Showing posts with label artificial intelligence. Show all posts
Showing posts with label artificial intelligence. Show all posts

Wednesday, 5 March 2025

Artificial intelligence in financial services - new report by Finance Watch

Today, Finance Watch, a non-profit association dedicated to reforming finance in the interest of European citizens, published a new report: 'Artificial intelligence in finance: how to trust a black box?' authored by its Chief Economist Thierry Philipponnat.

As AI-powered systems increasingly drive financial decision-making in areas such as creditworthiness assessments, insurance pricing and investment products, the report asserts that the core principles of financial regulation accountability, responsibility, and transparency are being tested.

Against this backdrop, the report identifies several critical concerns: 

  • Lack of transparency: AI models operate as “black boxes”, generating outputs without clear explanations of their reasoning, making human oversight and intervention impossible.
  • Consumer protection under threat: In retail finance, the deployment of AI could lead to opaque creditworthiness assessments (see for an example here), pricing discrimination, discriminatory lending, and misleading financial advice. 
  • Supervisors face AI challenges: Supervisors tasked with enforcing regulation face challenges in keeping pace with financial institutions' deployment of AI and delivering on their mandates.
  • Market stability is at risk: Increasingly dependent on third-party AI providers, financial institutions face operational risks from unregulated external systems and concentration risks, where a handful of dominant AI firms control critical models and infrastructure, creating systemic vulnerabilities. 

As a response, the report urges a reassessment of the financial regulation framework: 

  1. Expand the scope of the AI Act to cover all financial services
  2. Establish a clear liability regime that holds providers of AI-powered services accountable for damages caused by an output of an AI system
  3. Conduct a regulatory gap analysis to ensure all AI-driven financial activities are adequately regulated.

Thursday, 25 January 2024

Consumer law and automated decision making: the work of ELI

At the end of 2023, the European Law Insitute published its Interim Report on EU Consumer Law and Automated Decision Making, answering whether EU Consumer Law is ready for automated decision-making, and observing this question through the lens of a relationship between the consumer, the digital assistant and the trader. The Report sets out eight Principles that should be followed to make EU consumer law ready for automated decision-making. 

On the 31st of January 2024, ELI will host a webinar that is open to everyone. 

For more information, follow this link.

Saturday, 28 October 2023

EDPS Opinion on AI Act proposal

The proposal for the Artificial Intelligence Act has caused a lot of heated discussion as it reaches its final stage. Recently, the European Data Protection Supervisor (EDPS) issued an opinion on the current version of the AI Act proposal*, pointing out several legal uncertainties from a data protection perspective. This is the second EDPS opinion about the forthcoming AI Act, following one issued jointly with the European Data Protection Board shortly after the proposal was revealed.
Photo by julien Tromeur on Unsplash

The EDPS takes a tough stance as regards some of the solutions envisaged in the proposal. For instance, the authority once again emphasized that classifying several uses of AI as "high risk" is not enough in cases where such uses pose unacceptable risks to fundamental rights (see para. 7 of the opinion). This includes a.o.:

  • any use of AI to carry out any type of "social scoring";
  • any use of AI for automated recognition of human features in publicly accessible spaces, such as of faces, gait, fingerprints, DNA, voice, keystrokes and other biometric or behavioural signals;
  • the use of AI to infer emotions of a natural person except for certain well-specified use-cases, namely for health or research purposes;
  • any use of AI systems categorising individuals from biometrics into clusters according to ethnicity, gender, political or sexual orientation, or other grounds for discrimination prohibited under Article 21 of the EU Charter of Fundamental Rights.

According to the EDPS, such uses should be prohibited as they are intrusive and affect human dignity.

The EDPS also notes that the AI Act proposal exempts operators of high-risk AI systems already on the market or in use before the AI Act's applicability, except in cases when these systems are subject to significant changes in their design or purpose or in case of "substantial modifications" (para. 12 of the opinion, see also Article 83(2) of the AI Act proposal). However, the EDPS finds this solution unclear, leading to legal uncertainty and some high-risk AI systems never falling within the scope of the AI Act. The EDPS recommends removing this exemption and applying the AI Act to existing high-risk AI systems on the date of its applicability.

What is more, the EDPS suggests that the notion of AI "providers" should be further clarified, and probably (explicitly?) include AI operators who retrain pre-trained AI systems. Although training is a fundamental part of AI development, the current proposal does not clearly state whether activities such as retraining or continuous training should be considered as part of AI system 'development'. As a result, it is uncertain whether operators taking part in such activities could be assigned the status of "providers" of AI systems (para. 15-19 of the opinion). 

