REVIEW 2 major objections 5 minor 119 references
Red Teaming AI Policy: A Taxonomy of Avoision and the EU AI Act
T0 review · 2 major / 5 minor · reviewed 2026-08-07 · deepseek-v4-flash
Pith's one-line read The paper claims that economically rational firms will meet the EU AI Act with 'avoision'—legally compliant conduct that undermines the law's intent—and organizes the foreseeable maneuvers into a three-tier taxonomy of scope, exemptions…
desk verdict A genuinely useful taxonomy of AIA loopholes, but the 'technically lawful' premise skips the EU abuse-of-rights doctrine that could make several listed strategies plain evasion. read the letter →
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
The reading
What carries the argument
The carrying object is the taxonomy itself, built on three 'tiers' of AIA exposure: scope, exemptions, and consequential categories (type of AI, risk category, operator role). Each tier names avoisive strategies with their organizational and technological embodiments—human veneers, reverse AI-washing, extraterritorial wrappers, research-without-openness, open-washing, GPAI positioning, benchmark shopping, sandbagging, FLOP-gaming, and provider/deployer finger-pointing. The taxonomy's analytical work is to sort these maneuvers by which part of the Act they target and to show that each is economically rational: it lowers compliance cost while keeping the firm inside the letter of the law, which is exactly why the authors treat it as a red-teaming tool for enforcement.
What would settle it
The taxonomy would be falsified in its scope tier if EU courts or the Commission issue guidance holding that a human reviewer or a rules-based wrapper does not make a system non-'machine-based' or non-autonomous; that would eliminate the legal basis for the two signature Tier 1 strategies. A second check is empirical: once Article 51 is enforced, if no developer is found to have used decentralized training or distillation to stay under the $10^{25}$ FLOP threshold, the FLOP-gaming hypothesis predicts behavior that did not materialize.
Extended reading notes
Core claim
On its own terms, the paper establishes a three-tier map of avoision against the AIA, where each tier corresponds to a point of regulatory exposure: scope, exemptions, and consequential categories. For each tier it identifies concrete technological and organizational maneuvers—human veneers and 'reverse AI-washing' to slip the definition of AI system, extraterritorial wrappers to slip the EU-market connection, research-without-openness and 'open-washing' to exploit carve-outs, and GPAI positioning, benchmark shopping, sandbagging, FLOP-gaming, and provider/deployer finger-pointing to land in a lighter regulatory class. The authors argue that these maneuvers are economically rational because compliance can cost up to €400,000 per system and add as much as 17% to development costs, while penalties punish only unlawful evasion. They conclude that the same behaviors undermine the Act's stated purposes of protecting health, safety, and fundamental rights, and that standards-setting and independent third-party conformity assessment are the main levers for closing the gaps.
Load-bearing premise
The load-bearing premise is that the AIA's key terms—'machine-based', 'autonomy', 'outputs used in the Union', 'substantial modification', and 'free and open-source'—will remain ambiguous long enough for firms to exploit them; if courts adopt the anti-circumvention reading of Recital 22 as a general principle, the whole scope tier of the taxonomy loses its legal foothold.
Editorial extensions
If this is right
- Closing the scope definitions—for instance, by clarifying that human or rules-based wrappers leave a system inside the Act—would neutralize the first tier of avoision before it spreads.
- The standards-setting process becomes a decisive site of enforcement, because it will decide what counts as genuinely open source, how FLOPs are counted in decentralized training, and which benchmarks justify systemic-risk classification.
- Independent third-party conformity assessment is the paper's main structural fix, since much category-tier avoision relies on the Act's self-assessment and self-grading provisions.
- Avoision pressure can be expected to migrate down the tiers over time: as courts and standards close scope arguments, rational firms will lean harder on exemptions and category arbitrage.
Reading between the lines
- We infer that the three-tier structure transfers to other risk-based AI statutes, including pending or future laws that define their objects by autonomy, machine-based operation, or compute thresholds; those laws inherit a similar evasion space.
- We infer a testable shift: after the AIA is enforced and scope guidance appears, observed avoision should concentrate in Tier 2 and Tier 3 rather than Tier 1, so enforcement resources can be timed accordingly.
- We infer that the taxonomy doubles as a measurement scheme: fine-tuning versus prompt-tuning choices, benchmark selection, the accessibility of open-source releases, and the location of training compute are all observable proxies for the hypothesized strategies.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper proposes a three-tier taxonomy of 'avoision' — conduct that is formally lawful but defeats a law's intent — that firms might use to reduce the regulatory burden of the EU AI Act. Tier 1 targets the Act's scope by circumventing the definitions of AI systems and by distancing systems from the EU market; Tier 2 targets the research and open-source exemptions; Tier 3 targets 'consequential categories' by arbitraging between AI system/GPAI model classifications, risk categories, and operator roles. Each strategy is supported by contemporary examples or analogies from GMO, patent, tax, emissions, and privacy law, and the paper closes with policy recommendations on standards-setting and enforcement.
