Ai Governance - Revision history

Wordpad: BloomWiki: Ai Governance

2026-04-25T01:46:56Z

BloomWiki: Ai Governance

← Older revision		Revision as of 01:46, 25 April 2026
Line 1:		Line 1:
			<div style="background-color: #4B0082; color: #FFFFFF; padding: 20px; border-radius: 8px; margin-bottom: 15px;">
	{{BloomIntro}}		{{BloomIntro}}
	AI governance and policy encompasses the laws, regulations, standards, guidelines, and institutional frameworks that shape how artificial intelligence is developed, deployed, and audited. As AI systems make consequential decisions affecting employment, credit, healthcare, justice, and national security, questions of accountability, transparency, fairness, and safety have moved from academic debate to legislative urgency. Understanding AI governance is essential for practitioners who deploy AI, policymakers who regulate it, and citizens who are affected by it.		AI governance and policy encompasses the laws, regulations, standards, guidelines, and institutional frameworks that shape how artificial intelligence is developed, deployed, and audited. As AI systems make consequential decisions affecting employment, credit, healthcare, justice, and national security, questions of accountability, transparency, fairness, and safety have moved from academic debate to legislative urgency. Understanding AI governance is essential for practitioners who deploy AI, policymakers who regulate it, and citizens who are affected by it.
			</div>

	== Remembering ==		__TOC__

			<div style="background-color: #000080; color: #FFFFFF; padding: 20px; border-radius: 8px; margin-bottom: 15px;">
			== <span style="color: #FFFFFF;">Remembering</span> ==
	* '''AI governance''' — The collection of rules, standards, processes, and institutions that guide the responsible development and use of AI.		* '''AI governance''' — The collection of rules, standards, processes, and institutions that guide the responsible development and use of AI.
	* '''AI regulation''' — Legally binding rules governing AI development and deployment, backed by enforcement mechanisms.		* '''AI regulation''' — Legally binding rules governing AI development and deployment, backed by enforcement mechanisms.
Line 18:		Line 23:
	* '''Red-teaming''' — Adversarial testing where experts attempt to cause harmful, unsafe, or unintended behavior in an AI system.		* '''Red-teaming''' — Adversarial testing where experts attempt to cause harmful, unsafe, or unintended behavior in an AI system.
	* '''Watermarking (AI)''' — Technical methods for detecting AI-generated content, required by some regulations.		* '''Watermarking (AI)''' — Technical methods for detecting AI-generated content, required by some regulations.
			</div>

	== Understanding ==		<div style="background-color: #006400; color: #FFFFFF; padding: 20px; border-radius: 8px; margin-bottom: 15px;">
			== <span style="color: #FFFFFF;">Understanding</span> ==
	The governance challenge for AI is unique because AI systems:		The governance challenge for AI is unique because AI systems:
	# are opaque (black-box decisions are hard to audit),		# are opaque (black-box decisions are hard to audit),
Line 36:		Line 43:

	'''US approach''': More fragmented — Executive Orders, sector-specific guidance (FDA for medical AI, FTC for commercial AI, CFPB for credit AI), state laws (Illinois AEIA for employment AI, Colorado for insurance AI). NIST AI RMF provides voluntary framework. No comprehensive federal AI law as of 2024.		'''US approach''': More fragmented — Executive Orders, sector-specific guidance (FDA for medical AI, FTC for commercial AI, CFPB for credit AI), state laws (Illinois AEIA for employment AI, Colorado for insurance AI). NIST AI RMF provides voluntary framework. No comprehensive federal AI law as of 2024.
			</div>

	== Applying ==		<div style="background-color: #8B0000; color: #FFFFFF; padding: 20px; border-radius: 8px; margin-bottom: 15px;">
			== <span style="color: #FFFFFF;">Applying</span> ==
	'''Conducting a bias audit with Fairlearn:'''		'''Conducting a bias audit with Fairlearn:'''
	<syntaxhighlight lang="python">		<syntaxhighlight lang="python">
Line 78:		Line 87:
	: '''China''' → Algorithmic recommendation rules, generative AI regulations, PIPL		: '''China''' → Algorithmic recommendation rules, generative AI regulations, PIPL
	: '''International''' → OECD AI Principles, UNESCO Recommendation on AI, G7 Hiroshima AI Code		: '''International''' → OECD AI Principles, UNESCO Recommendation on AI, G7 Hiroshima AI Code
			</div>

