Thread by @EUstaran

Just back from a 🇺🇸 roadshow to spread the word about the emerging #AI regulation in 🇪🇺&🇬🇧, and the learning points from speaking to technology & privacy professionals are significant. Mini-🧵

1️⃣Overall, there is an understanding that this is happening and is happening fast, but for a sizeable majority, it is truly eye opening to hear about the breadth & depth of the forthcoming #AI regulatory regime and fully appreciating the precise impact is going to take time.

2️⃣The parallels with the emergence & spread of the #GDPR (despite the very different obligations) is what really makes people realise how ambitious #AI regulation is and how it will be affecting biz across the Atlantic.

3️⃣An effective way to explain how #AI regulation will affect legal compliance activities that 🇺🇸 #privacy professionals clearly understand is to show how the requirements will equate to the efforts devoted to meeting #GDPR accountability obligations, but several times over.

4️⃣The complex reality of #AI development is that the potential use cases are limitless (from the almost mundane to the truly transformational for the world), so assessing the precise impact of the proposed regulations on each scenario is key to determine efforts & resources.

5️⃣For experienced #privacy professionals, the fact that the proposed #AIAct changes the controller/processor paradigm to place the most substantive obligations on developers who may not know how their #AI will be employed by users is a steep hill to climb.

6️⃣A bit like any attempts to avoid the application of #GDPR by arguing that most data is not personal data, instinctive reactions to argue that most #AI is not “high risk” appear largely futile because ultimately it is going to be almost impossible to limit the purposes of #AI.

7️⃣Finally, for me the key lesson is that we have reached the point where we are starting to shape the building blocks of global #AI compliance programmes, and this work is now going to be ongoing pretty much forever. END