"The act doesn't even require the reporting of the Hugging Face incident as it's currently designed"
=> This sounds overconfident. FYI: from the GPAI Guidelines, paragraph 100: "The AI Office considers that this obligation [to report relevant information about ‘serious incidents’ under Article 55(1), point (c), AI Act] covers serious cybersecurity breaches related to the model or its physical infrastructure, including the (self-)exfiltration of model parameters and cyberattacks"
"If the goal is to have a regulatory framework that the frontier AI companies... (read more)
"The act doesn't even require the reporting of the Hugging Face incident as it's currently designed"
=> This sounds overconfident. FYI: from the GPAI Guidelines, paragraph 100: "The AI Office considers that this obligation [to report relevant information about ‘serious incidents’ under Article 55(1), point (c), AI Act] covers serious cybersecurity breaches related to the model or its physical infrastructure, including the (self-)exfiltration of model parameters and cyberattacks"
"If the goal is to have a regulatory framework that the frontier AI companies... (read more)