	== Analyzing ==		<div style="background-color: #8B4500; color: #FFFFFF; padding: 20px; border-radius: 8px; margin-bottom: 15px;">
			== <span style="color: #FFFFFF;">Analyzing</span> ==
	{\| class="wikitable"		{\| class="wikitable"
	\|+ AI Governance Key Obligations by Risk Category (EU AI Act)		\|+ AI Governance Key Obligations by Risk Category (EU AI Act)
Line 102:		Line 113:

	'''Failure modes in governance''': Regulatory capture — regulations written primarily by industry may serve incumbents over public interest. Compliance theater — organizations meet technical requirements while violating the spirit of fairness principles. Regulation lag — technology evolves faster than regulation; laws become outdated quickly. Patchwork jurisdiction — different rules in each market create compliance complexity for global deployments. Over-regulation of beneficial uses — blanket restrictions can impede medical AI that could save lives.		'''Failure modes in governance''': Regulatory capture — regulations written primarily by industry may serve incumbents over public interest. Compliance theater — organizations meet technical requirements while violating the spirit of fairness principles. Regulation lag — technology evolves faster than regulation; laws become outdated quickly. Patchwork jurisdiction — different rules in each market create compliance complexity for global deployments. Over-regulation of beneficial uses — blanket restrictions can impede medical AI that could save lives.
			</div>

	== Evaluating ==		<div style="background-color: #483D8B; color: #FFFFFF; padding: 20px; border-radius: 8px; margin-bottom: 15px;">
			== <span style="color: #FFFFFF;">Evaluating</span> ==
	Evaluating AI governance compliance:		Evaluating AI governance compliance:
	# '''Fairness audit''': measure demographic parity and equalized odds across all protected classes; document and remediate gaps.		# '''Fairness audit''': measure demographic parity and equalized odds across all protected classes; document and remediate gaps.
Line 111:		Line 124:
	# '''Incident response drill''': simulate a system failure or biased output discovered in production; verify response procedures work.		# '''Incident response drill''': simulate a system failure or biased output discovered in production; verify response procedures work.
	# '''Legal review''': ensure compliance with applicable sector-specific regulations (ECOA, GDPR, FDA, etc.).		# '''Legal review''': ensure compliance with applicable sector-specific regulations (ECOA, GDPR, FDA, etc.).
			</div>

	== Creating ==		<div style="background-color: #2F4F4F; color: #FFFFFF; padding: 20px; border-radius: 8px; margin-bottom: 15px;">
			== <span style="color: #FFFFFF;">Creating</span> ==
	Designing an AI governance framework for an organization:		Designing an AI governance framework for an organization:
	# '''Risk assessment''': classify every AI use case by EU AI Act/NIST AI RMF risk level.		# '''Risk assessment''': classify every AI use case by EU AI Act/NIST AI RMF risk level.
Line 125:		Line 140:
	[[Category:AI Governance]]		[[Category:AI Governance]]
	[[Category:Policy]]		[[Category:Policy]]
			</div>

Wordpad: BloomWiki: Ai Governance

2026-04-23T14:35:43Z

BloomWiki: Ai Governance

← Older revision		Revision as of 14:35, 23 April 2026
Line 20:		Line 20:

	== Understanding ==		== Understanding ==
	The governance challenge for AI is unique because AI systems: ~~(1)~~ are opaque (black-box decisions are hard to audit), ~~(2)~~ scale rapidly (a single model can affect millions in seconds), ~~(3)~~ evolve continuously (models are updated, fine-tuned, deployed in new contexts), ~~(4)~~ are dual-use (the same technology enables both beneficial and harmful applications), and ~~(5)~~ cross jurisdictions (a model trained in the US might be deployed in Europe, regulated by EU law).		The governance challenge for AI is unique because AI systems:
			# are opaque (black-box decisions are hard to audit),
			# scale rapidly (a single model can affect millions in seconds),
			# evolve continuously (models are updated, fine-tuned, deployed in new contexts),
			# are dual-use (the same technology enables both beneficial and harmful applications), and
			# cross jurisdictions (a model trained in the US might be deployed in Europe, regulated by EU law).

