3. Risks associated with AI and how they are taken into account

One of the key challenges of the AI Act is both to map the risks associated with the use of AI for the organization (Figure 7) and to identify and assess the risks of the different types of AI used within the organization (Figure 8) in an insurance company that has implemented this approach in 2025. The insurance company's compliance director summarizes the philosophy behind the approach implemented with regard to the AI Act as follows: "At AAA, our policy has been to anticipate the entry into force of the AI Act. This regulation introduces new features, but its philosophy remains similar to other texts such as the GDPR and aims to bring confidence and protection to our operational processes. We have therefore involved the business lines in each existing and implemented AI assessment and have imposed a risk assessment principle before any new AI implementation in our processes, whether...