The rapid proliferation of artificial intelligence (AI) technologies has led to a dynamic regulatory landscape, where legislative frameworks strive to keep pace with technical advancements. As AI paradigms shift towards greater autonomy, specifically in the form of agentic AI, it becomes increasingly challenging to precisely articulate regulatory stipulations. This challenge is even more acute in the domains of security and privacy, where the capabilities of autonomous agents often blur traditional legal and technical boundaries. This paper reviews the evolving European Union (EU) AI regulatory provisions via analyzing 24 relevant documents published between 2024 and 2025. From this review, we provide a clarification of critical definitions. We deconstruct the regulatory interpretations of security, privacy, and agentic AI, distinguishing them from closely related concepts to resolve ambiguity. We synthesize the reviewed documents to articulate the current state of regulatory provisions targeting different types of AI, particularly those related to security and privacy aspects. We analyze and reflect on the existing provisions in the regulatory dimension to better align security and privacy obligations with AI and agentic behaviors. These insights serve to inform policymakers, developers, and researchers on the compliance and AI governance in the society with increasing algorithmic agencies.
翻译:人工智能(AI)技术的快速普及催生了动态的监管格局,立法框架正努力追赶技术进步的步伐。随着AI范式向更高自主性(尤其是以自主型AI形式)转变,精确阐述法规条款的难度日益增加。这一挑战在安全与隐私领域尤为严峻,自主智能体的能力往往模糊了传统法律与技术的界限。本文通过分析2024年至2025年间发布的24份相关文件,审视了欧盟(EU)AI监管规定的演变。基于此综述,我们澄清了关键定义。我们解构了监管层面对安全、隐私和自主型AI的解读,将其与密切相关概念加以区分以消除歧义。我们综合所审核文件,梳理了针对不同类型AI(尤其是涉及安全与隐私方面)的现行监管条款。我们从监管维度分析与反思现有规定,以期使安全与隐私义务更好地适配AI及其自主行为。这些见解有助于政策制定者、开发者和研究人员在当前算法自主性日益增强的社会中,实现合规与AI治理。