The EU Artificial Intelligence (AI) Act Compliance

Module 1: Introduction to the EU AI Act (30 minutes)

• Overview of the legislative framework and objectives of the EU AI Act
• Key definitions: AI system, provider, deployer, high-risk AI, general-purpose AI (GPAI)
• Scope and applicability: Who needs to comply?
• Timelines for implementation

Module 2: Risk Classification of AI Systems (45 minutes)

• Four-tier risk classification:
  • Unacceptable risk (prohibited AI systems)
  • High-risk AI systems and regulatory obligations
  • Limited risk AI systems and transparency requirements
  • Minimal risk AI systems (unregulated but encouraged to follow best practices)
• Case studies of AI system classification

Module 3: Prohibited AI Practices (45 minutes)

• Overview of Article 5 of the EU AI Act
• Prohibited AI applications:
  • Subliminal/manipulative AI causing significant harm
  • Exploitation of vulnerable populations
  • Biometric categorization of sensitive attributes
  • Social scoring systems
  • Predictive policing based on profiling or personal traits
  • Mass facial recognition via untargeted scraping
  • Emotion recognition in workplaces and education (exceptions apply)
  • Real-time biometric identification in public spaces (limited exceptions)
• Legal consequences of non-compliance

Module 4: Compliance Requirements for High-Risk AI Systems (1 hour)

• Identifying high-risk AI use cases (Annex I & III)
• Obligations for providers (developers) of high-risk AI:
  • Risk management systems throughout the AI lifecycle
  • Data governance and dataset quality requirements
  • Technical documentation and compliance demonstration
  • Logging and record-keeping
  • Human oversight mechanisms
  • Accuracy, robustness, and cybersecurity requirements
  • Quality management systems
• Obligations for deployers (users) of high-risk AI:
  • Monitoring and reporting obligations
  • Ensuring human oversight
  • Data protection and transparency duties
• Case study: Implementation of high-risk AI compliance requirements

Module 5: General-Purpose AI (GPAI) and Systemic Risk (45 minutes)

• Definition and obligations for GPAI providers
• Compliance requirements:
  • Technical documentation
  • Copyright Directive compliance
  • Summary of training data
  • Cooperation with high-risk AI system providers
• Systemic risk criteria and obligations for high-impact GPAI:
  • Model evaluation and adversarial testing
  • Risk assessment and mitigation
  • Serious incident reporting
  • Cybersecurity protections
• Role of voluntary codes of practice and harmonized standards

Module 6: Governance, Enforcement, and Penalties (30 minutes)

• Role of the AI Office and national supervisory authorities
• Mechanisms for compliance monitoring and enforcement
• Complaint mechanisms for downstream providers
• Penalties for non-compliance and risk mitigation strategies

Module 7: Practical Compliance Strategies for Organizations (45 minutes)

• Developing an AI compliance framework
• Conducting AI impact assessments and risk classification
• Integrating legal, ethical, and technical compliance practices
• Documentation best practices for audits and regulatory reviews
• Case study: Best practices from leading AI companies

Q&A and Closing Discussion (30 minutes)

• Open floor for participant questions
• Final thoughts on navigating compliance challenges
• Recommended next steps for organizations

The trainer is a seasoned expert with over two decades of experience in regulatory compliance, risk management, and anti-financial crime (AFC) within the banking and infrastructure sectors. His expertise spans Anti-Money Laundering (AML), Countering the Financing of Terrorism (CFT), Anti-Bribery and Corruption (ABAC) compliance, sanctions compliance, corporate governance, non-financial risk management, and data privacy regulations.

He has held leadership roles in regulatory and compliance functions, served on audit committees, and contributed to major international organizations, including the United Nations, Inter-American Development Bank, and HSBC. As a consultant and advisor, he has supported risk management, internal controls, and compliance program implementation across multiple industries and jurisdictions.

• Understand the legal and regulatory framework for AI in the European Union.
• Understand the changes and new obligations imposed by the EU AI Act.
• Identify and assess the risks associated with AI system development and deployment.
• Implement effective governance and compliance strategies for AI systems.
• Ensure adherence to AI transparency and accountability requirements.
• Navigate the ethical implications of AI.
• Stay up-to-date on the latest developments and best practices in AI.

• This course focuses specifically on the unique compliance requirements of the EU AI Act, providing an analysis of its implications for businesses operating in the European market.
• The course is delivered by specialists with a proven track record in delivering compliance programs within the context of global financial markets.
• Going beyond technical requirements, the course covers the legal, ethical, and governance aspects of AI compliance.
• It incorporates industry case studies, interactive exercises, and practical resources to enhance the learning process.
• The course emphasizes the importance of staying up-to-date with the latest developments and best practices, especially in a landscape of constant change and innovation.

This course is designed for a broad range of professionals involved in or impacted by the development, deployment, and governance of AI systems in the EU. It is particularly relevant for:

• Business leaders and executives
• Legal and compliance professionals
• AI developers and engineers
• Data scientists and analysts
• Product managers
• Risk managers
• Consultants and advisors

This course provides a comprehensive understanding of the compliance framework under the EU’s regulation on AI, and is delivered by an experienced specialist with a long track record in the global financial markets and specialization in the implementation of data privacy compliance. Whether you are a provider, user, developer, manager, advisor, regulator, or investor, this course is essential for preparing for the upcoming regulatory landscape and for ensuring the responsible and compliant use of AI.

Case Study: The participants will use a variety of case studies and exercises based on hypothetical and real cases (the latter, based on publicly available information).