# Acceptable risks in Europe's proposed AI Act: Reasonableness and other principles for deciding how much risk management is enough

arXiv: https://arxiv.org/abs/2308.02047 · HTML: https://mlsanity.com/paper/2308.02047/

## Key facts

- Cited by 2 papers in the map (data through 14 Oct 2026).
- Builds on 0 of its 29 references that are in the map.
- First posted on arXiv 26 Jul 2023.

## Built on by (most cited first, 2 of 2)

- [Regulating Artificial Intimacy: From Locks and Blocks to Relational Accountability](https://mlsanity.com/paper/2604.18893/) (2026)
- [It's complicated. The relationship of algorithmic fairness and non-discrimination provisions for high-risk systems in the EU AI Act](https://mlsanity.com/paper/2501.12962/) (2025)

## Abstract (arXiv)

This paper critically evaluates the European Commission's proposed AI Act's approach to risk management and risk acceptability for high-risk AI systems that pose risks to fundamental rights and safety. The Act aims to promote "trustworthy" AI with a proportionate regulatory burden. Its provisions on risk acceptability require residual risks from high-risk systems to be reduced or eliminated "as far as possible", having regard to the "state of the art". This criterion, especially if interpreted narrowly, is unworkable and promotes neither proportionate regulatory burden, nor trustworthiness. By contrast the Parliament's most recent draft amendments to the risk management provisions introduce "reasonableness", cost-benefit analysis, and are more transparent about the value-laden and contextual nature of risk acceptability judgements. This paper argues that the Parliament's approach is more workable, and better balances the goals of proportionality and trustworthiness. It explains what reasonableness in risk acceptability judgments would entail, drawing on principles from negligence law and European medical devices regulation. And it contends that the approach to risk acceptability judgments need a firm foundation of civic legitimacy: including detailed guidance or involvement from regulators, and meaningful input from affected stakeholders.