AI Governance

Glossary

Risk-Based Regulation

A regulatory design that scales legal duties according to estimated severity and likelihood of harm.

Last reviewed 2026-08-22

In plain language

Risk-based AI regulation, exemplified by the EU AI Act’s pyramid of prohibited, high-risk, limited-risk and minimal-risk uses, tries to focus obligations where harm potential is greater. Challenges include classifying systems, measuring risk across contexts, and avoiding under-regulation of cumulative or novel harms. Risk categories are policy choices, not purely technical facts.

Why it matters for AI governance

Many jurisdictions copy or debate the risk-based template. Understanding its strengths and blind spots is central to comparative AI law.

Authoritative sources