Episode Overview

AI regulation is moving from principles to binding rules and formal standards. This episode of Checks & Algorithms examines the EU AI Act, emerging AI laws in other jurisdictions, and the voluntary frameworks organizations use to manage AI risk, including the NIST AI RMF and ISO/IEC 42001. It is designed for candidates preparing for the IAPP AIGP certification and for anyone who needs a clear map of the global AI governance landscape.

Topics Covered

• EU AI Act Risk Tiers: Prohibited practices such as government social scoring, manipulative techniques targeting vulnerable groups, untargeted facial image scraping, and real-time remote biometric identification by law enforcement, with narrow exceptions; high-risk systems in areas such as employment, credit, education, critical infrastructure, and law enforcement, and their requirements for risk management, data governance, documentation, logging, transparency, and human oversight; transparency obligations for chatbots and deepfakes; and voluntary codes of conduct for minimal-risk AI.
• General-Purpose AI Models: Obligations for GPAI model providers, and additional requirements for models with systemic risk, presumed above 10^25 FLOPs of training compute.
• Enforcement and Penalties: Fines of up to €35 million or 7% of global annual turnover for prohibited practices, and up to €15 million or 3% for most other violations.
• Global AI Laws: Canada's proposed Artificial Intelligence and Data Act (AIDA) and what it would have required, US state laws on high-risk automated decision tools, and China's CAC rules on algorithm registration, security reviews, and labeling of generative AI content.
• NIST AI Risk Management Framework: The four core functions, Govern, Map, Measure, and Manage, and NIST's ARIA program for assessing AI risks and impacts.
• International Standards: ISO/IEC 42001 for AI management systems, ISO/IEC 22989 for AI terminology and concepts, ISO 31000 for enterprise risk management, and the Council of Europe's HUDERIA methodology for human rights, democracy, and rule of law impact assessments.

Intended Audience

• AIGP Candidates: Coverage aligned with Domain IV, Understanding Emerging AI Laws, Standards, and Frameworks.
• Compliance Officers and DPOs: Preparing for EU AI Act conformity assessments, GPAI obligations, and cross-border requirements.
• Enterprise Risk Managers: Implementing the NIST AI RMF and preparing for ISO/IEC 42001 certification.

Checks & Algorithms is a podcast on AI governance, covering the policies, standards, and accountability practices shaping artificial intelligence.