Hey everybody
When I was authoring my LinkedIn newsletter, one of the more popular sections (which came about from requests from my connections) was the regulation updates. So, I'll be keeping that going through a regular post on the most recent regulation articles that I've seen that I think are important/interesting.
EDPB adopts statement on DPAs' AI Act role
The European Data Protection Board adopted a statement indicating EU data protection authorities are best positioned to handle national-level enforcement of the AI Act. The board reasons that DPAs carry the "experience and expertise" to be market surveillance authorities under the AI Act and they have "proven and are proving to be indispensable actors in the chain leading to the safe, rights-oriented and secure deployment of AI systems."
Potential gaps, uncertainty loom over EU AI Act
The Financial Times took a wide-ranging look at the potential hurdles facing EU AI Act implementation and compliance. Senior EU officials warned against various hurdles to come, including gaps in the legislation that may require a range of secondary legislation to avoid ambiguity and uncertainty. Other potential issues explored include the timely establishment of codes of conduct, properly addressing the relationship between AI and copyright, and standing up the European AI Office.
UK King's Speech omits AI bill proposal, seeks 'appropriate' legislation
TechCrunch reports the U.K. King's Speech did not include an expected proposal for AI regulation, but a commitment to seek "appropriate legislation." U.K. officials confirmed there are no concrete plans for an AI bill at this time, while the speech called for exploration of legislation "to place requirements on those working to develop the most powerful artificial intelligence models."
Fitness company faces lawsuit over alleged nonconsensual AI training data collection
A lawsuit filed to a U.S. court in California claimed fitness company Peloton shared user data with marketing firm Drift for AI training purposes, IT Pro reports. Peloton is accused of violating the California Invasion of Privacy Act by allegedly using "third parties' software to secretly wiretap and eavesdrop on the private conversations of users of the chat features on the website."
Class-action lawsuit alleges nonconsensual AI training data use
A class-action lawsuit filed against outdoor goods retailer Patagonia alleges customer interactions were used to train AI models without permission, The Record reports. The company contracts with Talkdesk, which allegedly used some of the information it gathered to help create new products.
These updates are interesting enough by themselves, but together help inform how you should be thinking about governance relating to AI. As you can see, even through there is now 'some' legislation going live, there is still amount of ambiguity. So it remains a sensible approach to keep up to date, and expect things to change. However, the last two updates that are more around litigation brings me to remind you all that you should be as transparent as possible when it comes to your communication around how you intend to use data collected (plus what data you are collecting and whether it is relevant).
I hope this is help. Let me know in the comments.