Significance. If the taxonomy holds, it makes the avoision space under the AIA legible in a structured, actionable way and gives regulators and standard-setting bodies a concrete checklist. The paper is carefully anchored in the AIA text and prior legal scholarship, explicitly hedged ('could', 'might'), and ships a substantial bibliography and illustrative case studies. Its main weakness is that the legal-predicate half of the central claim — that the enumerated strategies are 'technically lawful' rather than unlawful evasion — is asserted rather than established, because the manuscript does not engage the EU abuse-of-rights doctrine. That gap is fixable and does not invalidate the taxonomy as a red-teaming exercise, but it must be addressed before the 'technically lawful' claim can stand.
major comments (2)
- [Section 3; Section 4.1.1–4.1.2] Criterion (1) of the methodology requires that included behaviors are not unlawful evasion of the AIA but 'comply with the letter of the law.' The manuscript never engages the established EU abuse-of-rights doctrine (e.g., Case C-255/02 Halifax; Case C-196/04 Cadbury Schweppes), under which the Court of Justice may disregard formalistic compliance that defeats a regulation's purpose. Because Recital 22 explicitly states that the AIA's extraterritorial scope is intended 'to prevent the circumvention of this Regulation,' the human-veneer and non-AI-wrapper strategies in Sections 4.1.1 and 4.1.2 could plausibly be reclassified as unlawful evasion, which would place them outside the paper's own criterion (1). The authors should either analyze why abuse-of-rights does not apply to each listed strategy or explicitly weaken the predicate to 'not clearly unlawful under a formal textual reading' and revise the Abstract and Section 1 accordingly. The Section 5 statement that the AIA has yet to be interpreted in courts understates this issue, because the abuse-of-rights doctrine predates the AIA and does not depend on AIA-specific rulings.
- [Section 4.3.1] The GPAI-for-education case study appears to conflate model-level and system-level obligations. A GPAI model that is subsequently incorporated into a system whose intended purpose is education makes the provider of that system subject to the high-risk provisions of Article 6 and Annex III (and Article 25 for substantial modifications), regardless of how the release is framed. The paper should specify whether the same firm remains the provider of the downstream education system and, if not, why the firm nonetheless obtains 'the same level of access and potentially the same level of impact' in the education sector. As written, the case study overstates the regulatory advantage of 'productionizing' an education AI system as a GPAI model.
minor comments (5)
- [Section 1] The Introduction misspells the Act as 'Artifical Intelligence Act'; it should read 'Artificial Intelligence Act.'
- [Section 4.1.1] In the last paragraph of Section 4.1.1, 'defition' should be 'definition,' and in Section 4.3.1 'ikely' should be 'likely.'
- [Section 4.3] The opening of Section 4.3 contains 'avoison' for 'avoision,' and Section 4.1.2 contains 'cross-jurisidictional' for 'cross-jurisdictional.'
- [Section 5] The three headings 'A voision Targeting...' contain an erroneous space and should read 'Avoision Targeting...'.
- [Section 2.1.3] The euro amounts appear with a corrupted symbol: 'e400,000' and 'e35,000,000' should render as '€400,000' and '€35,000,000.'
Circularity Check
No significant circularity: the taxonomy is constructed from the AIA text, external legal scholarship, and historical analogies; the sole self-citation [114] is peripheral and non-load-bearing.
full rationale
This is a qualitative taxonomy paper with no formal model or fitted parameters, so there are no equations whose outputs collapse into inputs. The central claim that economically rational firms may engage in avoision against the EU AI Act is not defined in terms of the paper's own results: the three tiers are organizational categories derived from the AIA's scope, exemptions, and risk/operator classifications, and each strategy is justified by the AIA text, contemporary empirical observations, or historical analogies from other regulatory domains. The only self-citation is [114] in Section 4.3.3, used alongside [105] to support the peripheral observation that privacy-preserving client-side processing may help companies avoid 'controller' categorization under the GDPR; that analogical example is not the load-bearing premise for the AIA taxonomy, and the central argument would not change if the citation were removed. Section 5's own limitation that 'The AIA has yet to be interpreted in courts' is acknowledged in the paper, and the skeptic's abuse-of-rights objection is a substantive legal-robustness question about whether the listed strategies are genuinely 'technically lawful' under future judicial interpretation; that concern is about external correctness, not circularity, because the paper does not assume the lawfulness conclusion by construction. No definitional equivalence, fitted-input-renamed-as-prediction, or author-imported uniqueness theorem appears in the derivation chain.
Assumptions & free parameters
assumptions (4)
- domain assumption The AIA provisions referenced in the paper support the interpretations given to them.
- domain assumption Firms act as economically rational cost-minimizers searching for loopholes.
- ad hoc to paper Analogies from GMO, patent, tax, emissions, and privacy law are probative for AIA behavior.
