Blog
UK AI Bill introduced in House of Lords
The Bill introduces significant provision for the creation of a regulator body, AI officer appointment, and transparency obligations
Robb Hiscock
Senior Content Marketing Specialist, CIPP/E CIPM
November 27, 2023
On November 23, 2023, the Artificial Intelligence (Regulation) Bill was introduced in the UK House of Lords, adding to the growing body of existing and proposed AI regulations, including in regions such as the EU and China. The Bill introduces a range of requirements for businesses that develop, deploy, or use Artificial Intelligence systems. The first reading of the bill took place on November 22, signaling the start of its journey through the House of Lords. The second reading is yet to be scheduled.
The bill still remains in its infancy, and it comes just a few weeks after the Prime Minister, Rishi Sunak, gave a speech noting that “The UK’s answer is not to rush to regulate.” However, should it progress, it outlines some key requirements to be aware of including the creation of an AI authority in the UK, the need to appoint an AI officer, and reporting requirements when training AI of third-party data and intellectual property (IP).
What are the key requirements of the UK Artificial Intelligence (Regulation) Bill?
The bill sets out nine clauses including regulatory principles, transparency obligations, and regulatory sandboxes, among other things. However, some of the more significant provisions, detailed below, will establish rules for appointing individuals responsible for an organization’s oversight of AI, the creation of a regulatory body, and reporting obligations. Here is a closer look at a selection of the most significant provisions of the UK AI Bill.
Creation of an AI Authority
The bill aims to establish a regulatory body, the AI Authority, that will have responsibilities including ensuring harmonized AI-related regulatory approaches, analyzing gaps in AI regulation, and reviewing relevant laws, such as those related to product safety, privacy, and consumer protection.
The AI Authority will also evaluate the regulatory framework's effectiveness in fostering innovation and managing AI risks across the economy. It will engage in horizon-scanning, collaborate with the AI industry, support initiatives to bring AI technologies to market, accredit independent AI auditors, and educate businesses and individuals about AI. Additionally, the AI Authority will be responsible for aligning with international AI regulatory standards.
AI officer appointment
Another major provision found within the bill relates to a requirement for certain organizations to appoint an AI officer. The bill states that consultation between the Secretary of State, the AI Authority, and relevant experts must take place to establish specific regulations for every business involved in AI development, deployment, or use to appoint a designated AI officer. The officer is responsible for ensuring AI is used safely, ethically, and without bias or discrimination within the business. Additionally, the officer must seek to guarantee that data used in AI technologies is unbiased.
Furthermore, this provision contains an amendment to The Companies Act 2006, which will update section 414C(7)(b) to include details about AI developments and the appointed AI officer's role and activities.
Reporting requirements for third-party data and IP
Under the bill, the AI Authority will be required to establish regulations ensuring that:
- All parties involved in AI training must submit to the AI Authority a detailed record of any third-party data and IP utilized during training. They must also confirm that all such data and IP are used with informed consent and in compliance with all relevant IP and copyright laws.
- Entities providing AI-based products or services must clearly inform customers about any health risks, include explicit labels, and offer opportunities for customers to consent or decline consent beforehand.
- Businesses that develop, deploy, or use AI are obligated to permit audits of their processes and systems by independent third parties accredited by the AI Authority.
Furthermore, the regulations may specify the nature of informed consent either as explicit (opt-in) or implicit (opt-out) and may vary based on different scenarios.
What does the UK AI Bill mean for businesses and how does OneTrust help?
The AI Bill introduced to the House of Lords is at its earliest stage in the legislative process and therefore is subject to change following a range of consultations as it makes its way through both Houses. However, the rapid adoption of AI technologies and subsequent regulatory attention means that businesses should be developing robust AI governance programs to ensure they are developing, deploying, and using AI systems responsibly.
