13 ms·
Do Foundation Model Providers Comply with the EU AI Act?
- freddealmeida 3y agoWe are a Japan based AI firm. We will not comply with the EU AI Act. We will be releasing our AI models MIT open source. Let them deal with that.
- ChatGTP 3y agoThe EU is terrified at this news.
- romanichm12 3y agoWell, I'm not sure about the EU AI Act, but I'm pretty sure they're still struggling with the 'Don't Turn Skynet On' Act.
- RamblingCTO 3y agoI was actually fearing something very stupid coming from the EU, but the requirements/questions asked (if it's only that from the table) are fairly ok!
- deleted 3y ago[deleted]
- gyudin 3y ago350 pages of ramblings that nobody who was voting for this act hasn't actually read?
- senko 3y agoIn comparison, the Inflation Reduction Act, an one-off act, is 750 pages long.
- gyudin 3y ago“If you don't want them to know something, put it in a book, they'll never read it” Idea as an old as the world itself :)
- mtlmtlmtlmtl 3y agoYou are one wicked free thinker dude.
- gyudin 3y agoI wish haha, they are just following the guidelines :)) https://www.openculture.com/2022/01/read-the-cias-simple-sabotage-field-manual.html https://www.openculture.com/2022/01/read-the-cias-simple-sab...
- hdkrgr 3y agoWhen you write code, do you also ignore edge cases to keep things simple?
- lewhoo 3y agoYeah but a two-page font size 20 alternative proposal would introduce a thousand obvious and another ten thousand non-obvious loopholes, much like that double negative of yours. (I'm not trying to be a grammar Nazi, English isn't my native lang either) One of the reasons why the Constitution of USA has to be interpreted constantly is because it's relatively short and vague.
- mtlmtlmtlmtl 3y agoThere is this weird and very real similarity between code and law. I realised this when I had to read up on some laws that were relevant to me, and found them shockingly easy to understand despite never having studied law.
- lewhoo 3y agoYeah I found something similar as well. It's all logic.
- troupo 3y agoOr of an actual sensible legislation that requires accountability from AI development and deployment: https://softwarecrisis.dev/letters/the-truth-about-the-eu-act/ https://softwarecrisis.dev/letters/the-truth-about-the-eu-ac...
- gchadwick 3y agoIt's notable that Hugging Face's BLOOM (https://huggingface.co/bigscience/bloom https://huggingface.co/bigscience/bloom) might already be compliant (ignoring the 'member states' requirement which I'm sure they could comply with easily enough, it's about disclosing EU member where the model is on the market, so them simply listing all EU countries in a doc somewhere may suffice). Some may be tempted to point at the lower scores of OpenAI, Google and Facebook models and say this means the regulations aren't fit for purpose, though of course you can take the view this means OpenAI, Google and Facebook aren't doing a good enough job of how they train and publish data about their models.
- zarzavat 3y agoThis is as if the EU required Coca Cola to print the recipe on the bottle. They would just stop selling original Coke in the EU rather than disclose that. What is more likely is that OpenAI, Google etc will train EU-specific models for the EU market.
- jdiez17 3y agoIt's more like requiring Coca-Cola to print which ingredients they put into it.
- jonathanstrange 3y ago...and telling them they cannot put real cocaine into it.
- gyudin 3y agoTheir goal is probably just to get rid of European competitors and get an advantage. To make sure big enterprises will have time, money and resources to get trough the whole process of compliance.
- agilob 3y agoOr just lobby the regulators like alcohol industry did.
- bryanrasmussen 3y agoI gotta say I don't see the point of the two compute requirements - the measure energy and reduce energy consumption part seems like it would be something a company would want to do by itself as that is a cost. and I'm not sure what disclosing the training time and power used to train the model tells anyone? on edit: tells anyone that is a consumer of the product and might have legitimate worries which would be a good prompt to legislation, added edit in for eager HN downvoter who didn't like my asking the question.
- pbmonster 3y agoI think they just learned something from the history of crypto currencies, and this time they want hard data from the beginning. I know it's really apples to oranges, but having this 10 years ago for crypto might have pushed the tech from proof-of-work to e.g. proof-of-stake from the beginning. And in the end there's no limits in this act. It's not like they're saying "No models above 10 GWh inside the EU!".
