Josh Harguess, AI Security Chief at Cranium, discusses AI regulation comparisons between the US and other regions. Topics include the NSA purchasing US internet data, concerns about privacy and oversight, the ongoing legal battles between big social media platforms and states, and a comparison of AI regulation efforts. The chapter also explores the recent EU AI Act and its focus on risk-based regulation.
The EU has introduced the AI Act, which outlines high-risk uses of AI, including medical devices and education, and emphasizes transparency, documentation, copyrights, and penalties for non-compliance.
The US has a decentralized approach to AI regulation, with each agency developing its own guidelines, while states like California lead the way in AI regulation, focusing on privacy and governance.
Deep dives
EU AI Act: High-risk uses and penalties
The EU has introduced the AI Act, which focuses on identifying high-risk uses of AI, such as medical devices and influencing elections. It also includes unexpected areas like education and HR. The Act emphasizes transparency requirements, documentation, copyrights, and safeguards. Non-compliance can result in penalties of up to $38 million or 7% global turnover.
US Agency-driven Approach to AI
In contrast to the EU, the US has taken an agency-driven approach to AI regulation and governance. Each agency is developing its own guidelines and policies, and there is no centralized organization. While some agencies have released their plans for responsible AI usage, there are no specific regulations or penalties in place yet.
AI Regulation at the State Level
States like California are leading the way in AI regulation, focusing on privacy and governance. Companies with a multinational presence will need to navigate different regulations, similar to GDPR compliance.
Challenges and Priorities for Organizations
Organizations are focused on understanding their AI systems and identifying vulnerabilities, including the presence of shadow AI. Red teaming is seen as a valuable tool for discovering vulnerabilities and securing AI systems. Talent shortage and education on the intersection of cybersecurity and AI are key challenges for organizations.
Josh Harguess, AI Security Chief at Cranium, joins to talk about how the US compares with other regions of the world looking to regulate AI. Ben has the story of the NSA purchasing domestic internet data. Dave's got the story of an interesting pivot from Texas and Florida on their upcoming content moderation case in the Supreme Court.
While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.
A companion weekly newsletter is available CyberWire Pro members on the CyberWire's website. If you are a member, make sure you subscribe to receive our weekly wrap-up of privacy, policy, and research news, focused on incidents, techniques, tips, compliance, rights, trends, threats, policy, and influence ops delivered to you inbox each Thursday.
Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you.