How do I add EU AI Act support to my existing review process?

TerraTrue's EU AI Act workflows offer a predefined review path to ensure individual launches comply with the regulation. Often, however, an existing review process is in place that would benefit from the addition of the EU AI Act components.

This document describes how to leverage the available workflows effectively in those situations.

*Please refer to the article How do I review launches under the EU AI Act? to review the available set of AI workflows.

AI Review flow prerequisites

TerraTrue provides the required workflow configuration for the EU AI Act by default, but it can be updated or removed. Should it need to be recreated, the following configuration is important;

  • The main set of classification questions resides within the EU AI Act Risk Assessment (launch summary workflow);
    • The EU AI Act Risk Assessment must be published.
    • Within the EU AI Act Risk Assessment Workflow settings, the"Show on launch summary by default" configuration should be false (so it does not appear on every launch).
    • In the EU AI Act Risk Assessment workflow builder, the two "Add assessment to launch" custom actions must be configured to add the EU AI Act privacy assessments (AI Conformity Assessment, AI Reduced Risk Assessment).
  • To configure the assessment-related actions mentioned, we must also ensure the EU AI Act Conformity Assessment and EU AI Act Reduced Risk Assessment workflows are published in the Workflow Library > Privacy Assessments.

This screenshot shows one of the configured "Add assessment to launch" actions:

Screenshot 2024-06-18 at 9.15.46 PM.png

 

Triggering the AI Risk assessment from an existing launch creation workflow

  • The default EU AI Act Screening Questions workflow is pre-configured to add the EU AI Act Risk Assessment launch summary workflow using an "Add workflow to launch" action (see image below). 
  • If the EU AI Act Risk Assessment workflow is published (Note: EU AI Act Risk Assessment is published on default), this custom action can be added to any launch creation workflow.

Screenshot 2024-06-18 at 9.36.42 PM.png

  • In a Launch, when the user completes the screener, depending on their answers, they may then see the EU AI Risk Assessment added to their launch under the Review section.

 

Screenshot 2024-06-19 at 3.10.58 PM.png

 

Triggering the EU AI Act Privacy assessments from an existing workflow

  • The default EU AI Act Risk Assessment workflow (Launch Summary Workflow) triggers the addition of the EU AI Act privacy assessments using the "Add assessment to launch" custom action.
  • This custom action can be added to any launch creation or summary workflow.
    • Note: The EU AI Act Risk Assessment summary workflow triggers the assessments using specific questions and conditional logic that apply to the EU AI Act. This workflow is recommended to be used to benefit from the EU AI Act feature the most.
    • Note: The EU AI Act privacy assessments (EU AI Conformity Assessment, EU AI Reduced Risk Assessment) can be triggered by the EU AI Act Risk Assessment Workflow custom action, any other workflows with the set custom action, and added directly to a launch via “Add Workflow” in the launch summary and can be added to a launch without any limits)
Was this article helpful?
0 out of 0 found this helpful