The EU AI Act is a good start but falls short

Chalisa Veesommai Sillberg,Jose Siqueira De Cerqueira,Pekka Sillberg,Kai-Kristian Kemell,Pekka Abrahamsson

2024-11-13

Abstract:The EU AI Act was created to ensure ethical and safe Artificial Intelligence (AI) development and deployment across the EU. This study aims to identify key challenges and strategies for helping enterprises focus on resources effectively. To achieve this aim, we conducted a Multivocal Literature Review (MLR) to explore the sentiments of both the industry and the academia. From 130 articles, 56 met the criteria. Our key findings are three-fold. First, liability. Second, discrimination. Third, tool adequacy. Additionally, some negative sentiments were expressed by industry and academia regarding regulatory interpretations, specific requirements, and transparency issues. Next, our findings are three essential themes for enterprises. First, risk-based regulatory compliance. Second, ethical frameworks and principles in technology development. Third, policies and systems for regulatory risk management. These results identify the key challenges and strategies and provide less commonly discussed themes, enabling enterprises to align with the requirements and minimize their distance from the EU market.

Software Engineering

What problem does this paper attempt to address?

The problem that this paper attempts to solve is: Although the EU AI Act is a good start in ensuring the ethics and safety of artificial intelligence (AI) development and deployment, what are the key challenges in actual implementation and what strategies should enterprises adopt to effectively address these challenges?

Specifically, through the Multivocal Literature Review (MLR) and Natural Language Processing (NLP) methods, the research explored the views of the industry and academia on compliance with the EU AI Act, and summarized the main challenges faced by enterprises in implementing the Act and the corresponding coping strategies. The research aims to help enterprises better understand the requirements of the EU AI Act, so as to conduct compliance management more effectively.

### Main problems and solutions

1. **Key challenges**:
- **Liability**:
- Enterprises need to adjust their compliance management and liability management strategies.
- Specific measures include establishing governance and compliance frameworks, conducting risk assessments, maintaining documentation, and implementing human supervision mechanisms, especially in critical decision - making areas such as healthcare.

- **Discrimination**:
- Enterprises need to actively manage discrimination risks to ensure legal compliance and maintain customer trust.
- Measures include implementing strict bias detection procedures, regularly auditing AI systems, and adopting transparent practices, such as adding human intervention in the decision - making process to ensure fairness.

- **Tool Adequacy**:
- Enterprises need effective and highly adaptable compliance tools to support ethical AI practices.
- The tools should have update and complexity management functions to cope with the ever - changing compliance requirements, and can be integrated into the governance and risk management frameworks to help enterprises manage the complexity of AI systems.

2. **Coping strategies**:
- **Risk - based Regulatory Compliance Systems**:
- It is emphasized that enterprises should conduct compliance management according to risk classification to ensure strict assessment and compliance inspection of high - risk AI systems.

- **Ethical Frameworks and Principles in Technology Development**:
- Enterprises should incorporate ethical frameworks and best practices in the AI development process to ensure the morality and social value of technological development.

- **Policies and Systems for Regulatory Risk Management**:
- Formulate and implement relevant policies and systems to effectively manage AI - related regulatory risks and ensure enterprise compliance and sustainable development.

Through the above analysis, the paper provides specific guidance for enterprises, helping them better understand and address the challenges brought by the EU AI Act, so as to achieve compliance and promote the healthy development of AI technology.