by Andhie Wong
The European Parliament has approved the Artificial Intelligence Act, a comprehensive regulatory framework governing AI use across the EU. This legislation could have real implications for Malaysian businesses and the wider economy.
What the Act actually covers
Prohibited AI systems. The Act bans certain AI uses outright: manipulation (technology that could influence people's behaviour, particularly vulnerable groups), social scoring (classifying individuals based on social or economic factors), and biometric identification (using facial recognition for mass surveillance). These prohibitions are unlikely to directly affect Malaysian businesses, but they set a global benchmark for responsible AI development.
High-risk AI systems. The Act enforces stricter rules on "high-risk" AI used in critical infrastructure (transport, energy — requiring rigorous safety checks), education and employment (exam scoring or recruitment AI must be unbiased and transparent), and essential services (credit scoring or law enforcement AI must respect fundamental rights).
Generative AI (like ChatGPT). Not classified as high-risk, but still required to: disclose AI-generated content, so users know when they're interacting with AI-created material; prevent illegal content, by designing systems to avoid generating harmful or misleading output; and respect copyright, ensuring training data complies with copyright law.
Timeline and enforcement
The law was expected to take formal effect around May/June 2024, with phased implementation: a ban on prohibited AI within 6 months, general AI rules within 1 year, and full enforcement within 2 years. Non-compliance carries fines of up to €35 million or 7% of global annual turnover.
What it means for Malaysia
Higher compliance costs. Malaysian businesses operating in the EU, or using EU-developed AI systems, may face higher compliance costs adapting to new requirements — transparency rules for generative AI, or lifecycle assessment for high-risk systems.
Market opportunity. On the flip side, the Act could open new opportunity. Malaysian companies building AI systems that can demonstrate EU compliance could find a genuine new market there, and companies offering AI compliance services could see rising demand too.
Innovation and investment. A clear regulatory framework can boost investor confidence — the Act could stimulate more innovation and investment in Malaysia's own AI sector as a result, potentially channelling more capital toward Malaysian AI startups and projects.
Data privacy. The Act's strong emphasis on data privacy could influence Malaysia's own regulation in this space, potentially strengthening local data-protection law — a benefit for consumers, and a step toward a more trusted digital economy. Malaysian SMEs working with EU partners, though, should expect stricter data-governance requirements as a result.
Closing
The EU AI Act presents real challenges for Malaysian businesses, but real opportunity too. By understanding and adapting to these new rules, Malaysian companies can not only stay compliant but potentially gain a competitive edge in the global AI market. As always, the key will be flexibility, innovation, and a genuine willingness to adapt.
Part of the AK AI Corner column. Originally published in Oriental Daily (东方日报) on Mar 15, 2024.