- domain assumption The stated intent of the AIA in its recitals is a coherent benchmark for detecting avoision.
invented entities (2)
-
Three-tier avoision taxonomy (scope, exemptions, consequential categories)
-
'Reverse AI-washing' strategy category
Cite this review
Pith. "Pith review of Red Teaming AI Policy: A Taxonomy of Avoision and the EU AI Act." pith.science (2026). https://pith.science/paper/NODFOH2C
@misc{pith2026250601931,
author = {Pith},
title = {Pith review of: Red Teaming AI Policy: A Taxonomy of Avoision and the EU AI Act},
year = {2026},
howpublished = {\url{https://pith.science/paper/NODFOH2C}},
note = {Machine review of arXiv:2506.01931}
}
read the original abstract
The shape of AI regulation is beginning to emerge, most prominently through the EU AI Act (the "AIA"). By 2027, the AIA will be in full effect, and firms are starting to adjust their behavior in light of this new law. In this paper, we present a framework and taxonomy for reasoning about "avoision" -- conduct that walks the line between legal avoidance and evasion -- that firms might engage in so as to minimize the regulatory burden the AIA poses. We organize these avoision strategies around three "tiers" of increasing AIA exposure that regulated entities face depending on: whether their activities are (1) within scope of the AIA, (2) exempted from provisions of the AIA, or are (3) placed in a category with higher regulatory scrutiny. In each of these tiers and for each strategy, we specify the organizational and technological forms through which avoision may manifest. Our goal is to provide an adversarial framework for "red teaming" the AIA and AI regulation on the horizon.
Reference graph
Works this paper leans on
-
[1]
Shaya Afshar, Julia Apostle, and Sarah Schaedler. 2024. The EU AI Act: Open- Source Exceptions and Considerations for Your AI Strategy. https://www. jdsupra.com/legalnews/the-eu-ai-act-open-source-exceptions-9085314/. [Ac- cessed 28-08-2024]
2024
-
[2]
Scale AI. 2021. Enterprise AI Strategy: Bret Taylor on Lessons Learned at Salesforce - Video | Scale Events. https://exchange.scale.com/public/videos/ enterprise-ai-strategy-bret-taylor-on-lessons-learned-at-salesforce. [Accessed 24-09-2024]
2021
-
[3]
Ulrich Aïvodji, Hiromi Arai, Olivier Fortineau, Sébastien Gambs, Satoshi Hara, and Alain Tapp. 2019. Fairwashing: the risk of rationalization. In International Conference on Machine Learning . PMLR, 161–170
2019
-
[4]
Charlotte S Alexander and Elizabeth Tippett. 2017. The hacking of employment law. Mo. L. REv. 82 (2017), 973
2017
-
[5]
George Anadiotis. 2020. The state of AI in 2020: Democratization, indus- trialization, and the way to artificial general intelligence — zdnet.com. https://www.zdnet.com/article/the-state-of-ai-in-2020-democratization- industrialization-and-the-way-to-artificial-general-intelligence/. [Accessed 24-09-2024]
2020
-
[6]
Andrew Marble. 2023. Licenses masquerading as open source. https://www. marble.onl/posts/software-licenses-masquerading-as-open-source.html. [Ac- cessed 13-09-2024]
2023
-
[7]
Anthropic. 2025. Navigating AI in education together. https://perma.cc/EMW6- TU3C
2025
-
[8]
Paula Anzola-Román, Cristina Bayona-Sáez, and Teresa García-Marco. 2018. Organizational innovation, internal R&D and externally sourced innovation practices: Effects on technological innovation outcomes. Journal of Business Research 91 (2018), 233–247. https://doi.org/10.1016/j.jbusres.2018.06.014
Show all 119 references
-
[9]
Andy Baio. 2022. AI Data Laundering: How Academic and Nonprofit Researchers Shield Tech Companies from Accountability - Waxy.org — waxy.org. https://waxy.org/2022/09/ai-data-laundering-how-academic-and- nonprofit-researchers-shield-tech-companies-from-accountability/. [Accesse...
2022
-
[10]
Alejandro Bellogín, Oliver Grau, Stefan Larsson, Gerhard Schimpf, Biswa Sengupta, and Gürkan Solmaz. 2024. The EU AI Act and the Wager on Trustworthy AI. Commun. ACM 67, 12 (December 2024), 58–65. https: //doi.org/10.1145/3665322 Posted November 22, 2024
2024 doi
-
[11]
Artur Bogucki, Alex Engler, Clément Perarnaud, and Andrea Renda. 2022. THE AI ACT AND EMERGING EU DIGITAL ACQUIS Overlaps, gaps and incon- sistencies. https://cdn.ceps.eu/wp-content/uploads/2022/09/CEPS-In-depth- analysis-2022-02_The-AI-Act-and-emerging-EU-digital-acquis.pdf. ...
2022
-
[12]
Tom B Brown. 2020. Language models are few-shot learners. arXiv preprint ArXiv:2005.14165 (2020)
2020 arXiv
-
[13]
Dan L Burk. 2016. Perverse innovation. Wm. & Mary L. Rev. 58 (2016), 1
2016
-
[14]
Michelle Cai. 2004. Madey v. Duke University: Shattering the Myth of Universi- ties’ Experimental Use Defense. Berkeley Technology Law Journal 19, 1 (2004), 175–192. http://www.jstor.org/stable/24117537
2004
-
[15]
CEN-CENELEC. 2024. Artificial Intelligence. https://www.cencenelec.eu/areas- of-work/cen-cenelec-topics/artificial-intelligence/. [Accessed 06-04-2024]
2024
-
[16]
Center for Democracy & Technology. 2024. Public Authorities: What Role in the AI Act? https://cdt.org/insights/public-authorities-what-role-in-the-ai-act. [Accessed 23-08-2024]
2024
-
[17]
Au Charles Zhechao Liu and Hoon Seok Choi
Yoris A. Au Charles Zhechao Liu and Hoon Seok Choi. 2014. Effects of Freemium Strategy in the Mobile App Market: An Empirical Study of Google Play. Journal of Management Information Systems 31, 3 (2014), 326–354. https://doi.org/10. 1080/07421222.2014.995564 arXiv:https://doi....
