SECAI Core · phase 8 of 15 · noun
EU AI Act
A law that applies to all European Union Member States and establishes a risk-based framework; the law imposes strict controls on 'high-risk' AI applications and prohibits 'unacceptable-risk' uses of AI
The Explain card
- Plain English
- The EU AI Act is a law applying across all EU Member States that regulates AI by risk tier. It prohibits "unacceptable-risk" uses and imposes strict obligations on "high-risk" applications.
- Example
- A recruitment company sells an AI tool that ranks job applicants. Because employment decisions are treated as high-risk, the vendor must implement risk management, data governance, logging, human oversight and documentation before placing it on the EU market.
- Why it matters
- For defenders, the Act turns good practice into legal obligation. Knowing which tier a system falls into tells you what controls and evidence you must have ready before regulators ask.
- Hook
- Traffic lights for AI: red is banned, amber is heavily controlled.
Word knowledge
How the word is built, where it came from, and what it sits beside in memory.
In a sentence
Before CE-marking a diagnostic scanner, the manufacturer lodges the EU AI Act technical documentation with the notified body.
Why these words
- EU English initialism of European Union, from Europe and Latin unio, oneness places the statute in the Union rather than in a single Member State
- AI English initialism of artificial intelligence, from Latin artificialis and intelligentia names the domain the statute governs
- Act Latin actus, a doing, from agere, to do supplies the head noun that marks the phrase as a statute's short title
Where it came from
- Origin
- English short title from the initialisms EU and AI plus Act, Latin actus, a doing; in English law, a statute
- Entered the language
- c. 2021
- What changed
- Act has named a parliamentary statute in English since the 1400s. The 2021 Commission proposal parenthesized Artificial Intelligence Act as a short title. English compliance writing then prefixed EU so the Union instrument would not be confused with national AI bills, and the three-word label stuck through the 2024 adoption.
How it is spelled
- Pattern
- Two-letter initialisms are written in all caps with no points
- Pattern
- Statute short titles capitalize Act even mid-sentence
- Pattern
- The three tokens stay space-separated with no hyphen
- Breaks the pattern
- older prose still writes E.U. with points, but the short title drops them
- Breaks the pattern
- the Official Journal citation is Regulation (EU) 2024/1689, not the three-word label
Spelled like
- Digital Services Act
- Companies Act
- UN
Broken into chunks
-
EU
- UN
- UK
- EC
-
AI
- AGI
- ANI
-
Act
- enact
- transact
- actual
What it sits beside
Same subject
Same shape
- Digital Services Act
- Digital Markets Act
- Cyber Resilience Act
EU digital statutes
- Digital Services Act
- Digital Markets Act
- General Data Protection Regulation
AI governance instruments
- NIST AI Risk Management Framework (AI RMF)
- ISO/IEC 42001:2023
- OECD AI Principles
Where it sits in the deck
Phase 8: Governance, Risk, and Compliance Frameworks
Individual controls need a governance envelope — introduce the risk and compliance structures, standards bodies, and regulations that frame AI accountability at scale.