From Principles to Rules: A Regulatory Approach for Frontier AI
webCredibility Rating
4/5
High(4)High quality. Established institution or organization with editorial oversight and accountability.
Rating inherited from publication venue: Centre for the Governance of AI
This paper from GovAI analyzes how regulators should structure requirements for frontier AI developers, recommending a principle-based approach initially that evolves toward more specific rules as understanding matures — directly relevant to AI governance and safety policy design.
Metadata
Importance: 72/100working paperanalysis
Summary
The paper examines the tradeoffs between principle-based and rule-based regulation for frontier AI systems, arguing that given current uncertainty about risks and nascent safety practices, regulators should start with high-level principles while building regulatory capacity. Over time, as understanding improves, regulation should shift toward more specific rules. The authors recommend close regulatory oversight of developer compliance throughout this process.
Key Points
- •Principle-based regulation offers adaptability but less certainty; rule-based regulation offers clarity but risks becoming outdated or enabling box-ticking.
- •Regulators should initially mandate high-level safety principles for frontier AI, closely oversee compliance, and urgently build regulatory capacity.
- •The appropriate level of regulatory specificity exists on a spectrum and should evolve over time as AI risks and safety practices mature.
- •Key assumptions include: frontier AI risks are poorly understood, many safety practices are nascent, and developers are best positioned to innovate on safety.
- •The framework applies to general-purpose AI systems at or beyond the frontier of current capabilities across multiple jurisdictions.
Cached Content Preview
HTTP 200Fetched Jun 29, 20264 KB
From Principles to Rules: A Regulatory Approach for Frontier AI
Several jurisdictions are starting to regulate frontier artificial intelligence (AI) systems, i.e. general-purpose AI systems that match or exceed the capabilities present in the most advanced systems. To reduce risks from these systems, regulators may require frontier AI developers to adopt safety measures. The requirements could be formulated as high-level principles (e.g. 'AI systems should be safe and secure') or specific rules (e.g. 'AI systems must be evaluated for dangerous model capabilities following the protocol set forth in...'). These regulatory approaches, known as 'principle-based' and 'rule-based' regulation, have complementary strengths and weaknesses. While specific rules provide more certainty and are easier to enforce, they can quickly become outdated and lead to box-ticking. Conversely, while high-level principles provide less certainty and are more costly to enforce, they are more adaptable and more appropriate in situations where the regulator is unsure exactly what behavior would best advance a given regulatory objective. However, rule-based and principle-based regulation are not binary options. Policymakers must choose a point on the spectrum between them, recognizing that the right level of specificity may vary between requirements and change over time. We recommend that policymakers should initially (1) mandate adherence to high-level principles for safe frontier AI development and deployment, (2) ensure that regulators closely oversee how developers comply with these principles, and (3) urgently build up regulatory capacity. Over time, the approach should likely become more rule-based. Our recommendations are based on a number of assumptions, including (A) risks from frontier AI systems are poorly understood and rapidly evolving, (B) many safety practices are still nascent, and (C) frontier AI developers are best placed to innovate on safety practices.
Read paper Read paper Theme
AI Regulation Date
August 21, 2024
author
s
Jonas Schuett, Markus Anderljung, Alexis Carlier, Leonie Koessler, Ben Garfinkel
Share
Research Summary
Footnotes
Further reading
Related publications
AI Regulation
Delays to Frontier AI in the EU and UK
June 2026
Technical Report
John Lidiard, Oleksandra Vereschak, Tom Gibbs, and Markus Anderljung
In recent years, frontier AI companies have sometimes delayed the release of new models to the EU and UK – or not released them at all. To what extent has...
AI Regulation
Requirements for Model Specifications in the EU GPAI Code of Practice
March 2026
Policy Brief
Alan Chan
The EU GPAI Code of Practice commits Signatories to providing a description of intended model behavior...
AI Regulation
Labeling of AI Agent Activity in Article 50 of the EU AI Act
November 2025
Policy Brief
Alan Chan
The online activities of AI agents could distort human beliefs and behaviors. For example, hu
... (truncated, 4 KB total)Resource ID:
c9071db43ef48f7e | Stable ID: sid_yGYyFjpFlQ