2014
-
[18]
Neil Chilson. 2024. Red Teaming AI Legislation: Lessons from SB 1047. https: //outofcontrol.substack.com/p/red-teaming-ai-legislation-lessons
2024
-
[19]
Lixing Chong, Guanglu Zhang, Kosa Goucher-Lambert, Kenneth Kotovsky, and Jonathan Cagan. 2022. Human confidence in artificial intelligence and in themselves: The evolution and impact of confidence on adoption of AI advice. Computers in Human Behavior 127 (2022). https://doi.or...
2022 doi
-
[20]
Danielle Keats Citron. 2023. How to fix section 230. BUL Rev. 103 (2023), 713
2023
-
[21]
Liane Colonna. 2023. The AI Act’s Research Exemption: A Mechanism for Regulatory Arbitrage? In YSEC Yearbook of Socio-Economic Constitutions 2023: Law and the Governance of Artificial Intelligence . Springer, 51–93
2023
-
[22]
Rebecca Crootof, Margot E Kaminski, W Price, and II Nicholson. 2023. Humans in the Loop. Vand. L. Rev. 76 (2023), 429
2023
-
[23]
Kate Downing. 2024. Choose Your Own Adventure: The EU AI Act and Openish AI. https://katedowninglaw.com/2024/02/06/choose-your-own-adventure-the- eu-ai-act-and-openish-ai-2/. [Accessed 01-09-2024]
2024
- [24]
-
[25]
European Commission. 2018. Coordinated Plan on Artificial Intelligence: Commu- nication from the Commission to the European Parliament, the European Council, the Council, the European Economic and Social Committee and the Committee of the Regions. Communication COM(2018) 795 f...
2018
-
[26]
European Commission. 2022. Draft standardisation request to the European Standardisation Organisations in support of safe and trustworthy artificial intelligence. https://ec.europa.eu/docsroom/documents/52376. [Accessed 18- 08-2024]
2022
-
[27]
European Commission. 2022. Proposal for a Directive of the European Parliament and of the Council on Adapting Non-contractual Civil Liability Rules to Artificial Intelligence (AI Liability Directive) . COM 496 final. European Commission. AI Liability Directive (AILD)
2022
-
[28]
European Union. 2000. Charter of Fundamental Rights of the European Union. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:12012P/TXT Offi- cial Journal of the European Communities, C 364/1
2000
-
[29]
European Union. 2012. CONSOLIDATED VERSION OF THE TREATY ON THE FUNCTIONING OF THE EUROPEAN UNION. https://eur-lex.europa.eu/ LexUriServ/LexUriServ.do?uri=CELEX:12012E/TXT:en:PDF. [Accessed 17-05- 2024]
2012
-
[30]
European Union. 2016. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Da...
2016
-
[31]
European Union. 2017. Regulation (EU) 2017/745 of the European Parliament and of the Council of 5 April 2017 on medical devices, amending Directive 2001/83/EC, Regulation (EC) No 178/2002 and Regulation (EC) No 1223/2009 and repealing Council Directives 90/385/EEC and 93/42/EE...
2017
-
[32]
European Union. 2024. Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence and amending Regulations (EC) No 300/2008, (EU) No 167/2013, (EU) No 168/2013, (EU) 2018/858, (EU) 2018/1139 an...
2024
-
[33]
Executive Office of the President. 2023. Safe, Secure, and Trust- worthy Development and Use of Artificial Intelligence. https: //www.federalregister.gov/documents/2023/11/01/2023-24283/safe-secure- and-trustworthy-development-and-use-of-artificial-intelligence
2023
-
[34]
Michael Feffer, Anusha Sinha, Wesley H Deng, Zachary C Lipton, and Hoda Heidari. 2024. Red-Teaming for generative AI: Silver bullet or security theater?. In Proceedings of the AAAI/ACM Conference on AI, Ethics, and Society , Vol. 7. 421–437. Red Teaming AI Policy: A Taxonomy o...