In relation to the UK AI Bill, developing an AI governance program based on industry recognized frameworks – e.g. the NIST AI RMF – in preparation for new regulations will set organizations on the right path for when compliance obligations become a reality. Under the AI Bill in the UK, AI officers will need to oversee how their organizations build and use AI systems and will need to submit transparency to the AI Authority. Therefore, it’s essential that they are empowered with full visibility into the different systems, training models, and data that the organization has in order to ensure the correct safeguards and controls are implemented.
The OneTrust AI Governance solution helps organizations to build visibility, transparency, and oversight into their AI adoption. The solution enables relevant teams to understand where AI/ML is being used, built, or procured, with a centralized inventory of AI systems. AI governance teams also have the ability to assess risks in individual AI applications and compliance with global requirements. Additionally, training datasets can be tracked and monitored to promote transparency, remediate issues with data quality, and recognize and address biases.
For more information about OneTrust’s Ai Governance solution, request a demo and speak to expert today.
You may also like
Webinar
AI Governance
Governing data for AI
In this webinar, we’ll break down the AI development lifecycle and the key considerations for teams innovating with AI and ML technologies.
June 04, 2024
Webinar
AI Governance
Embedding trust by design across the AI lifecycle
In this webinar, we’ll look at the AI development lifecycle and key considerations for governing each phase.
May 07, 2024
Webinar
AI Governance
Navigating AI policy in the US: Insights on the OMB Announcement
This webinar will provide insights for navigating the pivotal intersection of the newly announced OMB Policy and the broader regulatory landscape shaping AI governance in the United States. Join us as we unpack the implications of this landmark policy on federal agencies and its ripple effects across the AI ecosystem.
April 18, 2024
Webinar
AI Governance
Data privacy in the age of AI
In this webinar, we’ll discuss the evolution of privacy and data protection for AI technologies.
April 17, 2024
Resource Kit
AI Governance
OneTrust's journey to AI governance resource toolkit
What actually goes into setting up an AI governance program? Download this resource kit to learn how OneTrust is approaching our own AI governance, and our experience may help shape yours.
April 11, 2024
White Paper
AI Governance
Getting started with AI governance: Practical steps and strategies
Download this white paper to explore key drivers of AI and the challenges organizations face in navigating them, ultimately providing practical steps and strategies for setting up your AI governance program.
March 08, 2024
Webinar
AI Governance
AI regulations in North America
In this webinar, we’ll discuss key updates and drivers for AI policy in the US; examining actions being taken by the White House, FTC, NIST, and the individual states.
March 05, 2024
In-Person Event
Responsible AI
Data Dialogues: Implementing Responsible AI
Learn how privacy, GRC, and data professionals can assess AI risk, ensure transparency, and enhance explainability in the deployment of AI and ML technologies.
February 23, 2024
Webinar
AI Governance
Global trends shaping the AI landscape: What to expect
In this webinar, OneTrust DataGuidance and experts will examine global developments related to AI, highlighting key regulatory trends and themes that can be expected in 2024.
February 13, 2024
Webinar
AI Governance
The EU AI Act
In this webinar, we’ll break down the four levels of AI risk under the AI Act, discuss legal requirements for deployers and providers of AI systems, and so much more.
February 06, 2024
Webinar
Responsible AI
Preparing for the EU AI Act: Part 2
Join Sidley and OneTrust DataGuidance for a reactionary webinar to unpack the recently published, near-final text of the EU AI Act.
February 05, 2024
Webinar
Privacy Management
Data Privacy Day 2024: Reflecting on the past year and anticipating the next
Join our panel of expert privacy professionals as they dissect the key happenings in 2023 and how privacy professionals can approach what may occur in 2024.
January 31, 2024
Webinar
AI Governance
Getting started with AI Governance
In this webinar we’ll look at the AI Governance landscape, key trends and challenges, and preview topics we’ll dive into throughout this masterclass.
January 16, 2024
Webinar
AI Governance
First Annual Generative AI Survey: Business Rewards vs. Security Risks Panel Discussion
OneTrust sponsored the first annual Generative AI survey, published by ISMG, and this webinar breaks down the key findings of the survey’s results.
