Institute briefing
New EU AI Act Compliance Gap: Small Businesses Struggle with AI Governance Costs
High compliance costs for AI governance and auditing under the new EU AI Act threaten to hinder AI adoption by European SMEs.
The European Union's AI Act, poised to become a global benchmark for AI regulation, is presenting an unforeseen challenge for small and medium-sized enterprises (SMEs). While the Act aims to foster trustworthy AI, the associated costs of compliance, particularly for governance and auditing, are emerging as a significant barrier for smaller businesses.
Compliance Burdens for SMEs
The EU AI Act categorises AI systems based on risk, with 'high-risk' applications facing stringent requirements for data governance, quality management systems, human oversight, and conformity assessments. For larger corporations, these requirements can be absorbed within existing legal and compliance departments. However, SMEs often lack the internal resources and budget to implement the necessary frameworks, conduct regular audits, and engage external consultants.
Financial Implications
Industry analysts indicate that the cost of establishing robust AI governance frameworks and undergoing independent audits could run into tens of thousands of euros annually for each high-risk AI system deployed. This financial outlay is substantial for SMEs operating on tighter margins, potentially forcing them to reconsider AI adoption or limit their use to lower-risk applications, thereby missing out on competitive advantages.
Potential for Disparity
There is a growing concern that the Act, while well-intentioned, could inadvertently create a two-tier AI landscape in Europe. Larger entities with greater financial capacity may be able to navigate the regulatory complexities more easily, further solidifying their market position. Conversely, SMEs, which are often drivers of innovation, might find themselves at a disadvantage, stifling their ability to leverage advanced AI technologies.
Mitigation Efforts and Future Outlook
Discussions are underway regarding potential support mechanisms for SMEs, such as simplified compliance procedures for certain low-risk categories or financial aid. However, the specifics remain largely undefined. Without clear and accessible support, the EU AI Act risks becoming an impediment rather than an enabler for widespread, responsible AI innovation among Europe's small business community.
Briefing notes
Questions this story answers
01What are the main compliance requirements of the EU AI Act for businesses?+
The EU AI Act categorises AI systems by risk level, with 'high-risk' systems requiring extensive data governance, quality management, human oversight, and conformity assessments. These requirements necessitate significant investment in internal processes and potentially external audits.
02Why are SMEs particularly affected by the EU AI Act's compliance costs?+
SMEs often lack the dedicated legal and compliance departments and financial resources that larger corporations possess. This makes it challenging for them to absorb the costs associated with establishing robust AI governance frameworks and undergoing regular, independent audits.
03What are the potential consequences for SMEs if they cannot meet the compliance costs?+
The financial burden could force SMEs to limit their AI adoption to lower-risk applications or forgo using AI altogether. This might hinder their competitiveness and innovation, potentially creating a disparity between large and small businesses in AI utilisation.
04What is the estimated financial burden of EU AI Act compliance for SMEs?+
Industry analysts suggest that establishing AI governance and conducting audits for each high-risk AI system could cost tens of thousands of euros annually, a significant sum for many SMEs.
05Are there any provisions or support planned to help SMEs with EU AI Act compliance?+
There are ongoing discussions about introducing support mechanisms for SMEs, such as simplified compliance procedures for certain AI categories or financial assistance. However, concrete details and implementation plans are yet to be finalised.