[{"data":1,"prerenderedAt":337},["ShallowReactive",2],{"site:settings":3,"site:navigation":49,"site:footer":126,"page:\u002Fblog\u002Fai-sig-scope":188,"sections:\u002Fblog\u002Fai-sig-scope":328,"feed:\u002Fblog\u002Fai-sig-scope":331,"breadcrumbs:\u002Fblog\u002Fai-sig-scope":332},{"id":4,"title":5,"callForAction":6,"description":9,"extension":10,"featuredContentPublishTarget":11,"keywords":12,"logo":18,"logoWidth":19,"meta":20,"search":21,"seoTitleSuffix":25,"skipLinkText":26,"socialImage":27,"socials":30,"stem":47,"__hash__":48},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F","The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc",[13,14,15,16,17],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png",120,{},{"label":22,"placeholder":23,"menuLabel":24},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":28,"eyebrow":29},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[31,35,39,43],{"name":32,"icon":33,"url":34},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":36,"icon":37,"url":38},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":40,"icon":41,"url":42},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":44,"icon":45,"url":46},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","bxtnzYEG4TQ27x8O_VKQIF-gc2dr-DNwF9_OpAZy3LA",{"id":50,"extension":10,"main":51,"meta":123,"stem":124,"__hash__":125},"navigation\u002Fdata\u002Fnavigation.yml",[52,70,82,99],{"text":53,"children":54},"About",[55,58,61,64,67],{"text":56,"href":57},"ORC Working Group","\u002Fabout\u002F",{"text":59,"href":60},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",{"text":62,"href":63},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",{"text":65,"href":66},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F",{"text":68,"href":69},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F",{"text":71,"children":72},"Membership",[73,76,79],{"text":74,"href":75},"Our Members","\u002Fmembership\u002F",{"text":77,"href":78},"Become a Member","\u002Fmembership\u002Fbecome-a-member\u002F",{"text":80,"href":81},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F",{"id":83,"text":84,"children":85},"cra","Cyber Resilience Act",[86,89,93,96],{"text":87,"href":88},"About CRA","\u002Fcra\u002Fabout",{"text":90,"href":91,"external":92},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,{"text":94,"href":95},"CRA Resources","\u002Fcra\u002Fresources",{"text":97,"href":98,"external":92},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub",{"text":100,"children":101},"Resources",[102,105,108,111,114,117,120],{"text":103,"href":104},"Events","\u002Fevents\u002F",{"text":106,"href":107},"Community Calendar","\u002Fresources\u002Fcalendar\u002F",{"text":109,"href":110},"Blog","\u002Fblog\u002F",{"text":112,"href":113},"Videos","\u002Fresources\u002Fvideos\u002F",{"text":115,"href":116},"Learning Hub","\u002Ftraining\u002F",{"text":118,"href":119},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F",{"text":121,"href":122,"external":92},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc",{},"data\u002Fnavigation","XYDVypNX67n8V4VQI_JTrw0cI16uV5jtctVXjN-DeKo",{"id":127,"backToTopText":128,"copyright":129,"extension":10,"manageCookiesText":130,"meta":131,"sections":132,"socialsHeading":185,"stem":186,"__hash__":187},"footer\u002Fdata\u002Ffooter.yml","Back to the top","Copyright © Eclipse Foundation AISBL. All Rights Reserved.","Manage Cookies",{},[133,150,169],{"id":134,"heading":135,"links":136},"footer-eclipse-foundation","Eclipse Foundation",[137,139,142,145,147],{"text":53,"href":138},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":140,"href":141},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":143,"href":144},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":71,"href":146},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":148,"href":149},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":151,"heading":152,"showManageCookies":92,"links":153},"footer-legal","Legal",[154,157,160,163,166],{"text":155,"href":156},"Privacy Policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":158,"href":159},"Terms of Use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":161,"href":162},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":164,"href":165},"Code of Conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":167,"href":168},"Legal Resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":170,"heading":171,"links":172},"footer-more","More",[173,176,179,182],{"text":174,"href":175},"Report a Vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":177,"href":178},"Service Status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":180,"href":181},"Contact Us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":183,"href":184},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow Us:","data\u002Ffooter","C-lpCHl9crwF3iQyRSh8y5g9ez5YgF4pi8aTv4pFLBM",{"id":189,"title":190,"aliases":191,"author":192,"body":193,"breadcrumbTitle":191,"breadcrumbs":191,"date":321,"description":191,"extension":322,"featuredFooter":191,"keywords":191,"meta":323,"navigation":92,"path":324,"redirectUrl":191,"seo":325,"seoTitle":191,"socialImage":191,"stem":326,"summary":191,"typography":191,"visibility":191,"width":191,"__hash__":327},"blog\u002Fblog\u002Fai-sig-scope.md","Introducing the ORC AI SIG",null,"Dave Russo and Rachel Foucard",{"type":194,"value":195,"toc":317},"minimark",[196,200,217,223,226,229,234,237,253,256,264,269,278,283,286,314],[197,198,199],"p",{},"EU regulatory frameworks have not always accounted for the unique ways open