Finally, the authority shared specific recommendations on how to clarify the proposal's provisions on EDPS roles and tasks as a notified body, market surveillance authority and competent authority for the supervision of the development, provision or use of AI systems by EU institutions, bodies, offices and agencies (para. 29 et seq.).

* Updated information on the legislative process you can find here.

Monday, 3 May 2021

Feedback period on Artificial Intelligence Act open: make your voice heard until June 28th

The feedback period for the recently adopted proposal for an Artificial Intelligence Act (here) is now open (here, scroll down). This proposal has been long awaited and it is the first legislative framework at EU level to deal with AI. The goals of the proposed AI Act are to facilitate innovation and investment in AI, to guarantee safe AI, to improve the enforcement of laws applicable to AI, and to prevent market fragmentation. Among many aspects, the proposed Regulation suggests a definition of AI, prohibits certain AI practices (such as using AI systems to exploit a vulnerability of a group of persons), suggests a methodology to identify ‘high-risk’ AI systems, and imposes transparency obligations on AI systems intended to deal with natural persons (e.g. it should be obvious for the person that they are interacting with an AI system). Enforcement wise, it proposes the creation of a European Artificial Intelligence Board that will work closely with existing structures at Member State level. The feedback period runs from the 26th of April until the 28th of June 2021. All feedback received will feed the legislative debate. Make your voices heard and have your say about this impacting proposal!

Thursday, 4 February 2021

CMA's paper on algorithms & online platforms: comprehensive report on benefits and perils of AI regulation

The UK Competition and Market’s Authority recently published a report on the consequences of the online platforms’ use of algorithms (‘sequences of instructions to perform a computation or solve a problem’) for consumer protection and for competition (here). This report builds on the CMA’s 2018 paper on pricing algorithms (here). The report starts by highlighting that the increasing sophistication of algorithms usually means decreasing transparency. The CMA’s report acknowledges the benefits of algorithms to consumers, such as the possibility to save consumers’ time by offering them individualized recommendations. Additionally, algorithms benefit consumers by increasing efficiency, effectiveness, innovation and competition. However, the main goal of the report is to list (economic) harms caused to consumers as a result of algorithms.

The report highlights that big data, machine learning, and AI-based algorithms are at the core of major market players such as Google (e.g. their search algorithm) and Facebook (e.g. their news’ feed algorithm). The CMA also acknowledges that many of the harms discussed in this report are not new but were made more relevant by recent technological advances. Finally, the report acknowledges that the dangers brought by algorithmic regulation are even greater where it impacts consumers significantly (such as decisions about jobs, housing or credit).

The harms discussed in the report deal mainly with choice architecture and dark patterns (e.g. misleading scarcity messages on a given product or misleading rankings). Additionally, personalization is depicted as a particularly dangerous harm, since it cannot be easily identified and because it manipulates consumer choice without that being clear to consumers. Personalization is also worrying because it targets vulnerable consumers. In particular, the CMA is worried about possible discrimination as a result of personalization of offers, prices and other aspects.

Personalized pricing implies that firms charge different prices to different consumers according to what the firm (and their algorithms) think that the consumer is willing to pay. While this has some benefits – like lowering search costs for consumers, the CMA warns that consumers might lose trust in the market as a consequence of personalized pricing practices. While some personalized pricing techniques are well-known – such as offering coupons or charging lower prices to new customers, others are more opaque and harder to detect. Non-price related personalization is also described as potentially harmful, such as personalized search results rankings or personalized recommendation systems (e.g. what videos to show next). In particular, the CMA warns that these systems may lead to unhealthy overuse or addiction of certain services by consumers and to a fragmented understanding of reality and public discourse.

Additionally, the use of algorithms harms competition since it can exclude competitors (e.g. through platform preferencing, via ranking, of their own products). Through exclusionary practices, dominant firms can stop competitors from challenging their market position. A prominent example of this is that of Google displaying its own Google Shopping service in the general search results page more favorably than competitors that offer similar services. Finally, the CMA report zooms in on algorithmic collusion, or the use of algorithmic systems to sustain higher prices.

