Navigating the EU AI Act: A Methodological Approach to Compliance for Safety-critical Products
This addresses compliance challenges for developers of safety-critical AI products under new EU regulations, but it is incremental as it builds on existing quality models.
The paper tackles the problem of interpreting the EU AI Act requirements for high-risk AI systems by proposing a methodology that maps these requirements to quality attributes and uses a contract-based approach to derive technical requirements, demonstrated through an automotive supply chain use case.
In December 2023, the European Parliament provisionally agreed on the EU AI Act. This unprecedented regulatory framework for AI systems lays out guidelines to ensure the safety, legality, and trustworthiness of AI products. This paper presents a methodology for interpreting the EU AI Act requirements for high-risk AI systems by leveraging product quality models. We first propose an extended product quality model for AI systems, incorporating attributes relevant to the Act not covered by current quality models. We map the Act requirements to relevant quality attributes with the goal of refining them into measurable characteristics. We then propose a contract-based approach to derive technical requirements at the stakeholder level. This facilitates the development and assessment of AI systems that not only adhere to established quality standards, but also comply with the regulatory requirements outlined in the Act for high-risk (including safety-critical) AI systems. We demonstrate the applicability of this methodology on an exemplary automotive supply chain use case, where several stakeholders interact to achieve EU AI Act compliance.