The EU has provided a high level overview of the regulatory framework here: [1]. Quite old (2021) but the general idea is probably still valid. I think the idea

The EU has provided a high level overview of the regulatory framework here: [1]. Quite old (2021) but the general idea is probably still valid. I think the idea is sound. The question is whether foundation models will be regulated already as high risk because they could be applied in high risk use cases or if only the use case applications themselves will be regulated. It tends to be more in the direction of "let's regulate the foundation, as well". BTW: Something similar is in the works for regulating software, including open source software with the new "EU Directive for Liability of Defective Products". Here is a discussion: [2]. The rationale behind both seem to be something like: We (software vendors in the EU) rely so heavily on open source software and put just a little bit on top, that it would be too much work for us to ensure compliance of the underlying software for our use case. So, please, dear regulators, regulate the underlying software, as well, even if it is open source, so that the compliance burden is not on us, but on the authors of the underlying software. The compliance industry is happy (new business), the big software vendors are happy (reduced competition from smaller vendors in high-stakes industries), the regulators are happy (fewer vendors to deal with while ensuring the regulation will actually be enforced). /sigh [1]: https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai https://digital-strategy.ec.europa.eu/en/policies/regulatory... [2]: https://www.taylorwessing.com/en/interface/2023/open-source-software/oss-and-liability-in-light-of-the-new-product-liability-directive https://www.taylorwessing.com/en/interface/2023/open-source-...