The report also highlights the obstacles brought by lack of transparency, particularly when it comes to platform oversight. The CMA warns that this lack of transparency and the misuse of algorithms may lead consumers to stop participating in digital markets (e.g. deleting social media apps). This justifies, in the CMA’s opinion, the regulators’ intervention. In particular, the CMA considers that regulators can provide guidance to businesses as to how to comply with the law or to elaborate standards for good practices. Overall, the report brings attention to the fact that many laws in place do not apply to algorithmic regulation, such as to discrimination in AI systems. Moreover, the CMA highlights that the application of consumer law to protect consumers against algorithmic discrimination is still an unexplored area.

The report ends with a call for further research on the harms caused by algorithmic regulation. The CMA suggests techniques to investigate these harms that do not depend on access to companies’ data and algorithms, such as enlisting consumers to act as ‘mystery shoppers’ or through crawling or scraping data from websites. The CMA also suggests specific investigation techniques when there is access to the code.

Overall, this is an extremely comprehensive report that not only explains the biggest consumer harms brought by AI regulation but also contains several practical examples, as well as concrete methodological suggestions for further research and for better enforcement. Definitely a recommended read for both academics and practionners alike.

Friday, 26 October 2018

Consumers in the age of digital health and AI

The European Consumer Organisation - BEUC - recently published a new position paper on digitalisation in healthcare. The paper comes at the right time as the impact of digital technologies on health products and services indeed continues to grow. The potential benefits are recognized: better access to medical care, more effective prevention, diagnosis and treatment of diseases, support of healthy lifestyles. However, as pointed out by BEUC, the risks are also present. The issues of consumer privacy, security and safety are listed among the most salient ones.

Main insights

The position paper makes reference to the eHealth communication of the European Commission, which focused on three areas: 
  1. citizens' right to secure electronic access and share their health data (improving electronic health record systems), 
  2. improved research, disease prevention and personalised medicine (pooling data resources and using common standards),
  3. digital tools for citizen empowerment and person-centered care (shifting focus from disease treatment to health promotion and well-being, supported by digital solutions such as wearables and mHealth apps).
While endorsing these general objectives, BEUC - as was to be expected - emphasises the need for adequate consumer safeguards. This general observation is followed by a list of more specific principles and recommendations. We sketch some of them further below - for more details we invite our readers to consult the original paper.

Consumers' control over their personal health data (including the right to decide about data-sharing, to access one's own data and to report on possible errors) features prominently throughout the paper. This translates into a call for a diligent implementation of the General Data Protection Regulation with respect to this sensitive category of personal data. Importantly, BEUC argues, data protection safeguards are also relevant in the context of electronic health records and relationship between patients and physicians.

Another eminent topic addressed in the paper are the digital health tools, which, in view of BEUC, should respect the principles of privacy and security by design and by default and remain under supervision of competent authorities. The paper emphasises the connection between security and safety by providing an illustrative example of a hacked pacemaker. An argument is also made for a minimum set of security measures for all digital health connected products, including mobile health applications, as an ex ante market access requirement. Medical Devices Regulation, Radio Equipment Directive and General Product Safety Directive are listed among key instruments to be revisited in this context.

Consumers and artificial intelligence (in healthcare)

An interesting part of the BEUC paper concerns the growing deployment of artificial intelligence in the healthcare sector and in consumer markets more generally. Indeed, the advances in machine learning have made it possible to generate operable knowledge from the previously intransparent data sets. As a result, data contained in health records as well as vast amounts of data produced through our daily use of digital products and services have become an even more valuable resource. The prospect of AI transforming the way diseases are prevented, treated and diagnosed is anything but exciting. A look at the website of IBM Watson Health will give the reader a good impression. However, as pointed out by BEUC, the picture is not always so rosy.

The observations which BEUC makes in this regard largely follow its earlier position paper on automated decision-making and artificial intelligence. Similar issues were also pointed out in the European University Institute's working paper on consumer law and AI published a couple of months ago. They concern, in particular, the growing information asymmetry and power imbalance, the impact on consumers' decision-making capacities, implications for access to essential services and the risk of discrimination. These, of course, are only early contributions and both the extent of indicated problems and the possible remedies must still be investigated. Considering the growing interests in AI of both scholars and policymakers further research is certainly to be expected.

Monday, 25 June 2018

BEUC position paper on artificial intelligence

Last week BEUC published a very interesting paper on Automated decision making and artificial intelligence: a consumer perspective. The paper highlights the main challenges raised by AI and suggest ways to tackle these. Importantly, the paper calls for an EU Action plan on AI that would set out new consumer protection concepts and a comprehensive plan to update the old consumer protection tools. The position paper is a must read for everyone interested in the impact of new technologies on consumer protection.