Summary of Key Points
The European Union (EU) first introduced the world's first comprehensive AI legislation, the "Artificial Intelligence Act," aiming to become the global setter of AI rules through the "Brussels Effect" (using its large market to compel companies worldwide to comply with its standards). However, implementation faced issues such as outdated standards, high compliance costs, and suppression of local innovation. Consequently, the EU adjusted its strategy: it optimized compliance processes with the "Digital Services Act" and introduced the "Cloud Computing and Artificial Intelligence Development Act" (CADA) to focus on industry development and address shortcomings in AI infrastructure. This shift created a three-pronged approach consisting of a regulatory framework (AI Act), implementation improvements (Digital Services Act), and industrial capacity building (CADA), shifting the strategy from a focus on regulation to an emphasis on both development and regulation.
Detailed Analysis
1. The Artificial Intelligence Act: Aim to Be the Global Rulemaker, but Faces Implementation Challenges
When the EU introduced this act, global AI governance was still in disarray. The EU sought to be the first to establish clear rules, using its market power to influence companies worldwide (for example, if you want to sell AI products in the EU, you must follow our standards). The act classified AI into four risk levels and imposed severe penalties for non-compliance: a 7% penalty on global turnover for prohibited applications, 3% for high-risk applications, etc.
However, implementation encountered difficulties:
- Some member states lacked the necessary departments to oversee AI regulation, and their enforcement capabilities were insufficient;
- Standards for high-risk AI had not yet been established, leaving companies unsure about how to comply (a phenomenon known as "compliance paralysis");
- Small and medium-sized enterprises (SMEs) faced a sudden increase in compliance costs as they grew into medium-sized firms, hindering their expansion and suppressing local innovation.
2. Internal and External Pressures Force the EU to Change Its Approach
Internal issues included overly complex regulations and lagging standards, leading to high compliance costs for companies.
External challenges came from three main global AI governance models: the U.S., where private companies (such as OpenAI and Microsoft) drive innovation; China, which coordinates development at a national level; and the EU, with its strict regulatory approach. Without its own leading AI companies, the EU risked becoming a rule-maker without the corresponding technological advancements, which would limit its influence.
3. The Digital Services Act: Simplifies Compliance for Companies
This act serves to refine the AI legislation, addressing the issue of rigid compliance requirements:
- Suspension Mechanism: Compliance is not mandatory by a set date; instead, it starts only when regulatory standards are in place, preventing companies from being penalized without clear guidelines.
- Extended Simplification Benefits: Previously, only SMEs could benefit from simplified compliance rules; now, medium-sized enterprises can as well.
- Reduced Regulatory Scope: Systems already regulated by other sectors (e.g., safety components in transportation) are exempted from these new regulations.
- Simplified Data Processes: Procedures for reporting data security incidents have been streamlined, and exemptions for sensitive data have been provided.
- Unified Digital Identity Tools: These tools facilitate cross-border operations within the EU's 27 countries, potentially saving companies €15 billion in administrative costs annually.
These measures are expected to reduce administrative costs by €5 billion by 2029, significantly easing the burden on businesses.
4. The Cloud Computing and Artificial Intelligence Development Act (CADA): Building Europe's Own AI Infrastructure
Previously, European cloud computing was dominated by U.S. companies (AWS, Azure, Google Cloud). In the AI era, computing power and data centers are critical infrastructure. If controlled by foreign entities, Europe would be at a disadvantage.
CADA aims to triple the capacity of European data centers over the next 5-7 years, focusing on three key areas:
- Developing the next generation of cloud computing and AI technologies to enhance competitiveness;
- Building AI facilities capable of providing advanced computing power for businesses and research institutions (e.g., for training large models);
- Assessing the security of cloud services in critical sectors (government, energy, healthcare, etc.) to ensure autonomy.
This represents a crucial shift for the EU from solely regulating to actively building its own AI infrastructure.
5. Future Direction: A Unique Path of Using Rules to Promote Innovation
The EU's current approach includes:
- Flexible Regulation: Using guidelines rather than mandatory laws to provide clear compliance directions for companies;
- Regulatory Sandboxes: Allowing companies to test new AI technologies in controlled environments while temporarily exempting them from certain rules to encourage innovation;
- Enhanced Enforcement: Investing in AI regulatory agencies across member states to ensure effective rule enforcement;
- Geopolitical Strategy: Using its regulatory authority to gain influence and develop an independent industrial ecosystem.
Whether this approach will be successful depends on the EU's ability to implement these changes consistently and on the dynamics of competition among the EU, the U.S., and China.
Conclusion
The EU's adjustment in AI governance reflects a pragmatic shift from aiming to be the global rulemaker to balancing development with regulation. By combining regulatory measures with industrial development, the EU seeks to maintain its influence while addressing industry shortcomings. However, the actual effectiveness of these efforts will depend on how well they are implemented and the broader global competitive landscape.