Eu and U. S. Ai risk Management a comparison and Implications for the ttc

Non-binding, even “does not constitute government policy.”

NIST AI Risk Management Framework

• Voluntary suggestions, guidance (official release is tomorrow)

All have AI principles of principles: accuracy, safety, fairness, transparent, accountable, and mention explainability and privacy

U.S. AI Risk Management – Binding Agency Guidance

U.S. AI Risk Management – Binding Agency Guidance

• EEOC requires transparency, non-discrimination, human oversight in AI hiring processes for people with disabilities;
• CFPB requires explanations for adverse actions (rejections/denials) of AI models in credit decisions
• FTC can enforce some data privacy, truth in advertising, commercial surveillance restrictions
• HUD tackling discrimination in property appraisal models

EU AI Risk Management – EU AI Act

EU AI Risk Management – EU AI Act

Subfield	EU Policy Developments
AI for Human Processes / Socioeconomic Decisions	High-risk AI applications in Annex III of EU AI Act will need to meet quality standards, implement risk management system, and perform conformity assessment
AI in Consumer Products	EU AI Act consider AIs implemented within products already regulated under EU law to be high risk, must have standards incorporated into current regulatory process
Chatbots	EU AI Act will require disclosure that a chatbot is an AI (i.e. not a human)
Facial Recognition	EU AI Act will include some restrictions on remote facial recognition / biometric identification. EU Data Protection Authorities have fined facial recognition companies under GDPR