We Need to Stop Pretending That AI Regulation Stifles Innovation
Lack of commonsense AI regulation opens the door to real harm and risks a potential $10.3 trillion opportunity to develop and use generative AI. We need guidelines to encourage innovators to explore new technologies without risking public trust.
Efforts to ensure responsible AI innovation have veered off course. Regulations such as the EU AI Act are crucial to unlocking AI’s most powerful use cases. All the innovations we’ve seen in AI so far are a direct result of collecting and using data for model training. When users feel protected through transparent data policies and consent measures, they’re more likely to contribute the high-quality data necessary to advance AI.
However, if companies neglect to safeguard users, they will run out of “fuel” or data to advance any further.
Are Guardrails Excessive?
The global AI community has progressed in the past several years over how to govern AI technology so that innovation doesn’t sacrifice user trust and safety. The Institute of Electrical and Electronics Engineers trade association set the stage in 2016 with its ethically aligned design principles, and the Organization for Economic Cooperation and Development adopted its own AI principles three years later. The White House’s 2022 AI Bill of Rights was followed by an executive order on AI in 2023. Last March, the EU passed its watershed AI Act.
Remarks from political leaders suggesting that “excessive regulation of the AI sector could kill a transformative industry” pit AI opportunity against safety. Why should we have to choose between the two? User-first privacy programs build lasting trust between consumers and companies.
Products and services that prioritize consumer trust and empower user choice can accelerate innovation rather than block it. Take biometric data and smart devices; these technologies continue to raise privacy questions. Regulations such as Illinois’ Biometric Information Privacy Act, the EU’s General Data Protection Regulation, and California’s IoT Security Law have established clearer rules around data collection, storage, and sharing, helping reassure the public and leading to greater adoption of technologies such as digital identity verification, wearable health devices, and smart home assistants.
Regulating Known Harms
Under-regulating technology has troubling consequences. Self-driving cars from adversarial countries traversed millions of miles gathering vast amounts of information on US citizens because the US lacks laws specifically governing such technologies.
In contrast, the EU AI Act places necessary guardrails around AI technologies with known harms, such as biometric surveillance in public spaces, predictive policing, or emotion-recognition systems in workplaces or schools. The risk of racial discrimination by facial recognition technology is well-documented, with instances of wrongful arrests highlighting the urgent need for regulation.
Rather than stifling innovation, regulations push companies to continue improving their products. Privacy laws have forced companies to rethink data collection and usage and to innovate in areas such as encryption, data minimization, and user consent management, leading to stronger security, better consumer trust, and new business models.
For example, companies like Apple have introduced advanced data protection for end-to-end encryption of iCloud data categories beyond passwords and protected health information. User consent regulations have given rise to new technologies that govern the entire lifecycle of user permissions—from initial capture and storage to handling of granular data access requests and deletion.
Innovation and Trust
Regulations such as the EU AI Act that seek to address the most critical risks of emerging technology are not examples of government overreach. No regulation is perfect, but these laws can serve as blueprints for meaningful legislation to promote public trust and AI adoption. The future of US AI leadership hinges on forging a path where innovation and responsible governance coexist.
Trust—built through transparent data practices and practical guardrails—is the currency of progress. Frameworks that prioritize safety will reassure users and empower innovators to experiment.