Summary of regulatory requirements under AIDA
Obligation
Role
Carries out a regulated activity and processes or makes available for use anonymized data in the course of that activity
Establish measures on the manner in which data is anonymized and the use or management of anonymized data.
a.
Keep records of the anonymization measures.
b.
Responsible for
any AI system
Assess whether the AI system is high-impact system.
a.
Keep records of the reasons supporting the high-impact assessment.
b.
Responsible for a high-impact AI system
Establish measures to identify, assess, and mitigate risks of harm or biased output
a.
Establish measure to monitor compliance with and effectiveness of
mitigation measures
b.
Keep records of the established mitigation and monitoring measures
c.
Notify the minister if the use of the system results or is likely to result
in material harm
d.
Publish online a plain language description of the system
e.
Activities | Expectations
Activities
Expectations
Manages the operation of the system
A person that supervises the system while in use, including beginning or ceasing its operation, monitors and controls access to its output while it is in operation, and alters parameters pertaining to its operation in context.
Use systems as prescribed
Assess and mitigate risk
Ensure ongoing monitoring of the system
For example, logging and monitoring system output, ensuring adequate monitoring and human oversight, and intervening as needed based on operational parameters.
Makes the system available for use
A person that deploys a fully functioning system, whether by the person who developed it, through a commercial transaction, through an application programming interface or by making the working system publicly available.
Consider potential uses when deployed
Take measures to ensure users are aware of use restrictions and system limitations
For example, this may include documenting compliance efforts, informing users on datasets used, limitations, and appropriate use, and performing risk assessment of system deployment.
Designs or develops the system
A designer includes a person that determines the AI system objectives and data needs, methodologies, algorithms, or models.
A developer includes a person that processes datasets, trains systems using the datasets, modifies parameters of the system, develops and modifies methodologies, algorithms or models used in the system, or tests the system.
Take measures to identify and address risks with regards to harm and bias
Document appropriate use and limitations
Adjust the measures as needed
For example, for system designers, this may include performing initial risk assessment and deciding whether the use of AI is appropriate.
Activities | Description content
Activities
Description content
Manages the operation of the system
System’s actual use
Types of content it generates
Decisions, recommendations, or predictions it makes
Established mitigation measures
Makes the system available for use
System’s intended use
Types of content it is intended to generate
Decisions, recommendations or predictions it is intended to make
Established mitigation measures
For system developers, this may include documenting datasets and models used, performing evaluation and validation, building in mechanisms for oversight and monitoring, and documenting appropriate use(s) and limitations.