Glossary
European AI Alliance
A multi-stakeholder strategic partnership to support the implementation of the EU’s AI strategy.
European Commission
The executive body of the EU responsible for proposing legislation, implementing decisions, and managing the day-to-day business of the EU, including the enforcement of the AI Act.
AI Office
A specialized body within the European Commission that oversees the implementation of the AI Act and coordinates with national authorities.
European Artificial Intelligence Board (EAIB)
A supervisory authority under the AI Act that ensures consistent application and provides guidance across member states.
National Supervisory Authorities
Regulatory bodies designated by each EU member state to monitor and enforce the AI Act at the national level.
Market Surveillance Authorities
Entities responsible for verifying that AI systems on the market comply with the AI Act, often working in collaboration with customs and border authorities.
Data Protection Authorities (DPAs)
National authorities responsible for enforcing GDPR and often involved in AI-related issues where personal data is processed.
European Data Protection Board (EDPB)
An independent European body that ensures consistent application of the GDPR and can offer guidance relevant to AI compliance.
Notified Bodies
Accredited organizations designated by EU member states to assess the conformity of high-risk AI systems before they enter the market.
Standardization Organizations
Entities like CEN and CENELEC that develop harmonized standards used to demonstrate compliance with EU legislation, including the AI Act.
Compliance
Adherence to laws, regulations, guidelines, and specifications relevant to business operations and products.
Non-Compliance
Failure to act according to applicable laws and regulations, which may lead to legal penalties and reputational damage.
Administrative Fines
Penalties imposed by authorities for breaches of the AI Act, which can reach up to €30 million or 6% of the global annual turnover.
Compliance Monitoring
Ongoing internal processes to ensure adherence to applicable standards, laws, and policies.
Internal Controls
Processes implemented by an organization to ensure integrity, accuracy, and compliance in its operations.
Audit Trail
A record that shows who has accessed a computer system and what operations he or she has performed during a given period.
Due Diligence
Investigation or exercise of care that a reasonable business or person is normally expected to take before entering into an agreement or contract.
Compliance Program
A structured approach to ensure an organization follows legal standards and internal policies.
Whistleblower Protection
Safeguards provided to individuals who report misconduct or non-compliance within an organization.
Remediation Plan
Steps taken by an organization to correct compliance failures and prevent future occurrences.
Risk Management
The identification, assessment, and prioritization of risks followed by coordinated efforts to minimize their impact.
Ethical AI
Designing and deploying AI systems in ways that align with ethical principles such as fairness, accountability, and transparency.
Corporate Governance
The system by which companies are directed and controlled, involving balancing the interests of stakeholders.
Regulatory Compliance
The goal that organizations aspire to achieve in their efforts to ensure they are aware of and take steps to comply with relevant laws and regulations.
Compliance Officer
A designated individual responsible for overseeing and managing regulatory compliance issues within an organization.
AI Regulatory Sandbox
Controlled environment set up by regulators to test innovative AI systems before full-scale deployment.
Real-time Remote Biometric Identification
High-risk AI use case involving real-time identification of individuals in public spaces using biometric data.
Biometric Categorisation
AI systems classifying people based on biometric features such as age, gender, or ethnicity.
Post-Market Monitoring
Obligation for high-risk AI providers to continuously track the system’s performance after it has been placed on the market.
Corrective Actions
Steps required to address non-compliance or mitigate risks once a problem in an AI system is identified.
AI Provider
The entity that develops an AI system, responsible for compliance with the AI Act when placing the system on the EU market.
AI User
Any individual or organization using an AI system, often with specific obligations depending on risk level.
Transparency Obligation
Requirement that users are informed they are interacting with an AI system (e.g., chatbots, emotion recognition).
Data Governance
Standards for data quality, relevance, and representativeness to ensure AI models are trained and tested appropriately.
Human Oversight
Requirement that high-risk AI systems include mechanisms for human intervention or review to prevent harm.
Prohibited AI Practices
AI systems banned under the AI Act, including manipulative or exploitative applications that can cause harm.
Technical Documentation
Comprehensive record that must be kept by AI providers, detailing design, testing, and compliance measures.
Algorithmic Transparency
Clarity about how an AI system functions, makes decisions, and processes data.
European Digital Identity
EU framework that allows citizens to access public and private services online with a secure digital ID.
EU Declaration of Conformity
Formal statement by the provider declaring an AI system meets applicable EU legislation.
AI Training, Validation and Testing Data
Three phases of data used to build, fine-tune, and evaluate AI systems to ensure fairness and accuracy.
Robustness and Accuracy
Requirements for AI systems to perform reliably and accurately within their intended purpose.
Market Surveillance Authority
National authority designated to ensure the enforcement of AI Act rules and monitor AI systems on the market.
Harmonised Standards
EU-recognised technical standards that facilitate conformity with legal requirements under the AI Act.
Enforcement Mechanisms
Actions taken by regulatory bodies to ensure compliance, including fines and system withdrawal.