EU AI Act

Full definition

The Act classifies AI systems into four tiers: prohibited (e.g., social scoring, real-time public biometric ID with narrow exceptions), high-risk (Annex III: hiring, credit, insurance, critical infrastructure, law enforcement, education, biometrics, medical devices), limited-risk (chatbots, deepfakes — transparency obligations), and minimal-risk. General-purpose AI models (GPAI) face additional obligations on documentation, copyright, and — for systemic-risk models — evaluation and cybersecurity. Fines reach €35M or 7% of global annual turnover, whichever is higher.

Why it matters

The EU AI Act applies extraterritorially: any organization placing AI on the EU market or whose AI outputs are used in the EU is in scope, regardless of where the company is headquartered. Most large US, UK, and Asian firms therefore plan their global AI compliance around the AI Act, similar to how GDPR became the de facto global privacy baseline.

Example

A US healthcare-AI vendor selling to French and German hospitals must produce a conformity assessment, technical documentation, post-market monitoring plan, and CE marking under the AI Act's high-risk medical-device pathway — even though its primary market is the United States.

Related terms

• AI Governance
  AI governance is the framework of policies, roles, controls, and processes an organization uses to ensure its AI systems are lawful, safe, fair, accountable, and aligned with business intent — across the full lifecycle from problem framing to retirement.
• AI Audit
  An AI audit is a structured, evidence-based examination of an AI system or AI program against defined criteria — covering training data, model, deployment context, monitoring, and governance — performed by an internal team, an external firm, or a regulator.
• AI Bias
  AI bias is systematic, unfair difference in an AI system's outputs across demographic, geographic, or other groups — usually caused by biased training data, biased labels, or biased problem framing rather than the algorithm itself.
• Explainability (XAI)
  Explainability (XAI) is the property of an AI system whose decisions can be understood by humans — through model-level documentation, prediction-level attributions, and counterfactual explanations — and a regulatory expectation in finance, healthcare, hiring, and other high-stakes domains.
• Algorithmic Accountability
  Algorithmic accountability is the principle that a specific person, role, or organization is identifiable and answerable for the design, deployment, outcomes, and harms of an automated decision system — and that the mechanisms to enforce that answerability exist.