2024
-
[35]
David Fernández-Llorca, Emilia Gómez, Ignacio Sánchez, and Gabriele Mazzini
-
[36]
Klint Finley. 2019. The WIRED Guide to Open Source Software. https://www. wired.com/story/wired-guide-open-source-software/. [Accessed 14-09-2024]
2019
-
[37]
Timnit Gebru, Jamie Morgenstern, Briana Vecchione, Jennifer Wortman Vaughan, Hanna Wallach, Hal Daumé III, and Kate Crawford. 2021. Datasheets for datasets. Commun. ACM 64, 12 (nov 2021), 86–92. https://doi.org/10.1145/ 3458723
2021
-
[38]
Francesca Giannaccini and Tobias Kleineidam. 2024. Op-ed: The EU’s soft touch on open-source AI opens the door to disinforma- tion. https://www.theparliamentmagazine.eu/news/article/how-the-eus-soft- touch-on-opensource-ai-opens-the-door-to-disinformation. [Accessed 06-09- 2024]
2024
-
[39]
Rebecca Giblin and Jane C Ginsburg. 2014. On Aereo and’Avoision’. (2014)
2014
-
[40]
Ellen P Goodman and Julia Trehu. 2022. AI audit washing and accountability. https://ssrn.com/abstract=4227350
2022
-
[41]
Google. 2025. Advancing education with AI. https://perma.cc/9KHR-5PXX
2025
-
[42]
Patrick Grady. 2023. The AI Act Should Be Technology-Neutral. Center for Strategic and International Studies (CSIS)
2023
-
[43]
Odd Erik Gundersen. 2020. The Reproducibility Crisis Is Real. AI Magazine 41, 3 (Sep. 2020), 103–106. https://doi.org/10.1609/aimag.v41i3.5318
2020 doi
-
[44]
Philipp Hacker. 2024. Comments on the Final Trilogue Version of the AI Act. (23 jan 2024), 9,11 pages. https://ssrn.com/abstract=4757603 Unpublished manuscript
2024
-
[45]
Wolfinger, Christopher E
Benjamin Haibe-Kains, George Alexandru Adam, Ahmed Hosny, Farnoosh Kho- dakarami, Thakkar Shraddha, Rebecca Kusko, Susanna-Assunta Sansone, Weida Tong, Russ D. Wolfinger, Christopher E. Mason, Wendell Jones, Joaquin Dopazo, Cesare Furlanello, Levi Waldron, Bo Wang, Chris McInt...
2020
-
[46]
Sethi, and Jing Zhou
Ernan Haruvy, Suresh P. Sethi, and Jing Zhou. 2008. Open Source Development with a Commercial Complementary Product or Service. Production and Opera- tions Management 17, 1 (2008), 29–43. https://doi.org/10.3401/poms.1070.0004 arXiv:https://onlinelibrary.wiley.com/doi/pdf/10.3...
2008
-
[47]
Hauptman, B.G
A.I. Hauptman, B.G. Schelble, W. Duan, et al. 2024. Understanding the influence of AI autonomy on AI explainability levels in human-AI teams using a mixed methods approach. Cognitive Technology and Work 26 (2024), 435–455. https: //doi.org/10.1007/s10111-024-00765-7
2024 doi
-
[48]
Neil Hodge. 2022. Experts: Europe’s AI Act to push companies to confront technology’s use. Compliance Week (15 September 2022). 12:00 PM
2022
-
[49]
Sara Hooker. 2024. On the Limitations of Compute Thresholds as a Governance Strategy. arXiv preprint arXiv:2407.05694 (2024)
2024 arXiv
-
[50]
Russell Hotten. 2015. Volkswagen: The scandal explained. https://www.bbc. com/news/articles/c9xx8122893o
2015
-
[51]
IBM. 2024. What is Data Provenance? | IBM — ibm.com. https://www.ibm.com/ think/topics/data-provenance. [Accessed 24-09-2024]
2024
-
[52]
Ashiq Imran and Rajeev Agrawal. 2017. Data Provenance. https://doi.org/10. 1007/978-3-319-32001-4_58-1
2017
-
[53]
Internet Society UK Chapter. 2018. The Internet: to regulate or not to regulate? https://committees.parliament.uk/writtenevidence/90083/html/
2018
-
[54]
Sara Jourdan. 2024. Dissertation. Doctoral Dissertation. Technical University of Darmstadt, Darmstadt. Degree: Doctor rerum politicarum (Dr. rer. pol.). Advisors: Prof. Dr. Peter Buxmann and Prof. Dr. Alexander Benlian. Former name: Sara Ellenrieder
2024
-
[55]
Roman Jurowetzki, Daniel Hain, Juan Mateos-Garcia, and Konstantinos Stathoulopoulos. 2021. The Privatization of AI Research(-ers): Causes and Po- tential Consequences – From university-industry interaction to public research brain-drain? arXiv:2102.01648 [cs.CY] https://arxiv....
2021 arXiv
-
[56]
Leo Katz. 1996. Ill-gotten gains: Evasion, blackmail, fraud, and kindred puzzles of the law. University of Chicago Press
1996
-
[57]
Leo Katz and Alvaro Sandroni. 2023. Circumvention of law and the hidden logic behind it. The Journal of Legal Studies 52, 1 (2023), 51–81
2023
-
[58]
Kätliin Kelder. 2024. On the Relative Importance of the AI Act Right to Explana- tion. The Digital Constitutionalist. https://blog.montaignecentre.com/en/on- the-relative-importance-of-the-ai-act-right-to-explanation/ Cross-posted on Montaigne Centre Blog
2024
-
[59]
Slawomir Kierner, Jacek Kucharski, and Zofia Kierner. 2023. Taxonomy of hybrid architectures involving rule-based reasoning and machine learning in clinical decision systems: A scoping review. Journal of Biomedical Informatics 144 (2023), 104428. https://doi.org/10.1016/j.jbi....
