All essays

Risk-Based Is Just Triage With Fancier Paperwork

The EU AI Act, in force since August 2024, runs on one big idea: not all AI deserves the same level of worry.

Think of triage in an emergency room. The nurse doesn't treat every patient the same. Chest pain goes first. A sprained ankle waits. Same hospital, different urgency, different rules.

The Act works the same way, with four tiers. A short list of uses is banned outright. Some AI is labeled high-risk and comes with homework. Some just has to be transparent about what it is. And most AI, the quiet everyday kind, is left alone entirely.

Most compliance confusion comes from treating every AI system like the riskiest one. Triage fixes that. Figure out which tier your AI sits in, and the rest of the law starts making sense.

I explain frameworks; I don't give legal counsel.

Related consulting: AI governance · All services

I explain frameworks; I don't give legal counsel.