Inside The EDPS' AI Risk Management Framework For EU EUIs

AI Risk Management Framework

AI Systems have quietly become the engine behind countless decisions and processes across Europe's private and public sectors. Reliance on these systems is deepening, and so too does responsibility to ensure they operate in line with fundamental rights; a responsibility that carries particular weight within the EU's own Institutions, Bodies, Offices and Agencies ("EUIs").

Recognising this, on 11 November, the European Data Protection Supervisor ("EDPS") has issued the new Guidance for Risk Management of Artificial Intelligence Systems (the "Guidance").

As a preface, the Guidance's scope is deliberately narrow as it addresses EU institutions only. More critically, the EDPS explicitly disclaims responsibility, noting that the document "does not constitute and shall not be relied upon as a set of compliance guidelines" and that it provides "non-exhaustive" technical measures.