How to enforce the European Union’s AI Act, particularly its Code of Practice for General-Purpose AI (GPAI), which has introduced a new era of regulatory oversight and corporate responsibility in AI implementation. Boards of Directors and Senior Compliance Officers now carry a fiduciary duty to ensure that AI initiatives are aligned with ethical, legal, and sustainability standards.

The Board’s role in AI governance is critical to safeguarding the organisation’s integrity, compliance, and competitive positioning. By taking a proactive leadership stance, Boards, senior management and compliance officers can turn AI governance from a regulatory challenge into a strategic advantage if they work together and the tone at the top is clear.

1. Strategic Oversight of AI Governance Frameworks

The Board must ensure the organisation has a comprehensive AI governance structure that aligns with the EU AI Act’s obligations, including transparency, systemic risk management, copyright compliance, and ethical use of AI systems.

2. Accountability for AI Sustainability and Greenwashing Risks

Sustainability claims around AI must be substantiated. The Board is responsible for overseeing that AI sustainability initiatives are credible and compliant, mitigating reputational and regulatory risks associated with AI greenwashing.

3. Risk Management and Compliance Alignment

AI introduces new operational and compliance risks. Boards must ensure AI risk assessments are integrated into the enterprise risk management framework and that the organisation has a proactive compliance strategy to navigate the evolving regulatory landscape.

4. Data Governance and Privacy Oversight

With AI and data protection increasingly intertwined, Boards must ensure robust data governance policies are in place. This includes the protection of personal data, ethical data sourcing, and adherence to privacy regulations.

5. Leadership and Competency Development

The Board should prioritise equipping Compliance Officers, DPOs, and AI leadership teams with the necessary training and certifications (e.g., CAIO, DAIG, DPO) to manage AI governance effectively.

Recommended Actions for the Board

Appoint or designate a Chief AI Officer (CAIO) to lead AI governance initiatives.

  • Mandate participation in CAIO, DAIG, and DPO Certification Seminars for relevant leadership.
  • Oversee the development and implementation of an AI Ethics and Governance Charter.
  • Ensure transparent reporting mechanisms for AI project oversight and stakeholder communication.
  • Conduct Board-level workshops to stay informed on AI regulatory updates and best practices.

For more details on the CAIO, DAIG, and DPO certification programs, please visit this page.