NIST AI RMF, ManageMANAGE 1.3

Each Party must adopt or maintain measures for the identification, assessment, prevention and mitigation of risks posed by AI systems, considering their actual and potential impacts on human rights, democracy and the rule of law, and apply those measures iteratively throughout the activities within an AI system's lifecycle; an app operator is reached through the measures its Party adopts.

Each Party must adopt or maintain measures for the identification, assessment, prevention and mitigation of risks posed by AI systems, considering their actual and potential impacts on human rights, democracy and the rule of law, and apply those measures iteratively throughout the activities within an AI system's lifecycle; an app operator is reached through the measures its Party adopts.

Each Party must adopt or maintain measures for the identification, assessment, prevention and mitigation of risks posed by AI systems, considering their actual and potential impacts on human rights, democracy and the rule of law; an app operator is reached through the measures its Party adopts.

Assess and mitigate the systemic risks your model may pose at Union level, including where those risks originate, whether in the model's development, its placing on the market, or its use.

Where the audit report is not positive, adopt an audit implementation report within one month of receiving the operational recommendations, describing the measures you took, or explaining why you did not and what you did instead (Article 37(6)).

Each Party to the Convention must adopt or maintain measures for the identification, assessment, prevention and mitigation of risks posed by artificial intelligence systems, considering their actual and potential impacts on human rights, democracy and the rule of law (Article 16(1)).

If your AI system was trained using cumulative compute of 10^26 floating-point operations or more, applies the most advanced AI technology currently in use, and could broadly and seriously affect people's life, physical safety or fundamental rights, identify, assess and mitigate risk across the system's full life cycle.

Each Party to the Convention must adopt or maintain measures for the identification, assessment, prevention and mitigation of risks posed by artificial intelligence systems, considering their actual and potential impacts on human rights, democracy and the rule of law (Article 16(1)).

Develop, publish and follow a Model Safety Plan for each AI system or model you create, substantially modify, or use in the training or evaluation of other AI models, naming the model or system, a capabilities or risk assessment, the mitigation measures for each assessed item across the product lifecycle, and the corporate officer responsible for carrying it out

As a developer, make reasonable efforts to mitigate the known or reasonably foreseeable risk of biased impacts of each such system

As a deployer, regularly monitor each such system and take reasonable and proportionate steps to mitigate the known or reasonably foreseeable risk of biased impacts

Fold in other risks surfaced by your post-market monitoring data, and adopt targeted risk management measures for the risks you identified.

Bring residual risk, per hazard and overall, down to an acceptable level: eliminate or reduce risk through design and development where technically feasible, then mitigate or control what cannot be eliminated, then provide required information and, where appropriate, deployer training, taking the deployer's likely expertise and context of use into account.

Establish and operate a plan to protect the users of your high-impact AI.

Providers of AI systems, including general-purpose AI systems, are expected not to place on the market or put into service a system reasonably likely to behave or be directly used in a manner prohibited by Article 5, and to take effective and verifiable safeguards to the extent reasonably foreseeable, feasible and proportionate; deployers are expected not to use any AI system in a prohibited manner, including by bypassing the provider's safety guardrails (Section 2.7, paragraphs 39 to 41).

Where you cannot be certain an artificial intelligence system's processing will not cause serious, irreversible harm, refrain from that processing or adopt precautionary measures, and adapt your risk management systems to identify, measure, control and monitor the situations that could affect your compliance with personal data protection rules.