Risk-based approach to EU AI act: benefits and challenges of co-regulation

Abstract

The regulation of artificial intelligence (AI) is an important policy area in which a risk-based approach is increasingly being pursued. This article examines co-regulation, a hybrid regulatory model where public and private sectors collaborate to manage AI risks within a risk-based framework. Drawing on an analysis of the EU AI Act, the article identifies the significant benefits and challenges of these public-private partnerships. It argues that, to achieve the societal goals of safety, health, and fundamental rights, the EU’s framework should mandate data sharing mechanisms between private and public actors to build the necessary regulatory capacity. Moreover, the framework needs to be flexible enough to adapt to evolving risks and industry developments, ensuring that public oversight of AI remains risk-based, transparent, and free from industry capture. This is particularly important for promoting compliance and establishing a truly effective regulatory framework.