2023
-
[60]
Florence Koh, Kathrin Grosse, and Giovanni Apruzzese. 2024. Voices from the Frontline: Revealing the AI Practitioners’ viewpoint on the European AI Act. In Proceedings of the Hawaii International Conference on System Sciences (Maui, Hawaii) (HICSS)
2024
-
[61]
Filippo Lancieri, Laura Edelson, and Stefan Bechtold. 2024. AI Regulation: Competition, Arbitrage & Regulatory Capture . Working Paper 11/2024. Center for Law & Economics, ETH Zurich. https://doi.org/10.3929/ethz-b-000708626
2024 doi
-
[62]
Moritz Laurer, Andrea Renda, and Timothy Yeung. 2021. Clarifying the costs for the EU’s AI Act. Centre for European Policy Studies. https://www.ceps.eu/ clarifying-the-costs-for-the-eus-ai-act/
2021
-
[63]
Johann Laux, Sandra Wachter, and Brent Mittelstadt. 2024. Trust- worthy artificial intelligence and the European Union AI act: On the conflation of trustworthiness and acceptability of risk. Regulation & Governance 18, 1 (2024), 3–32. https://doi.org/10.1111/rego.12512 arXiv:h...
2024 doi
-
[64]
Gavin Leech, Juan J Vazquez, Misha Yagudin, Niclas Kupper, and Laurence Aitchison. 2024. Questionable practices in machine learning. arXiv preprint arXiv:2407.12220 (2024)
2024 arXiv
-
[65]
Andreas Liesenfeld and Mark Dingemanse. 2024. Rethinking open source generative AI: open washing and the EU AI Act. In The 2024 ACM Conference on Fairness, Accountability, and Transparency. 1774–1787
2024
-
[66]
Belle Lin. [n. d.]. Open-Source Companies Are Sharing Their AI Free. Can They Crack OpenAI’s Dominance? https://www.wsj.com/articles/open-source- companies-are-sharing-their-ai-free-can-they-crack-openais-dominance- 26149e9c. [Accessed 14-09-2024]
2024
-
[67]
Zachary C Lipton and Jacob Steinhardt. 2019. Troubling Trends in Machine Learning Scholarship: Some ML papers suffer from flaws that could mislead the public and stymie future research. Queue 17, 1 (2019), 45–77
2019
-
[68]
Robert Litan
E. Robert Litan. 1998. Testimony: The European Union Privacy Directive. https: //www.brookings.edu/articles/the-european-union-privacy-directive/
1998
-
[69]
Natasha Lomas. 2024. EU AI Act: Everything you need to know. TechCrunch (16 November 2024). https://techcrunch.com/2024/11/16/eu-ai-act-everything- you-need-to-know/ 6:00 AM PST
2024
-
[70]
Natasha Lomas. 2024. EU’s AI Act gets published in bloc’s Of- ficial Journal, starting clock on legal deadlines | TechCrunch. https://techcrunch.com/2024/07/12/eus-ai-act-gets-published-in-blocs- official-journal-starting-clock-on-legal-deadlines. [Accessed 13-07-2024]
2024
-
[71]
Shayne Longpre, Robert Mahari, Anthony Chen, Naana Obeng-Marnu, Damien Sileo, William Brannon, Niklas Muennighoff, Nathan Khazam, Jad Kabbara, Kartik Perisetla, et al. 2023. The data provenance initiative: A large scale audit of dataset licensing & attribution in ai. arXiv pre...
2023 arXiv
-
[72]
Tambiama Madiega. 2024. EU Legislation in Progress . EPRS Briefing PE 698.792. European Parliamentary Research Service. https://www.europarl.europa.eu/ RegData/etudes/BRIE/2021/698792/EPRS_BRI(2021)698792_EN.pdf Members’ Research Service
2021
-
[73]
Tobias Mahler. 2022. Between risk management and proportionality: The risk- based approach in the EU’s artificial intelligence act proposal. The Swedish Law and Informatics Research Institute (March 2022), 247–270
2022
-
[74]
Janice M. Mueller. 2005. The Evanescent Experimental Use Exemption from United States Patent Infringement Liability: Implications for University and Nonprofit Research and Development. Intellectual Property Law eJournal (2005). https://api.semanticscholar.org/CorpusID:155551770
2005
-
[75]
Richard R. Nelson. 1959. The Simple Economics of Basic Scientific Research. Journal of Political Economy 67, 3 (1959), 297–306. http://www.jstor.org/stable/ 1827448
1959
-
[76]
Noyb. 2024. Microsoft violates children’s privacy – but blames your local school. https://noyb.eu/en/microsoft-violates-childrens-privacy-blames-your- local-school
2024
-
[77]
Samir Passi and Mihaela Vorvoreanu. 2022. Overreliance on AI: Literature review. Technical Report. Microsoft Research. https://www.microsoft.com/en- us/research/uploads/prod/2022/06/Aether-Overreliance-on-AI-Review-Final- 6.21.22.pdf Aether UX Research & Education
2022
-
[78]
Dylan Patel. 2023. The Inference Cost Of Search Disruption – Large Language Model Cost Analysis — semianalysis.com. https://www.semianalysis.com/p/the- inference-cost-of-search-disruption. [Accessed 15-09-2024]
