On 21 May 2024, the Council of the European Union adopted the regulation laying down harmonised rules on Artificial Intelligence (Artificial Intelligence Act). The AI Act is based on a risk-based management approach and introduces data protection obligations depending on the level of risk associated with the AI system. The Act includes a ban on cognitive behavioural manipulation, the untargeted scrapping of facial images from the internet, social scoring, biometric categorisation to infer sensitive data, such as sexual orientation or religious beliefs, and some cases of predictive policing for individuals. Further, the Act establishes certain data governance practices for training and testing data, such as the fact that they should be relevant, accurate, and sufficiently representative. The Act will come into effect 20 days following its publication in the Official Journal and will be implemented 24 months after it enters into force. Chapters I and II will apply 6 months after the Act's effective date. Chapter III Section 4, Chapter V, Chapter VII, Chapter XII, and Article 78 will be implemented 12 months after the Act comes into effect.
Original source