For the AIA, now comes the hard part: to ensure its implementation, application and enforcement result in trustworthy AI and protection of individuals. The AIA only puts specific obligations on certain AI systems; other EU laws (GDPR, consumer protection, product safety, product liability) will be crucial to protect people.
A lot will depend on how effective public and private enforcement will be. Procedural matters such as allocation of the burden of proof will play an essential role. Currently, it is the responsibility of enforcers or the claimant to prove that an AI system is not compliant with the AIA or that it is “unsafe” or “defective”. In the complex and opaque world of AI, this task might prove very challenging.
With the AILD stalled and the AIA relying heavily on standards, the discussion will also focus on accountability and compliance.