The EU AI Act Is Now Enforceable. Here Is What That Actually Means
Tier-by-tier, the obligations are real. But enforcement capacity is thin and the exemptions are wide enough to drive a data centre through.
Alex Morgan founded Questionable Digital after a decade and a half at the intersection of technology, law and public policy. Before establishing the site, Alex worked as a senior technology reporter at two national mastheads and spent four years as a policy analyst for a digital rights organisation lobbying on surveillance legislation, encryption policy and platform regulation. Alex holds a law degree and a postgraduate qualification in digital forensics from UNSW. Alex's work has been cited in parliamentary inquiries, academic papers and Senate committee submissions. Areas of particular focus include AI governance, cybersecurity law, government surveillance powers and the regulation of critical digital infrastructure.
Tier-by-tier, the obligations are real. But enforcement capacity is thin and the exemptions are wide enough to drive a data centre through.
We analysed the benchmark claims of 14 major AI vendors against independent testing. The gap between marketing copy and measurable reality is wider than most enterprises realise.
Australia's telecommunications interception regime allows warrantless access to metadata at a scale that has never been publicly quantified. We quantified it.
Voluntary commitments from AI companies have a record. We reviewed Australia's framework against what binding frameworks elsewhere actually require.
Twelve consumer VPN services make strong no-log promises. We tested network behaviour under controlled conditions. Four failed their own stated policies.
The carbon accounting that lets companies claim renewable energy operations involves creative definitions most investors haven't read.
Sources are protected. Right of reply is standard for all investigations. We respond to every serious pitch.