How to evaluate the risks of Artificial Intelligence: a proportionality-based, risk model for the AI Act

The EU proposal for the Artificial Intelligence Act (AIA) defines four risk categories: unacceptable, high, limited, and minimal. However, as these categories statically depend on broad fields of application of AI systems (AIs), the risk magnitude may be wrongly estimated, and the AIA may not be enforced effectively. Our suggestion is to apply the four categories to the risk scenarios of each AIs, rather than solely to its field of application. We address this model flaw by integrating the AIA with the framework arising from the Intergovernmental Panel on Climate Change (IPCC) reports and related literature. This makes possible addressing AI risk considering the interaction between (a) risk determinants, (b) individual drivers of determinants, and (c) multiple risk types. Then we integrate the proposed model with a proportionality-based balance among values considered by the AIA’s risk analysis. The resulting semi-quantitative approach identifies a more efficient way to implement the AIA and addresses the regulatory issue of general-purpose AI (GPAI)