	'''The EU AI Act risk pyramid''': The EU AI Act categorizes AI by risk level and applies proportionate requirements:		'''The EU AI Act risk pyramid''': The EU AI Act categorizes AI by risk level and applies proportionate requirements:
Line 99:		Line 104:

	== Evaluating ==		== Evaluating ==
	Evaluating AI governance compliance: ~~(1)~~ '''Fairness audit''': measure demographic parity and equalized odds across all protected classes; document and remediate gaps. ~~(2)~~ '''Technical documentation review''': complete model card, system card, data governance documentation. ~~(3)~~ '''Red-team exercise''': adversarial testing by independent teams. ~~(4)~~ '''Human oversight test''': can authorized humans understand, override, and audit the system's decisions? ~~(5)~~ '''Incident response drill''': simulate a system failure or biased output discovered in production; verify response procedures work. ~~(6)~~ '''Legal review''': ensure compliance with applicable sector-specific regulations (ECOA, GDPR, FDA, etc.).		Evaluating AI governance compliance:
			# '''Fairness audit''': measure demographic parity and equalized odds across all protected classes; document and remediate gaps.
			# '''Technical documentation review''': complete model card, system card, data governance documentation.
			# '''Red-team exercise''': adversarial testing by independent teams.
			# '''Human oversight test''': can authorized humans understand, override, and audit the system's decisions?
			# '''Incident response drill''': simulate a system failure or biased output discovered in production; verify response procedures work.
			# '''Legal review''': ensure compliance with applicable sector-specific regulations (ECOA, GDPR, FDA, etc.).

	== Creating ==		== Creating ==
	Designing an AI governance framework for an organization: ~~(1)~~ '''Risk assessment''': classify every AI use case by EU AI Act/NIST AI RMF risk level. ~~(2)~~ '''Policy development''': create AI Acceptable Use Policy, Data Governance Policy, Model Lifecycle Policy. ~~(3)~~ '''Technical controls''': bias testing pipeline, explainability requirements, monitoring dashboards. ~~(4)~~ '''Procurement requirements''': third-party AI vendors must meet the same governance standards. ~~(5)~~ '''Model registry''': document all production AI systems with model cards. ~~(6)~~ '''Incident response plan''': define severity levels, escalation paths, regulatory reporting timelines. ~~(7)~~ '''Training''': all staff using AI tools receive awareness training; practitioners get technical governance training annually.		Designing an AI governance framework for an organization:
			# '''Risk assessment''': classify every AI use case by EU AI Act/NIST AI RMF risk level.
			# '''Policy development''': create AI Acceptable Use Policy, Data Governance Policy, Model Lifecycle Policy.
			# '''Technical controls''': bias testing pipeline, explainability requirements, monitoring dashboards.
			# '''Procurement requirements''': third-party AI vendors must meet the same governance standards.
			# '''Model registry''': document all production AI systems with model cards.
			# '''Incident response plan''': define severity levels, escalation paths, regulatory reporting timelines.
			# '''Training''': all staff using AI tools receive awareness training; practitioners get technical governance training annually.

	[[Category:Artificial Intelligence]]		[[Category:Artificial Intelligence]]
	[[Category:AI Governance]]		[[Category:AI Governance]]
	[[Category:Policy]]		[[Category:Policy]]

Wordpad: BloomWiki: Ai Governance

2026-04-23T14:20:20Z

BloomWiki: Ai Governance

New page

{{BloomIntro}}
AI governance and policy encompasses the laws, regulations, standards, guidelines, and institutional frameworks that shape how artificial intelligence is developed, deployed, and audited. As AI systems make consequential decisions affecting employment, credit, healthcare, justice, and national security, questions of accountability, transparency, fairness, and safety have moved from academic debate to legislative urgency. Understanding AI governance is essential for practitioners who deploy AI, policymakers who regulate it, and citizens who are affected by it.