2023
-
[79]
We Have No Moat, And Neither Does OpenAI
Dylan Patel and Afzal Ahmad. 2023. Google "We Have No Moat, And Neither Does OpenAI". https://www.semianalysis.com/p/google-we-have-no-moat- and-neither. [Accessed 02-09-2024]
2023
-
[80]
Sundar Pichai and Demis Hassabis. 2023. Introducing Gemini: our largest and most capable AI model. https://blog.google/technology/ai/google-gemini-ai/ https://perma.cc/Q7QL-LBNM
2023
-
[81]
Elizabeth Pollman. 2019. Tech, regulatory arbitrage, and limits. European Business organization law review 20 (2019), 567–590
2019
-
[82]
Serena Quattrocolo and Ernestina Sacchetto. 2024. EU and AI: Lessons to Be Learned. Cambridge University Press, 636–656
2024
-
[83]
Katherine Quezada-Tavarez, Lidia Dutkiewicz, and Noémie Krack. 2022. Voicing challenges: GDPR and AI research. Open Research Europe 2 (11 2022), 126. https://doi.org/10.12688/openreseurope.15145.1 FAccT ’25, June 23–26, 2025, Athens, Greece Yew*, Marino*, and Venkatasubramanian
2022 doi
-
[84]
Inioluwa Deborah Raji, Emily M Bender, Amandalynne Paullada, Emily Den- ton, and Alex Hanna. 2021. AI and the everything in the whole wide world benchmark. arXiv preprint arXiv:2111.15366 (2021)
2021 arXiv
-
[85]
Renieris, David Kiron, and Steven Mills
Elizabeth M. Renieris, David Kiron, and Steven Mills. 2024. Or- ganizations Face Challenges in Timely Compliance With the EU AI Act. https://sloanreview.mit.edu/article/organizations-face-challenges-in- timely-compliance-with-the-eu-ai-act/. [Accessed 21-10-2024]
2024
-
[86]
James M. Rice. 2015. The Defensive Patent Playbook. Berkeley Technology Law Journal 30, 4 (2015), 725–776. https://www.jstor.org/stable/26377740
2015
-
[87]
Dirk Riehle. 2007. The Economic Motivation of Open Source Software: Stake- holder Perspectives. Computer 40, 4 (2007), 25–32. https://doi.org/10.1109/MC. 2007.147
2007 doi
-
[88]
Hannah Ruschemeier. 2023. AI as a challenge for legal regulation – the scope of application of the artificial intelligence act proposal. ERA Forum 23 (2023), 361–376. https://doi.org/10.1007/s12027-022-00725-6
2023 doi
-
[89]
Schneier
B. Schneier. 2012. Liars and Outliers: Enabling the Trust that Society Needs to Thrive. Wiley, United States. https://books.google.com/books?id=lPsbhIUexo0C
2012
-
[90]
Bruce Schneier. 2023. A Hacker’s Mind: How the Powerful Bend Society’s Rules, and how to Bend Them Back . WW Norton & Company, United States
2023
- [91]
-
[92]
Brian M Sirman. 2023. Loophole Entrepreneurship. Fordham J. Corp. & Fin. L. 29 (2023), 33
2023
-
[93]
Aviya Skowron and Stella Biderman. 2024. EleutherAI’s Thoughts on the EU AI Act. https://blog.eleuther.ai/eu-aia/
2024
-
[94]
Suzanne Smalley. 2024. How software giant Workday is driving state legis- lation to regulate AI. https://www.documentcloud.org/documents/24458784- suzannefile
2024
-
[95]
Smuha, Emma Ahmed-Rengers, Adam Harkens, Wenlong Li, James MacLaren, Riccardo Piselli, and Karen Yeung
Nathalie A. Smuha, Emma Ahmed-Rengers, Adam Harkens, Wenlong Li, James MacLaren, Riccardo Piselli, and Karen Yeung. 2021. How the EU Can Achieve Legally Trustworthy AI: A Response to the European Commission’s Proposal for an Artificial Intelligence Act. (5 aug 2021). https://d...
2021 doi
-
[96]
Smuha and Karen Yeung
Nathalie A. Smuha and Karen Yeung. 2024. The European Union’s AI Act: beyond motherhood and apple pie? (jun 2024). https://doi.org/10.2139/ssrn.4874852 Available at SSRN
2024 doi
-
[97]
Ben Southwood. 2020. The rise and fall of the industrial R&D lab - Works in Progress — worksinprogress.co. https://worksinprogress.co/issue/the-rise-and- fall-of-the-american-rd-lab/. [Accessed 21-09-2024]
2020
-
[98]
Alfred Spector, Peter Norvig, and Slav Petrov. 2012. Google’s hybrid approach to research. Commun. ACM 55, 7 (July 2012), 34–37. https://doi.org/10.1145/ 2209249.2209262
2012
-
[99]
Mark Surman and Maximillian Gahntz. 2023. Openness and AI: Fostering innovation and accountability in the EU’s AI Act. https://blog.mozilla.org/en/ mozilla/internet-policy/eu-ai-act/
2023
- [100]
-
[101]
Kuen Tsai and Jiann Wang. 2007. A longitudinal examination of performance of two ways on innovation in Taiwan: Internal R&D investment and external technology acquisition. International Journal of Technology Management - INT J TECHNOL MANAGE 39 (01 2007). https://doi.org/10.15...
