Navigating the AI Act : Preparing Businesses and Municipalities for Compliance and Innovation

Sammanfattning

This thesis examines the field of Artificial Intelligence (AI) in relation to the upcoming AI Act, a new regulation set by the European Union planned to take effect in 2025. AI technology has provided diverse solutions across various business sectors but has also raised ethical concerns. Issues such as cyber-attacks, threats, and social scoring have been increasing in frequency and severity. To mitigate these problems, the AI Act will introduce a set of rules similar to the General Data Protection Regulation (GDPR), which must be followed by individuals, businesses, and organizations when developing or using AI. The regulation includes a risk classification system, ranging from "unacceptable risk" (the most serious) to "no risk" (the least serious). Depending on the classification, systems must meet specific criteria to be deemed legal. Non-compliance with the AI Act will result in severe penalties and fines, exceeding those imposed under the GDPR. The purpose of this study is to analyze the current situation, preparations, concerns, and future expectations of businesses and municipalities regarding the AI Act. Data was gathered through semi-structured interviews with five representatives from different SMEs in both the public and private sectors. The data was then analyzed using thematic analysis. The key themes identified include current preparations and concerns, the impact and risks of the AI Act on SMEs, and future expectations for AI and its regulation. The results reveal significant differences in levels of preparation, though overall opinions about the future of AI and the AI Act are positive.