Digital Policy Alert logo

European Union: Published AI regulation proposal including data protection obligations

Go to policy change overview
Share

Compare with different regulatory event:

Description

Published AI regulation proposal including data protection obligations

On 21 April 2021, the European Commission published its proposal for laying down harmonised rules on artificial intelligence (AI Act), outlining requirements for the development, commercialization and use of artificial intelligence (AI). The proposal includes data collection and data governance obligations, transparency of such practices towards the users, as well as technical documentation and record-keeping.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
ML and AI development
Implementation Level
supranational
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2021-04-21
under deliberation

On 21 April 2021, the European Commission published its proposal for laying down harmonised rules o…

2022-12-06
under deliberation

On 6 December 2022, the Council of the European Union adopted its general approach on the Artificia…

2023-05-11
under deliberation

On 11 May 2023, the European Parliament Committee on Civil Liberties, Justice and Home Affairs (LIB…

2023-06-14
under deliberation

On 14 May 2023, the European Parliament adopted its position on the Act on Harmonised Rules for Art…

2023-12-09
under deliberation

On 9 December 2023, the Parliament and the Council of the European Union adopted a provisional agre…

2024-03-13
under deliberation

On 13 March 2024, the European Parliament passed the regulation laying down harmonised rules on Art…

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity ML and AI development
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
algorithm: ML/AI optimisation algorithm incl. matching, ranking, sorting: creation (any form)
Regulatory tool
Risk or other impact assessment requirement
Registration requirement
Technical standard adherence
Local representation requirement
Post-market monitoring requirement
Recordkeeping requirement
Regulator reporting requirement
User right against automated decision making
Other oversight tool
Preventive security requirement
Responsive security requirement
Sanctions
Fine
Regulated subjects
1
algorithm: ML/AI optimisation algorithm incl. matching, ranking, sorting: distribution (any form)
Regulatory tool
Risk or other impact assessment requirement
Registration requirement
Technical standard adherence
Local representation requirement
Post-market monitoring requirement
Recordkeeping requirement
Regulator reporting requirement
User right against automated decision making
Other oversight tool
Preventive security requirement
Responsive security requirement
Sanctions
Fine
Regulated subjects
1
algorithm: ML/AI optimisation algorithm incl. matching, ranking, sorting: monetisation (any form)
Regulatory tool
Risk or other impact assessment requirement
Registration requirement
Technical standard adherence
Local representation requirement
Post-market monitoring requirement
Recordkeeping requirement
Regulator reporting requirement
User right against automated decision making
Other oversight tool
Preventive security requirement
Responsive security requirement
Sanctions
Fine
Regulated subjects
1
consumer data (all forms): data collection
Regulatory tool
Purpose/processing limitation
Recordkeeping requirement
Regulator reporting requirement
User right to restriction of personal data processing
User right against automated decision making
Preventive security requirement
Sanctions
Fine
Regulated subjects
1
consumer data (all forms): data processing
Regulatory tool
Purpose/processing limitation
Recordkeeping requirement
Regulator reporting requirement
User right to restriction of personal data processing
User right against automated decision making
Preventive security requirement
Sanctions
Fine
Regulated subjects
1
consumer data (all forms): storage (any form)
personal data: biometric: data collection
personal data: biometric: data processing
personal data: biometric: storage (any form)
corporate data: customer/user behavioural data: data collection
corporate data: customer/user behavioural data: data processing
corporate data: customer/user behavioural data: storage (any form)
corporate data: other: data collection
corporate data: other: data processing
corporate data: other: storage (any form)

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

algorithm: ML/AI optimisation algorithm incl. matching, ranking, sorting: creation (any form)

algorithm: ML/AI optimisation algorithm incl. matching, ranking, sorting: distribution (any form)

algorithm: ML/AI optimisation algorithm incl. matching, ranking, sorting: monetisation (any form)

consumer data (all forms): data collection

consumer data (all forms): data processing

consumer data (all forms): storage (any form)

personal data: biometric: data collection

personal data: biometric: data processing

personal data: biometric: storage (any form)

corporate data: customer/user behavioural data: data collection

corporate data: customer/user behavioural data: data processing

corporate data: customer/user behavioural data: storage (any form)

corporate data: other: data collection

corporate data: other: data processing

corporate data: other: storage (any form)