- nonethewiser 3y agoWhy should there be models above 10GWh inside the EU?
- csmpltn 3y agoTracking "Energy" for what is otherwise a compressed version of the entire internet at your disposal seems so green-washed and disingenuous. Whatever "Energy" consumption those models have - it's peanuts compared to the alternatives.
- jdiez17 3y agoThe energy/environmental costs may be small compared to the potential usefulness of foundation models, but it's hard to make that assessment without data.
- senko 3y agoIt's still an useful metric, why not measure and report it? Especially for models that are being deployed on mobile phones or desktop apps. And looking ahead, the future where IoT devices will have a mini-neural-net is not inconceivable. One of the lessons from the crypto fiasco is that, if unchecked, the energy requirements can baloon to stratospheric heights.
- hdkrgr 3y agoI do think this will be a useful metric, and it seems obvious that the hyperscalers will have a feature helping you keep track of energy use and emissions of the resources you rented. But why demand this on the level of an individual model/product? For these foundation models, I think it's reasonable to assume they will all be trained on hyperscaler-provided gpu-clusters, so there'll likely be an off-the-shelf funcitonality by AWS/Azure/GCP to report this number, but the draft of the EU AI Act also demands tracking energy use for other 'high-risk' AI systems which companies may plausibly train and/or deploy on-prem. Good luck tracking the per-token energy use of your model that's running on some on-prem server on last-gen GPUs.
- Dylan16807 3y agoEspecially for a server GPU, looking up watts and multiplying by time per token should give you a pretty good number.
- deleted 3y ago[deleted]
- deleted 3y ago[deleted]
- Roark66 3y agoIt is important to note acts of EU parliament are just one stage of EU lawmaking and the fact "an act has passed" doesn't make it a law. Once such act has been passed there are many steps EU as well as member states have to take to make it law. So, this article is very useful, but it really is just an analysis of compliance with _proposed_ law. For it to become real law EU council has to agree unanimously (made up of prime ministers of all member states). Then each one of 27 countries has to implement the law following it's democratic process (national parliament, president, it has to pass any constitutional challenges if any are made etc). Only then it becomes law. It is a long tedious process and certain things are apriori excluded from EU's jurisdiction altogether such as state level energy generation, anything that affects security situation and many others. So for decades now EU commission and the Court of justice of EU have been working very hard on "scope creep" of existing laws. It's a bonanza of opportunity for most powerful EU states to squeeze the smaller ones, for powerful external groups to influence whatever they want and so on. Seriously, after the horrible fiasco of Brexit (for EU, as I'm considering it from that perspective), loosing one of the most developed and competitive countries on Earth the EU should really have had a proper reform. There are many reasons why EU couldn't retain UK as a member. Arrogance of the commission, is but one of them. Now from the perspective of many years it is very clear booting UK out (and making it think it was it's own idea) was Franco-German (Russian sponsored) plan from the start.
- IamRam 3y agoThis is an Act, it won't be nationally implemented but is applicable directly in EU states.
- thepangolino 3y ago"Acts" don't exist in EU law. You either have Regulations (which become law after being approved) and Directives (which member states are bound to implement in their own legislation). "EU Acts" are just the new BS PR way to add yet another level of abstraction to European politics.
- Roark66 3y agoThere are legislative and non-legislative acts. For the "Acts" that indeed are law the EU council can oppose them and the parliament has no power to override it. Eu Parliament is basically an auxiliary body. This particular "act" is a proposal for a regulation. It's not law itself. If it was going to be EU council would have to be involved and it makes the final decision. EU parliament only "accepts legislative acts" if EU council agrees, also negative results of such vote can be disregarded. It's not a real parliament. It's a place to transfer tens of thousands of Euro per person per month to people that pretend to make law. Funnily enough, EU parliament is the only truly demand cratic body in the EU, but it has the least lawmaking capability. There is lots of text on sources like "Wikipedia" that make it sound like EU parliament is almost as powerful as national parliaments. This is simply untrue. First and foremost EU parliament hasn't even got the most basic parliamentary perogative of initiating proceedings in a legally binding act. Instead of Wikipedia I suggest this page (EU own) that shows various types of legal documents in EU. https://european-union.europa.eu/institutions-law-budget/law/types-legislation_en https://european-union.europa.eu/institutions-law-budget/law... Of all these EU parliament can only make on its own "opinions" and "recommendations". Every other type gets initiated (the very first draft of text is written) by another body. Then the parliament votes on the proposal, but get this... The EU council is by no means bound by a result of that vote. So EU parliament can "strike down a proposal" and the EU council can still progress it. All it has to do is "take it under consideration". See a good factual description of the procedure here on a EU page https://commission.europa.eu/law/law-making-process/types-eu-law_en https://commission.europa.eu/law/law-making-process/types-eu... As for the act in this article it's not even an act that can become law in its current form. That particular act will now enter into a "draft negotiation mandate" phase when all real stakeholders (nation states) get to say if they like it, how they want to change it etc. And maybe then at some point it'll become law, in what capacity? With what wording? Who knows.
