EU AI Act: A Guide for Open Source Developers

The EU AI Act is the world's first comprehensive AI regulation, and it also affects open source developers. The regulation applies differently depending on the risk level of the AI model or system.

Key Regulatory Scope

• General-Purpose AI (GPAI) models: Models trained on large-scale data that can perform a variety of tasks (e.g., LLMs) are directly subject to regulation.
• AI systems: This refers to the software stack that uses an AI model to process inputs (e.g., chatbots, Gradio apps).

Classification by Risk Level

• Unacceptable: Systems that infringe on human rights are prohibited from being placed on the market.
• High: Systems that affect safety and fundamental rights, such as critical infrastructure or law enforcement, must undergo strict compliance procedures.
• Limited: Systems that interact with users, such as generative AI, must meet transparency requirements.

How Developers Can Respond Open source developers can prepare for regulatory compliance by providing documentation through model cards and dataset cards, and by utilizing tools such as Gradio watermarking, opt-out mechanisms, and personal information removal tools.