11 citations · 37 across the 19 of their papers we have counts for
20 papers
AI Risk Ontologies for the EU AI Act Compliance: AIRO, VAIR, and their Integration with DPV
Delaram Golpayegani, Harshvardhan J. Pandit, Declan O'Sullivan +1
As the use of AI, and consequently its harms, becomes more prevalent, the global discourse around AI has become increasingly risk-aware. With new risks emerging more frequently tha…
Big AI's Regulatory Capture: Mapping Industry Interference and Government Complicity
Abeba Birhane, Riccardo Angius, William Agnew +4
Over the past decade, the AI industry has come to exert an unprecedented economic, political and societal power and influence. It is therefore critical that we comprehend the exten…
Playing Games with My Heart: An Evaluation of AI Companion Apps
Maribeth Rauh, Dick A. H. Blankvoort, Matias Duran +6
The use of chatbots for various forms of companionship is growing rapidly, raising a myriad of questions about simulated relationships, emotional dependence, and psychological harm…
Terms of (Ab)Use: An Analysis of GenAI Services
Harshvardhan J. Pandit, Dick A. H. Blankvoort, Adel Shaaban +2
Generative AI services like ChatGPT and Gemini are some of the fastest-growing consumer services. Individuals using such services must accept their terms of use before access, and…
Quality Assessment of Public Summary of Training Content for GPAI models required by AI Act Article 53(1)(d)
Dick A. H. Blankvoort, Harshvardhan J. Pandit, Maximilian Gahntz
The AI Act's Article 53(1)(d) requires providers of general-purpose AI (GPAI) models to publish a sufficiently detailed public summary about the content used for training based on…
Can the GPC standard eliminate consent banners in the EU?
Sebastian Zimmeck, Harshvardhan J. Pandit, Frederik Zuiderveen Borgesius +3
In the EU, the General Data Protection Regulation and the ePrivacy Directive mandate consent for the use of personal data for the purpose of behavioural advertising and tracking te…
Mapping the Regulatory Learning Space for the EU AI Act
Dave Lewis, Marta Lasek-Markey, Delaram Golpayegani +1
The EU AI Act represents the world's first transnational AI regulation with concrete enforcement measures. It builds on existing EU mechanisms for regulating health and safety of p…
ADAPT Centre Contribution on Implementation of the EU AI Act and Fundamental Right Protection
Dave Lewis, Marta Lasek-Markey, Harshvardhan J. Pandit +6
This document represents the ADAPT Centre's submission to the Irish Department of Enterprise, Trade and Employment (DETE) regarding the public consultation on implementation of the…
Datasheets for Healthcare AI: A Framework for Transparency and Bias Mitigation
Marjia Siddik, Harshvardhan J. Pandit
The use of AI in healthcare has the potential to improve patient care, optimize clinical workflows, and enhance decision-making. However, bias, data incompleteness, and inaccuracie…
Towards An Automated AI Act FRIA Tool That Can Reuse GDPR's DPIA
Tytti Rintamaki, Harshvardhan J. Pandit
The AI Act introduces the obligation to conduct a Fundamental Rights Impact Assessment (FRIA), with the possibility to reuse a Data Protection Impact Assessment (DPIA), and require…
Developing an Ontology for AI Act Fundamental Rights Impact Assessments
Tytti Rintamaki, Harshvardhan J. Pandit
The recently published EU Artificial Intelligence Act (AI Act) is a landmark regulation that regulates the use of AI technologies. One of its novel requirements is the obligation t…
AICat: An AI Cataloguing Approach to Support the EU AI Act
Delaram Golpayegani, Harshvardhan J. Pandit, Dave Lewis
The European Union's Artificial Intelligence Act (AI Act) requires providers and deployers of high-risk AI applications to register their systems into the EU database, wherein the…
How to Manage My Data? With Machine--Interpretable GDPR Rights!
Beatriz Esteves, Harshvardhan J. Pandit, Georg P. Krog +1
The EU GDPR is a landmark regulation that introduced several rights for individuals to obtain information and control how their personal data is being processed, as well as receive…
A Collaborative, Human-Centred Taxonomy of AI, Algorithmic, and Automation Harms
Gavin Abercrombie, Djalel Benbouzid, Paolo Giudici +13
This paper introduces a collaborative, human-centred taxonomy of AI, algorithmic and automation harms. We argue that existing taxonomies, while valuable, can be narrow, unclear, ty…
AI Cards: Towards an Applied Framework for Machine-Readable AI and Risk Documentation Inspired by the EU AI Act
Delaram Golpayegani, Isabelle Hupont, Cecilia Panigutti +4
With the upcoming enforcement of the EU AI Act, documentation of high-risk AI systems and their risk management information will become a legal requirement playing a pivotal role i…
Implementing ISO/IEC TS 27560:2023 Consent Records and Receipts for GDPR and DGA
Harshvardhan J. Pandit, Jan Lindquist, Georg P. Krog
The ISO/IEC TS 27560:2023 Privacy technologies - Consent record information structure provides guidance for the creation and maintenance of records regarding consent as machine-rea…
Data Privacy Vocabulary (DPV) -- Version 2
Harshvardhan J. Pandit, Beatriz Esteves, Georg P. Krog +3
The Data Privacy Vocabulary (DPV), developed by the W3C Data Privacy Vocabularies and Controls Community Group (DPVCG), enables the creation of machine-readable, interoperable, and…
Proposals for Resolving Consenting Issues with Signals and User-side Dialogues
Harshvardhan J. Pandit
Consent dialogues are a source of annoyance, malicious intent, dark patterns, illegal practices and a plethora of other issues. This work presents known problems based on GDPR requ…
A Common Semantic Model of the GDPR Register of Processing Activities
Paul Ryan, Harshvardhan J. Pandit, Rob Brennan
The creation and maintenance of a Register of Processing Activities (ROPA) is an essential process for the demonstration of GDPR compliance. We analyse ROPA templates from six EU D…
Towards a Semantic Model of the GDPR Register of Processing Activities
Paul Ryan, Harshvardhan J. Pandit, Rob Brennan
A core requirement for GDPR compliance is the maintenance of a register of processing activities (ROPA). Our analysis of six ROPA templates from EU data protection regulators shows…