely: ChatGPT – caused delays in the process. On 27 April 2023, the Parliament agreed on a draft of its position. The leading committees voted on the draft on 11 May 2023. The final vote in plenary took take place in June 2023. In the trilogue process, the parties involved unofficially agreed on a final draft in December 2023. The Member States and the parliamentary committees involved approved this draft in February 2024. The final vote in the European Parliament took place on 13 March 2024. Shortly afterwards, the AI Regulation will be published in the Official Journal of the EU and will then enter into force on the 20th day after publication. The standards will become fully applicable 24 months after entry into force, whereby a graduated procedure is provided for some AI systems, which makes some regulations applicable even earlier: 

  • 6 months after entry into force (approx. November 2024): Shutdown of prohibited AI systems.
  • 12 months after entry into force (approx. May 2025): Obligations for GPAI systems become applicable.
  • 24 months after entry into force (approx. May 2026): All provisions of the AI Regulation become applicable, in particular those for high-risk AI systems under Annex III.
  • 36 months after entry into force (approx. May 2027): Obligations for high-risk AI systems according to Annex II become applicable.
AI Act

AI – are we getting the balance between regulation and innovation right?

Interface edition on the AI Act

Read now
Read now
Test for Green CTA

Latest insights in your inbox

Subscribe to newsletters on topics relevant to you.

Subscribe
Subscribe

Featured insight

Technology, media & communications

Metaverse, Mixed Reality and a whole new business world?

More

Related events

There are no upcoming events