2007 arXiv
-
[102]
Ronald Turner. 2001. Reactions of the Regulated: A Federal Labor Law Example. Lab. Law. 17 (2001), 479
2001
-
[103]
Eduardo Ustaran and Uzma Chaudhry. 2024. Top 10 operational impacts of the EU AI Act: Understanding and assessing risk. (jul 2024). Part of a series on the operational impacts of the EU AI Act
2024
-
[104]
Teun van der Weij, Felix Hofstätter, Ollie Jaffe, Samuel F Brown, and Francis Rhys Ward. 2024. Ai sandbagging: Language models can strategically underperform on evaluations. arXiv preprint arXiv:2406.07358 (2024)
2024 arXiv
-
[105]
Michael Veale. 2023. Rights for Those Who Unwillingly, Unknowingly and Unidentifiably Compute! (2023)
2023
-
[106]
Pieter Verdegem. 2024. Dismantling AI capitalism: the commons as an alternative to the power concentration of Big Tech. AI & SOCIETY 39, 2 (01 Apr 2024), 727–737. https://doi.org/10.1007/s00146-022-01437-8
2024 doi
-
[107]
Maria Villegas Bravo. 2024. What U.S. Regulators can Learn from the EU AI Act. Electronic Privacy Information Center (EPIC). https://epic.org/what-u-s- regulators-can-learn-from-the-eu-ai-act/ EPIC Law Fellow
2024
-
[108]
Sandra Wachter. 2024. Limitations and loopholes in the EU AI Act and AI Liability Directives: what this means for the European Union, the United States, and beyond. Yale Journal of Law & Technology 26, 3 (2024)
2024
-
[109]
Wolfgang Wahlster and Christoph Winterhalter. 2022. German Standardization Roadmap on Artificial Intelligence (2nd ed.). Deutsche Normungsroadmap, Germany. Available online: https://responsible-automation.com/wp- content/uploads/2023/06/4.-German-Standardization-Road-Map-on- A...
2022
-
[110]
Jess Weatherbed. 2023. The EU still needs to get its AI Act together.The Verge (29 June 2023). https://www.theverge.com/2023/6/29/23777239/eu-ai-act-artificial- intelligence-regulations-europe Available online: https://www.theverge.com/ 2023/6/29/23777239/eu-ai-act-artificial-...
2023
-
[111]
David Gray Widder, Sarah West, and Meredith Whittaker. 2023. Open (for business): Big tech, concentrated power, and the political economy of open AI. Concentrated Power, and the Political Economy of Open AI (August 17, 2023) (2023)
2023
-
[112]
Emma Woollacott. 2024. What is ’AI washing’ and why is it a problem? https: //www.bbc.com/news/articles/c9xx8122893o
2024
-
[113]
Hao Yang, Junyang Lin, An Yang, Peng Wang, Chang Zhou, and Hongxia Yang
-
[114]
Rui-Jie Yew, Lucy Qin, and Suresh Venkatasubramanian. 2024. You Still See Me: How Data Protection Supports the Architecture of AI Surveillance. In Proceedings of the AAAI/ACM Conference on AI, Ethics, and Society , Vol. 7. 1709– 1722
2024
-
[115]
Timothy L. Yim. 2014. Normative Avoision: Revising the Copyright Alert System to Circumvent Normative Backlash.Hastings Science and Technology Law Journal 6, 1 (2014), 1–. https://repository.uclawsf.edu/hastings_science_technology_ law_journal/vol6/iss1/1
2014
-
[116]
Xinyi Zhang, Chenshuo Sun, Renyu Zhang, and Khim-Yong Goh. 2024. The Value of AI-Generated Metadata for UGC Platforms: Evidence from a Large-scale Field Experiment. arXiv:2412.18337 [econ.GN] https://arxiv.org/abs/2412.18337
2024 arXiv
-
[117]
Andrew Zuo. 2024. The Age Of AI ‘Dumping’. https://andrewzuo.com/the-age- of-ai-dumping-590b380a5413. [Accessed 13-09-2024]
2024
-
[2022]
arXiv preprint arXiv:2208.02532 (2022)
Prompt tuning for generative multimodal pretrained models. arXiv preprint arXiv:2208.02532 (2022)
2022 arXiv
-
[2024]
Artificial Intelligence and Law (09 Aug 2024)
An interdisciplinary account of the terminological choices by EU policy- makers ahead of the final agreement on the AI Act: AI system, general purpose AI system, foundation model, and generative AI. Artificial Intelligence and Law (09 Aug 2024). https://doi.org/10.1007/s10506-...
2024 doi
Reviewed August 7, 2026 · model on record in the stance chip above.
Discussion (0). Sign in to comment.