- Chief Compliance Officer and VP of Legal Affairs, Arrow Electronics
By 
Ruth Prickett2024-12-23T10:00:00
Breaches of the EU’s ground-breaking General Data Protection Regulation (GDPR) can cost companies substantial sums and huge reputational damage. Now some are warning that the implementation of the EU’s AI Act, the first phase of which begins in February 2025, will be just as far-reaching, and could potentially lead to similar numbers of cases. Meanwhile, increasing digital regulation is refocusing boards’ attention on data governance, including GDPR compliance.
The AI Act is expected to set a new global standard that others will follow, so even organizations that are not directly in scope should be paying attention.
In a white paper published in October, the Information Systems Audit and Control Association (ISACA) wrote: “The act is touted as the first comprehensive AI law in the world. Given the broad and thorough nature of the act, it is possible that future AI laws and regulations could be modelled off the EU AI Act, similar to what happened with the EU’s [GDPR].”
THIS IS MEMBERS-ONLY CONTENT. To continue reading, choose one of the options below.
News and analysis for the well-informed compliance or audit exec. Select an option and click continue.
Annual Membership $499 Value offer
Full price one year membership with auto-renewal.
Membership $599
One-year only, no auto-renewal.
The majority of businesses are using AI and doing so without governance–a compliance gap that poses extreme risks, a new survey by Compliance Week and GAN Integrity found. A webinar will discuss why it is crucial to have AI governance, how to implement it, and what strategies to strengthen programs. ...
Data governance has become a key concern for companies, especially when the EU AI Act and General Data Protection Regulation have put a premium on handling data responsibly and ensuring that artificial intelligence does not cause harm.
The era of artificial intelligence adoption is testing the old ways of doing compliance, underscoring the need for continuous monitoring. Compliance isn’t a one-and-done activity, but sometimes organizational incentives and goals fail to prioritize the importance of this.
Any product that uses AI needs to be safety assessed for its entire lifespan under new rules that went into effect recently across the EU. Experts warned companies using AI to tailor products could be classed as “manufacturers” and face the same duty of care as developed.
When lawmakers slam the U.K.’s chief financial regulator as “incompetent,” it not only opens the doors for others to pile criticism on it, but it sparks a debate about how the organization can be improved–or removed.
The U.K. Financial Conduct Authority apologized to investors in peer-to-peer investment firm Collateral for not acting swiftly enough to prevent Collateral from defrauding its customers.
