The EU AI Act, risk levels and roles
AIGP · Lesson 7 of 15 · 51:04
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the IAPP AIGP exam, on the AIGP Body of Knowledge version 2.1. In this lesson: the four risk levels of the EU AI Act, high-risk systems under Annex I and Annex III, the duties of providers (risk management, data governance, technical documentation, logging, conformity assessment, quality management system), human oversight, instructions for use, post-market monitoring, the duties of deployers, and when a deployer becomes a provider. Key dates: in force since August 1, 2024; prohibited practices apply since February 2, 2025; after the AI Omnibus (in force July 27, 2026), high-risk obligations apply from December 2, 2027 (Annex III) and August 2, 2028 (Annex I). Includes three original practice questions, with Elmstead Group, a fictional retail and finance group, as the example.
Preview the topics
- Elmstead’s HR team uses an AI system to rank job applicants and decide who gets an interview. Under the EU AI Act, which risk level does this system fall into?
- Elmstead is about to release its own credit scoring model in the EU, as its provider. Which step comes before the model is placed on the market?
- Elmstead buys a high-risk hiring tool from a vendor, retrains it substantially on its own data, and sells it under the Elmstead brand to other retailers. What does Elmstead become for this tool?