The EU AI Act (Regulation 2024/1689) tiers AI systems by risk and places substantial obligations on high-risk systems, including data governance, record-keeping, human oversight, transparency, and conformity assessment, with high-risk obligations phasing in through 2026.
These obligations map almost directly onto DIG. Record-keeping and human oversight are Decision Traceability; data-governance duties are Information Provenance; logging and conformity are Audit Readiness; transparency duties touch Representation Integrity. An organization running DIG is building the evidence the Act asks for.
For companies with EU exposure, DIG turns the Act's requirements from a checklist into a standing discipline.
References
- NIST AI Risk Management Framework (AI RMF 1.0): Govern, Map, Measure, Manage. National Institute of Standards and Technology, 2023. View source ↗
- Information governance: the records and data lifecycle discipline (storage, retention, disposition), distinct from AI decision governance. ARMA International, Generally Accepted Recordkeeping Principles; AIIM. View source ↗
- EU AI Act, Regulation (EU) 2024/1689 (Official Journal of the European Union); ISO/IEC 42001:2023; Texas Responsible AI Governance Act (TRAIGA). View source ↗
- USPTO Trademark Reg. No. 99559923, Digital Information Governance / DIG, owner Matthew Bertram. View source ↗