== Remembering ==
* '''AI governance''' — The collection of rules, standards, processes, and institutions that guide the responsible development and use of AI.
* '''AI regulation''' — Legally binding rules governing AI development and deployment, backed by enforcement mechanisms.
* '''EU AI Act''' — The world's first comprehensive AI regulation, passed in 2024; categorizes AI systems by risk and imposes requirements accordingly.
* '''Risk-based approach''' — Regulating AI based on the potential harm of its application, with higher requirements for higher-risk systems.
* '''Prohibited AI practices''' — Uses of AI banned outright under the EU AI Act: social scoring, real-time biometric surveillance in public, subliminal manipulation.
* '''High-risk AI''' — AI in critical sectors (medical devices, employment, credit, law enforcement) subject to strict requirements under the EU AI Act.
* '''Conformity assessment''' — A mandatory evaluation process for high-risk AI systems before market deployment; can be self-assessment or third-party.
* '''AI auditing''' — Systematic evaluation of an AI system's behavior, performance, fairness, and compliance with standards.
* '''Algorithmic accountability''' — The principle that organizations deploying AI must be able to explain and justify automated decisions.
* '''NIST AI Risk Management Framework (AI RMF)''' — A voluntary US framework for managing AI risks through GOVERN, MAP, MEASURE, MANAGE functions.
* '''IEEE P7000''' — A family of IEEE standards for addressing ethical concerns in AI system design.
* '''Bias audit''' — A systematic evaluation of an AI system for discriminatory patterns across demographic groups.
* '''Disparate impact''' — When a neutral policy or algorithm disproportionately disadvantages a protected class, even without discriminatory intent.
* '''Red-teaming''' — Adversarial testing where experts attempt to cause harmful, unsafe, or unintended behavior in an AI system.
* '''Watermarking (AI)''' — Technical methods for detecting AI-generated content, required by some regulations.

== Understanding ==
The governance challenge for AI is unique because AI systems: (1) are opaque (black-box decisions are hard to audit), (2) scale rapidly (a single model can affect millions in seconds), (3) evolve continuously (models are updated, fine-tuned, deployed in new contexts), (4) are dual-use (the same technology enables both beneficial and harmful applications), and (5) cross jurisdictions (a model trained in the US might be deployed in Europe, regulated by EU law).

'''The EU AI Act risk pyramid''': The EU AI Act categorizes AI by risk level and applies proportionate requirements:
- '''Unacceptable risk''' (BANNED): Social credit scoring, real-time public biometric identification, emotion recognition in workplaces, manipulative AI targeting vulnerable groups.
- '''High risk''' (STRICT REQUIREMENTS): Medical AI, hiring algorithms, credit scoring, border control, critical infrastructure. Requires risk management, data governance, transparency, human oversight, accuracy, robustness.
- '''Limited risk''' (TRANSPARENCY OBLIGATIONS): Chatbots, deepfakes — must disclose AI nature.
- '''Minimal risk''' (NO REQUIREMENTS): Spam filters, video games AI.

'''General Purpose AI (GPAI) provisions''': Foundation models like GPT-4 and Gemini are regulated as GPAI. Providers must publish technical documentation, comply with copyright law, publish training data summaries. "Systemic risk" models (above 10^25 FLOPs training compute) face additional red-teaming and incident reporting requirements.

'''US approach''': More fragmented — Executive Orders, sector-specific guidance (FDA for medical AI, FTC for commercial AI, CFPB for credit AI), state laws (Illinois AEIA for employment AI, Colorado for insurance AI). NIST AI RMF provides voluntary framework. No comprehensive federal AI law as of 2024.

