ANALYSISMEMBER

Preparing for compliance: Key differences between EU, Chinese AI regulations

Published
Subscribe to IAPP Newsletters

Contributors:

Hunter Dorwart

Associate

Bird & Bird

Harry Qu

Tobias Bräutigam

CIPP/E, CIPM, FIP

Partner, Head of Data Protection

Bird & Bird Finland

James Gong

CIPP/CN, CIPP/E, CIPP/US, CIPM

Partner

Bird & Bird

On 12 July 2024, the Official Journal of the European Union published the EU Artificial Intelligence Act, which aims to comprehensively regulate the design, deployment and use of AI systems in the EU.

Key provisions of the act will become applicable to organizations over the course of the next three years, depending on their roles and the risks and capabilities of their services, with the first provisions and restrictions taking effect 2 Feb.

In parallel, regulatory authorities in China have also turned their attention to AI, issuing regulations and technical standards to bring service providers into compliance. The three most important are the Regulations on the Management of Algorithm Recommendations for Internet Information Services, Regulations on Deep Integration Management of Internet Information Services and Interim Measures for the Management of Generative Artificial Intelligence Services, which have been fully applicable since their adoptions in 2022 and 2023.

The evolution of AI governance frameworks in the EU and China share many similarities. For example, the European Commission's High-level Expert Group on AI published its Ethics Guidelines for Trustworthy AI in 2019, around the same time Chinese government bodies first made commitments to supervise AI.

Policymakers in the EU and China have likewise expressed similar goals of regulation, implicating topics such as ethics, data protection, safety and security. Additionally, AI regulation in Brussels and Beijing have been built off preexisting legal frameworks, including those regulating the processing of personal data.

Despite these similarities, however, there are notable differences between the two approaches. Exploring those differences can help organizations comprehend the scope of requirements in both markets and prepare for compliance.

EU opts for comprehensive law, China chooses targeted regulations — for now

Contributors:

Hunter Dorwart

Associate

Bird & Bird

Harry Qu

Tobias Bräutigam

CIPP/E, CIPM, FIP

Partner, Head of Data Protection

Bird & Bird Finland

James Gong

CIPP/CN, CIPP/E, CIPP/US, CIPM

Partner

Bird & Bird

MEMBER

Unlock this exclusive content and more

Join the IAPPAlready a member? Sign in

Membership opens up a world of resources

In-depth knowledge

From original research reports and daily news coverage to legislative trackers and infographics, we have the information you need to stay ahead of change.

A global network

Make valuable professional connections through more than 160 local IAPP KnowledgeNet chapters in 70 countries.

Access to the experts

Connect with top thinkers in privacy, AI governance and cybersecurity for fresh ideas and insights.

Learn what you get from membership