source software is developed and maintained. The EU AI Act represents progress in recognising open source, but adapting the EU’s regulatory framework to open source in practice remains an ongoing process.",[197,201,202,203,210,211,216],{},"Large parts of EU AI Act are already in force, and the standards that will define how it will be implemented are being written right now. That’s exactly why the Open Regulatory Compliance (ORC) Working Group launched the ",[204,205,209],"a",{"href":206,"rel":207},"https:\u002F\u002Forcwg.org\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",[208],"nofollow","AI Policy & Compliance Special Interest Group"," (AI SIG), and why we’re sharing the ",[204,212,215],{"href":213,"rel":214},"https:\u002F\u002Fgithub.com\u002Forcwg\u002Forcwg\u002Fblob\u002Fmain\u002Fai-policy-and-compliance-sig\u002Fscope.md",[208],"AI SIG’s scope"," this week.",[197,218,219],{},[220,221,222],"strong",{},"Why open source needs a seat at the table",[197,224,225],{},"The AI Act primarily targets companies that provide AI models and systems, and it classifies certain uses as high-risk while placing different obligations on general-purpose models. But open source is not exempt from scrutiny. As open models gain visibility, and as organisations across Europe and beyond look to reduce reliance on proprietary technology, projects that produce these models face the same questions about transparency, data provenance, and security controls, when they enter the market.",[197,227,228],{},"We saw a similar pattern with the Cyber Resilience Act (CRA): the people writing technical standards need to understand how open source actually works, or the results won’t be workable for the community. The AI SIG exists to make sure that happens for AI regulation, too.",[197,230,231],{},[220,232,233],{},"What the AI SIG will do",[197,235,236],{},"The AI SIG supports open source stakeholders in two ways:",[238,239,240,247],"ul",{},[241,242,243,246],"li",{},[220,244,245],{},"Inform",": Helping members understand and implement regulatory requirements, starting with the EU AI Act and expanding to other regulations as member interest grows.",[241,248,249,252],{},[220,250,251],{},"Influence",": Engaging with the regulatory bodies to help shape upcoming standards, so they are compatible with how open source is actually developed and used.",[197,254,255],{},"Beyond act-specific work, the group plans to tackle a few broader, recurring problems: clarifying technical definitions (such as the distinction between an AI model and an AI system), documenting the reasoning behind past positions so we’re not relitigating the same questions every time they resurface, and looking at how overlapping regulations can be addressed with a more unified compliance approach.",[197,257,258,259,263],{},"The ",[204,260,59],{"href":261,"rel":262},"https:\u002F\u002Forcwg.org\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",[208]," continues to lead general CRA work. The two SIGs will work together where AI and cybersecurity requirements intersect, including questions about the CRA’s applicability to AI components and systems.",[197,265,266],{},[220,267,268],{},"A global concern, not just a European one",[197,270,271,272,277],{},"The AI Act is EU legislation but open source is global by nature, so the impact isn’t confined to Europe. Any organisation putting AI systems on the market in the EU needs to comply if its use case falls into a regulated category, regardless of where that organisation is based. And the EU AI Act isn’t the only regulation on the horizon. The Cloud and AI Development Act (CADA), part of the ",[204,273,276],{"href":274,"rel":275},"https:\u002F\u002Fdigital-strategy.ec.europa.eu\u002Fen\u002Flibrary\u002Fproposal-cloud-and-ai-development-act-cada",[208],"EU’s technical sovereignty package",", is currently open for feedback, and several U.S. states have draft AI legislation in progress. The SIG’s scope is deliberately written to cover whichever regulations impact the open source community.",[197,279,280],{},[220,281,282],{},"How to get involved",[197,284,285],{},"If you work with or on AI models and systems, we’d like your input. Getting involved is simple:",[238,287,288,296,305],{},[241,289,290,291],{},"Subscribe to the ",[204,292,295],{"href":293,"rel":294},"https:\u002F\u002Faccounts.eclipse.org\u002Fmailing-list\u002Forc-ai-sig",[208],"AI SIG mailing list",[241,297,298,299,304],{},"Join a biweekly SIG call, held on Mondays. No preparation required; check the ",[204,300,303],{"href":301,"rel":302},"https:\u002F\u002Forcwg.org\u002Fresources\u002Fcalendar\u002F",[208],"community calendar"," and drop in to listen before you contribute.",[241,306,307,308,313],{},"Register to join us at ",[204,309,312],{"href":310,"rel":311},"https:\u002F\u002Fcodeandcompliance.orcwg.org\u002F",[208],"Code & Compliance"," on 27 October 2026, where we will have a block on the “AI Act: Safe integration of open source models”.",[197,315,316],{},"None of this works without a broad range of voices at the table. You don’t need to be an expert to contribute; your experience, questions, and perspective can help shape the work. We hope you’ll get involved as the AI SIG evolves.",{"title":318,"searchDepth":319,"depth":319,"links":320},"",2,[],"2026-09-23","md",{},"\u002Fblog\u002Fai-sig-scope",{"title":190},"blog\u002Fai-sig-scope","RUFVFX5Ou033-iKEc6E9L0xSAvPFnHOVkKyYwZHwPU0",[329],{"path":330,"visibility":191},"\u002Fblog",false,[333,336],{"path":334,"text":335},"\u002F","ORC",{"path":330,"text":109},1792684541390]