== Applying ==
'''Conducting a bias audit with Fairlearn:'''
<syntaxhighlight lang="python">
from fairlearn.metrics import MetricFrame, demographic_parity_difference, equalized_odds_difference
from sklearn.metrics import accuracy_score, precision_score, recall_score
import pandas as pd

# Predictions and sensitive feature (e.g., race, gender)
y_true = test_labels
y_pred = model.predict(X_test)
sensitive_feature = test_df['race'] # or 'gender', 'age_group'

# Comprehensive fairness audit
metrics = {
'accuracy': accuracy_score,
'precision': precision_score,
'recall': recall_score,
}
mf = MetricFrame(
metrics=metrics,
y_true=y_true,
y_pred=y_pred,
sensitive_features=sensitive_feature
)

print("Overall metrics:")
print(mf.overall)
print("\nMetrics by group:")
print(mf.by_group)
print(f"\nDemographic parity difference (approval rate gap): {demographic_parity_difference(y_true, y_pred, sensitive_features=sensitive_feature):.3f}")
print(f"Equalized odds difference (FPR + FNR gap): {equalized_odds_difference(y_true, y_pred, sensitive_features=sensitive_feature):.3f}")
# Target: |demographic parity difference| < 0.05 for most applications
# Report and document all results for compliance records
</syntaxhighlight>

; AI governance by jurisdiction
: '''EU (comprehensive)''' → EU AI Act (binding); GDPR Art. 22 (automated decisions)
: '''US (sector-specific)''' → FTC Act, ECOA, FCRA, FDA guidance, NIST AI RMF
: '''UK''' → AI Safety Institute, sector-by-sector approach; AI Act alignment pending
: '''China''' → Algorithmic recommendation rules, generative AI regulations, PIPL
: '''International''' → OECD AI Principles, UNESCO Recommendation on AI, G7 Hiroshima AI Code

== Analyzing ==
{| class="wikitable"
|+ AI Governance Key Obligations by Risk Category (EU AI Act)
! Requirement !! High-Risk AI !! GPAI Standard !! GPAI Systemic Risk
|-
| Risk management system || ✓ Mandatory || ✗ || ✗
|-
| Technical documentation || ✓ || ✓ || ✓
|-
| Transparency to users || ✓ || ✓ || ✓
|-
| Human oversight capability || ✓ || ✗ || ✗
|-
| Accuracy benchmarking || ✓ || ✗ || ✗
|-
| Red-teaming || ✗ || ✗ || ✓ Mandatory
|-
| Incident reporting || ✓ || ✗ || ✓ Mandatory
|-
| Copyright compliance || ✗ || ✓ || ✓
|}

'''Failure modes in governance''': Regulatory capture — regulations written primarily by industry may serve incumbents over public interest. Compliance theater — organizations meet technical requirements while violating the spirit of fairness principles. Regulation lag — technology evolves faster than regulation; laws become outdated quickly. Patchwork jurisdiction — different rules in each market create compliance complexity for global deployments. Over-regulation of beneficial uses — blanket restrictions can impede medical AI that could save lives.

== Evaluating ==
Evaluating AI governance compliance: (1) '''Fairness audit''': measure demographic parity and equalized odds across all protected classes; document and remediate gaps. (2) '''Technical documentation review''': complete model card, system card, data governance documentation. (3) '''Red-team exercise''': adversarial testing by independent teams. (4) '''Human oversight test''': can authorized humans understand, override, and audit the system's decisions? (5) '''Incident response drill''': simulate a system failure or biased output discovered in production; verify response procedures work. (6) '''Legal review''': ensure compliance with applicable sector-specific regulations (ECOA, GDPR, FDA, etc.).

== Creating ==
Designing an AI governance framework for an organization: (1) '''Risk assessment''': classify every AI use case by EU AI Act/NIST AI RMF risk level. (2) '''Policy development''': create AI Acceptable Use Policy, Data Governance Policy, Model Lifecycle Policy. (3) '''Technical controls''': bias testing pipeline, explainability requirements, monitoring dashboards. (4) '''Procurement requirements''': third-party AI vendors must meet the same governance standards. (5) '''Model registry''': document all production AI systems with model cards. (6) '''Incident response plan''': define severity levels, escalation paths, regulatory reporting timelines. (7) '''Training''': all staff using AI tools receive awareness training; practitioners get technical governance training annually.

[[Category:Artificial Intelligence]]
[[Category:AI Governance]]
[[Category:Policy]]