January 12, 2024
Report
AI Governance
ISMG's First annual generative AI study - Business rewards vs. security risks: Research report
OneTrust sponsored the first annual ISMG generative AI survey: Business rewards vs. security risks.
January 04, 2024
Webinar
AI Governance
Building your AI inventory: Strategies for evolving privacy and risk management programs
In this webinar, we’ll talk about setting up an AI registry, assessing AI systems and their components for risk, and unpack strategies to avoid the pitfalls of repurposing records of processing to manage AI systems and address their unique risks.
December 19, 2023
eBook
AI Governance
Navigating the draft EU AI Act
With the use of AI proliferating at an exponential rate, the EU is in the process of rolling out a comprehensive, industry-agnostic regulation that looks to minimize AI’s risk while maximizing its potential.
November 17, 2023
Infographic
Responsible AI
EU AIA Conformity Assessment: A step-by-step guide
A Conformity Assessment is the process of verifying and/or demonstrating that a “high- risk AI system” complies with the requirements of the EU AI Act. Download the infographic for a step-by-step guide to perform one.
November 17, 2023
Webinar
Responsible AI
OneTrust AI Governance: Championing responsible AI adoption begins here
Join this webinar demonstrating how OneTrust AI Governance can equip your organization to manage AI systems and mitigate risk to demonstrate trust.
November 14, 2023
White Paper
AI Governance
AI playbook: An actionable guide
What are your obligations as a business when it comes to AI? Are you using it responsibly? Learn more about how to go about establishing an AI governance team.
October 31, 2023
Webinar
The Shifting US Privacy Landscape: Lessons learned from enforcement actions and emerging trends
Stay ahead of US privacy laws as we explore the lessons learned from CCPA and FTC enforcement and how AI is effecting the regulatory landscape.
October 12, 2023
Infographic
AI Governance
The Road to AI Governance: How to get started
AI Governance is a huge initiative to get started with for your organization. From data mapping your AI inventory to revising assessments of AI systems, put your team in a position to ensure responsible AI use across all departments.
October 06, 2023
White Paper
AI Governance
How to develop an AI governance program
Download this white paper to learn how your organization can develop an AI governance team to carry out responsible AI use in all use cases.
October 06, 2023
eBook
Responsible AI
AI, Chatbots, and beyond: Your questions answered
We answer your questions about AI and chatbot privacy concerns and how it is changing the global regulatory landscape.
August 08, 2023
Webinar
Responsible AI
Unpacking the EU AI Act and its impact on the UK
Prepare your business for EU AI Act and its impact on the UK with this expert webinar. We explore the Act's key points and requirements, building an AI compliance program, and staying ahead of the rapidly changing AI regulatory landscape.
July 12, 2023
Webinar
AI Governance
The EU's AI Act and developing an AI compliance program
Join Sidley and OneTrust DataGuidence as we discuss the proposed EU AI Act, the systems and organizations that it covers, and how to stay ahead of upcoming AI regulations.
May 30, 2023
White Paper
AI Governance
Data protection and fairness in AI-driven automated data processing applications: A regulatory overview
With AI systems impacting our lives more than ever before, it's crucial that businesses understand their legal obligations and responsible AI practices.
May 15, 2023
Webinar
AI Governance
AI regulation in the UK – The current state of play
Join OneTrust and their panel of experts as they explore Artificial Intelligence regulation within the UK, sharing invaluable insights into where we are and what’s to come.
March 20, 2023
Regulation Book
AI Governance
AI Governance: A consolidated reference
Download this reference book and have foundational AI governance documents at your fingertips as you position your organization to meet emerging AI regulations and guidelines.
Webinar
AI Governance
AI governance masterclass
Navigate global AI regulations and identify strategic steps to operationalize compliance with the AI governance masterclass series.