- marginalia_nu 3y ago> The legal validity of training on this data as a matter of fair use, especially for data with specific licenses, and of reproducing this data, remains unclear. It's noteworthy that Fair Use is a largely American doctrine that does not appear in European copyright law across the board.
- deleted 3y ago[deleted]
- Simon321 3y agoSeems to EU is determined to cripple their AI industry at all costs, we already have so little technology companies... Foundation models are labelled as 'high risk'! In my opinion this is way too premature... this would cripple open source AI as well... > While the act includes open source exceptions for traditional machine learning models, it expressly forbids safe-harbor provisions for open source generative systems. >Any model made available in the EU, without first passing extensive, and expensive, licensing, would subject companies to massive fines of the greater of €20,000,000 or 4% of worldwide revenue. Opensource developers, and hosting services such as GitHub – as importers – would be liable for making unlicensed models available. >Open Source LLMs Not Exempt: Open source foundational models are not exempt from the act. The programmers and distributors of the software have legal liability. For other forms of open source AI software, liability shifts to the group employing the software or bringing it to market. (pg 70). Source: https://technomancers.ai/eu-ai-act-to-target-us-open-source-software/ https://technomancers.ai/eu-ai-act-to-target-us-open-source-... While i'm usually pro-EU they are really overreacting here and the consequences for our economy of crippling a technology with so much potential will be enormous in the long run.
- supermatt 3y agoThat article is pure FUD. ALL the regulatory activity mentioned in the article is related to "high-risk" AI systems, which are specifically: - where the AI is part of a safety system, and where that safety system already needs to undergo conformity assessment. OR - where the AI system poses a significant risk of harm to the health, safety or fundamental rights of natural persons - for very specific use-cases https://www.europarl.europa.eu/resources/library/media/20230516RES90302/20230516RES90302.pdf https://www.europarl.europa.eu/resources/library/media/20230... (p122-125)
- Simon321 3y agoIf this wouldn't apply to these foundation models then why would they write an article on how they currently comply or not? > We assess the compliance of 10 foundation model providers—and their flagship foundation models—with 12 of the Act’s requirements for foundation models The whole point of this article is to see what would apply to theses models!
- TekMol 3y agoIs there a term for a country where ... - there are so many laws and regulations, that everybody is violating some of them - therefore only a tiny fraction can be brought to court - therefore everybody lives in the constant fear that they suddenly arbitrarily get crushed ?
- TeMPOraL 3y agoUnited States of America? I may be biased by reading mostly English-language content on-line, which predominantly focuses on US issues, but my impression was that this is exactly what's happening in the US due to volume of regulation at state and federal level, and I've seen plenty of articles and discussions bringing this up.
- dariosalvi78 3y agoit's called "normal country". It turns out that there are so many laws that we are breaking the all the time. Examples: https://lawlinguists.com/break-law-every-day/ https://lawlinguists.com/break-law-every-day/ https://mccreadylaw.com/blog/breaking-law-every-day/ https://mccreadylaw.com/blog/breaking-law-every-day/ https://www.rd.com/list/weird-laws/ https://www.rd.com/list/weird-laws/ https://brittontime.com/2021/01/08/top-10-ways-people-breaking-the-law-every-day/ https://brittontime.com/2021/01/08/top-10-ways-people-breaki...
- AbrahamParangi 3y agoI expect that the EU will have enough regulation to make EU native AI companies comparatively uncompetitive but not actually enforce those regulations because of the economic and political disadvantages of doing so. Seems like the worst of all worlds to me but what do I know.