The Artificial Intelligence Act

In March 2024, the Artificial Intelligence Act was adopted by the European Parliament ("AI Act"). It is the first comprehensive legal framework that regulates AI. The AI Act regulates AI technologies according to a four-tier risk scale: "unacceptable," "high," "limited" and "minimal" based on the potential risk of harm and risk to fundamental rights.

The requirements range from increased transparency for limited-risk applications, to new requirements regarding data quality, documentation, and oversight for high-risk systems, to a ban on those considered unacceptably risky. The AI Act applies to any AI system used or providing outputs within the EU. According to the European Commission, the vast majority of AI systems are minimal risk and as a consequence, there are no restrictions to minimal-risk AI systems.

Proofpoint’s use of AI falls under minimal risk.