ISO 42001 and Legal Compliance

ISO/IEC 42001:2023 is the world-first standard for managing AI responsibly. It addresses the unique challenges AI poses, such as ethical considerations, transparency, and continuous learning. This voluntary international standard on AI management systems is growing in importance. With increased concerns over-and distrust of-the use of AI, more and more consumers and clients are likely to require their vendors to be ISO/IEC 42001:2023-certified, and more organizations in all industries and of all sizes are likely to implement AI management systems on their own.

Part of this AI management system's implementation process involves taking into consideration "legal requirements." However, many implementers have trouble understanding the basic concepts of AI law. In preparation for the increasing regulation of AI across the globe, this book aims to methodically connect the dots between the technical standard and domestic, regional, and international laws relating to AI, mapping the technical standard's clauses and controls to the relevant legal provisions.

This book will explain the law in a comprehensible way to the implementer of the AI management system (regardless of whether they are legally trained), and adopt a comparative approach: given their extra-territorial reach (the 'Brussels effect'), the EU AI Act, and the GDPR will be regarded as the benchmarks, contrasted with examples from other jurisdictions which are likely to use these regulations as starting points for their drafting of new AI laws.

This book will ground the discussion in AI ethics (while avoiding abstract principles in this practical guide), and will be structured according to the ethical principles of privacy, security, fairness, transparency and explainability. This structure aims to revitalize and provide a unique interpretation of what is often perceived as a dry, procedural standard.

What You Will Learn:

• Both the standard and the organization which set it, and the relevance of law.
• The context, relevance and role of legal requirements in the standard.
• Understand how their implementation of the AIMS supports ethical AI principles of privacy, security, fairness, transparency and explainability.
• Know the applicable laws at various stages of the implementation process of the AIMS.

• Appreciate the international nature of this standard despite varying regulations.

Who This Book is for:

Anyone tasked specifically with the implementation of an AIMS according to ISO/IEC 42001:2023. For all industries and organizations.

Autorentext

Matthew Seet is certified as an ISO/IEC 42001:2023 Artificial Intelligence Management Systems Lead Auditor, ISO 31000:2018 Lead Risk Manager and ISO/IEC 27001:2022 Information Security Management Systems Lead Auditor. Matthew was formerly an international law lecturer with publications in the Cambridge Law Journal, Journal of International Criminal Justice, International Journal of Refugee Law, and was recently cited in the Financial Times. He taught law at the National University of Singapore for 7 years and conducted research on human rights and data privacy at the Office of the United Nations High Commissioner for Refugees headquarters in Geneva for over a year. Matthew obtained a Master's in International Law from the Graduate Institute in Geneva on a Swiss Government Scholarship and represented Switzerland in the Philip C. Jessup International Law Moot Court Competition.

Inhalt

Chapter 1: Introduction.- Chapter 2: Legal requirements in ISO/IEC 42001:2023.- Chapter 3: Security.- Chapter 4: Privacy.- Chapter 5: Explainability and Transparency.- Chapter 6: Fairness.- Chapter 7: Conclusion.