AI Risk Register
A living catalogue of identified AI-related risks and mitigations.
How the laws define this
Centralized tracking of AI hazards forms the core commonality, as both sources define an AI Risk Register as a centralized, cross-economy record used to identify and track AI risks for directing regulatory action. They agree that this centralized instrument serves an economy-wide monitoring function to help regulators prioritize interventions. The primary divergence lies in the captured data and specific regulatory end goals. The Central AI Risk Function (CAIRF) text emphasizes recording risk indicators and recommended mitigations to guide policy design and coordinated government responses, bound by security considerations. Conversely, the Government response to the AI regulation white paper (AI regulation: government response) focuses on horizon scanning, monitoring, and evaluation, framing the register's ultimate goal as informing targeted consultations and imposing binding requirements where necessary.
Synthesised from the 2 statutory definitions below. Each one is quoted in full, with its source.
How jurisdictions differ
What is distinctive in each definition, binding law in force first.
| Jurisdiction | Instrument | Status | What is distinctive |
|---|---|---|---|
| United Kingdom | Central AI Risk Function (CAIRF) | In Force | This definition adds associated indicators and security considerations, while specifying use to inform regulator action, policy design, and coordinated government responses. |
| United Kingdom | A pro-innovation approach to AI regulation: government response | Adopted | This definition widens the purpose to support horizon scanning, monitoring, evaluation, and prioritisation of regulatory action, including targeted consultations. |
What it triggers
- Under the Central AI Risk Function policy, the register is used to inform regulator action, policy design, and coordinated government responses subject to security considerations.source
- Under A pro-innovation approach to AI regulation: government response, the register is intended to inform targeted consultations where necessary.source
Definitions (2)
A maintained and periodically updated cross-economy register that records identified AI-related risks, associated indicators, and recommended mitigations, used to inform regulator action, policy design, and coordinated government responses (subject to security considerations).
A centralised register to identify, record, and track AI risks across the economy to support horizon scanning, monitoring and evaluation, and prioritisation of regulatory action. The register is intended to inform targeted consultations and the imposition of binding requirements where necessary.
Not to be confused with
An AI Register is an inventory of an entity's own AI systems and metadata, whereas this term refers to a centralised cross-economy register of AI risks.
Questions and answers
What does the Central AI Risk Function use the AI Risk Register for?
The Central AI Risk Function uses the register to inform regulator action, policy design, and coordinated government responses, subject to security considerations. It records identified AI-related risks, associated indicators, and recommended mitigations.
How does the UK government response describe the purpose of the AI Risk Register?
The government response describes it as a centralised register to identify, record, and track AI risks across the economy. It supports horizon scanning, monitoring, evaluation, and prioritisation of regulatory action, informing targeted consultations where necessary.
What is distinctive between the two UK definitions of AI Risk Register?
The Central AI Risk Function definition includes associated indicators and security considerations, focusing on informing regulator action and policy. The government response emphasises horizon scanning and monitoring.
Related Terms
AI system registry
National registry for high‑risk AI deployments....
Register of AI systems
National registry for specified high‑risk AI systems....
National Registry of AI Systems
Central registry of covered AI systems for oversight....
Risk assessments
Formal analyses of likelihood and impact of AI uses, incl. privacy and bias....
AI Register
A maintained inventory of an entity's AI systems and related metadata....