Login Subscribe

EU Tightens AI Act: Mandatory Audits, Transparency Boost, Heavier Fines

The European Commission unveiled amendments to the AI Act, targeting high‑risk AI systems. The changes require independent third‑party security assessments before deployment, broaden the scope of model‑card disclosures, and impose mandatory post‑market monitoring to ensure ongoing compliance.

For defenders, the new rules raise the baseline security expectations for vendors and create a legal lever to demand evidence of robust controls. Failure to comply can trigger fines up to 6% of worldwide turnover, making compliance a priority for risk managers, incident responders, and security architects working with AI workloads in the EU.

Source: Read original article

Read next

Proposed $707M CISA Funding Cut Threatens US Critical Infrastructure Defenses

Proposed $707M CISA Funding Cut Threatens US Critical Infrastructure Defenses

Regulatory WatchComplianceGO.THEREGISTER.COM Proposed $707M CISA Funding Cut Threatens US Critical Infrastructure Defenses Why it mattersCISA plays a central role in coordinating vulnerability disclosures and protecting critical infrastructure; budget reductions could impair collective defense mechanisms, increasing the likelihood of unmitigated attacks on essential services. Congressional leaders are moving to

EU Proposes Tough AI Security Rules for High‑Risk Systems

EU Proposes Tough AI Security Rules for High‑Risk Systems

The European Commission has released a draft AI cybersecurity framework that targets systems classified as high‑risk. The proposal obliges providers to conduct regular risk assessments, publish clear technical documentation, and adhere to a unified breach‑notification protocol across member states. It also introduces transparency duties, such as informing users

Canada’s Bill C-22 Forces New Metadata Harvesting on Service Providers

Bill C-22, recently tabled in the Canadian Parliament, expands the government’s authority to collect metadata from domestic electronic communications. The law broadens the definition of “vulnerable” data to include routine service logs, obligating Internet service providers, email hosts, and cloud platforms to implement new collection, storage, and retention mechanisms

Comments ()