Guidance on implementing the AIA: Your next steps
Read here to find out how you can meet the new legal requirements in a targeted manner.
1. Check whether you are affected
The AIA applies to AI systems and general-purpose AI models (GPAI) that are available on the European market. Only a few AI systems and models are excluded from the scope. The AIA also takes a risk-based approach and sets out different levels of requirements for different types of AI systems and models. In addition to determining whether an AI system or model falls under the AIA, the respective technology must also be assigned to one of the risk classes of the AIA. Check the applicability of your AI system or model now with our free quick check!
2. Clarify roles
The AIA focuses on providers and deployers of AI systems. While providers must ensure that their AI technologies comply with the requirements of the AIA, deployers are responsible for the safe use of AI. Providers of general-purpose AI models must comply with additional requirements. In addition, the AIA provides for graduated obligations for, e.g., authorised representatives, importers, distributors and other natural and legal persons. Companies must therefore examine the role they play in the market.
3. Implementing requirements
Providers of high-risk AI systems must carry out a risk assessment and design the system in such a way that risks to health, safety and fundamental rights are minimised. During the use phase, deployers of high-risk AI systems, in addition to providers, have a number of important obligations. For example, they must ensure correct use, appropriate human supervision and event logging. Other operators along the value chain in the field of AI systems are primarily subject to testing, monitoring and documentation obligations. The AIA also imposes strict obligations on providers of general-purpose AI models. Given this regulatory complexity and the fact that the entire life cycle of AI systems is covered from the development phase onwards, companies should determine at an early stage which obligations apply in each specific case.
4. Monitoring
Both the legal situation and AI technology are subject to change, which may be accompanied by changing requirements. Companies must therefore continuously monitor both and respond to relevant changes. It is advisable to introduce and continuously adapt the processes required by the AIA for monitoring, documenting and evaluating the respective AI technology in order to reliably fulfil regulatory obligations even after an AI system or model has entered the market.