Reference
Responsible AI.
This reference page sets out what the term denotes, how it developed, which principles have converged across the major instruments, and how the surrounding vocabulary should be distinguished.
DefinitionResponsible AI names a practice.
It describes the discipline through which an organization decides what a system may be used for, what evidence supports that decision, who is accountable for it, and under what conditions it should be stopped. Responsibility attaches to the organization, not to the system.
This distinguishes the term from adjacent ones it is often used interchangeably with. Ethics supplies the values; governance supplies the decision rights and controls; assurance supplies the independent test. Responsible AI is the practice that connects them across the lifecycle of a system.
HistoryThe terminology is recent; the underlying questions are not.
Concern about delegating consequential judgment to computation predates machine learning by several decades. The change after 2015 followed the deployment of systems making decisions at scale in employment, credit, policing, health and welfare, and the consequent shift from philosophical caution to institutional codification.
| Period | Development | What it established |
|---|---|---|
| 1950s–1970s | Early cybernetic and computing critiques, including Norbert Wiener’s warnings about delegated purpose and Joseph Weizenbaum’s argument that some decisions should not be handed to machines regardless of capability. | That the question is normative, not only technical. |
| 1970s–1990s | Research-ethics infrastructure develops in medicine and human-subjects research — informed consent, review boards, proportionality. | The template later borrowed for impact assessment and oversight. |
| 2014–2016 | The fairness, accountability and transparency research community forms around algorithmic decision-making; early work on bias in deployed systems. | Fairness and accountability become measurable research problems. |
| 2017 | The Asilomar AI Principles are issued from a convening of AI researchers, spanning research priorities, near-term ethics and longer-term safety. | The first widely cited principle set from within the field. |
| 2018 | The Montréal Declaration for Responsible AI is published following a multi-stakeholder process, setting out ten principles and a body of recommendations. The Toronto Declaration addresses equality and non-discrimination in machine learning. | “Responsible AI” enters common use as a named programme. |
| 2019 | The OECD adopts its AI Principles; the European Commission’s high-level expert group publishes ethics guidelines for trustworthy AI; a systematic review of the field maps the emerging consensus. | Intergovernmental adoption; the principle landscape is measured rather than asserted. |
| 2021 | UNESCO’s Recommendation on the Ethics of Artificial Intelligence is adopted by its member states — the first global standard-setting instrument on the subject. | A near-universal normative baseline grounded in human rights. |
| 2023 | NIST publishes the AI Risk Management Framework; ISO/IEC 42001 establishes a certifiable AI management system standard. | Principles acquire operational and auditable form. |
| 2024 onward | The EU AI Act enters into force with staged application; sectoral regulators add domain expectations. | Obligation replaces guidance in an increasing share of the field. |
A note on the record
Dates mark publication or adoption, not the point at which practice changed. Most of these instruments took effect gradually, and several remain under revision.
ConvergenceFive principles recur across the guidance; their interpretation does not.
A systematic review published in Nature Machine Intelligence in 2019 mapped eighty-four sets of AI ethics principles issued by companies, research institutions and public bodies. It found convergence on five principles — transparency, justice and fairness, non-maleficence, responsibility, and privacy — alongside substantive divergence in how each is interpreted, why it is held to matter, whom it applies to, and how it should be implemented.
The distinction is material. Agreement at the level of principle is genuine and close to universal, but it establishes little in itself: two organizations may hold identical published commitments while operating at materially different levels of control.
Core principlesThe working set, and what each one requires in practice.
The formulations below are the recurring ones across the OECD Principles, the UNESCO Recommendation, the NIST characteristics of trustworthy AI and the EU AI Act’s obligations for high-risk systems. Naming is not standardized; the substance largely is.
| Principle | What it requires | Where it is codified |
|---|---|---|
| Human agency and oversight | Qualified people can understand, question, override, stop and escalate an AI-supported decision, with the authority and information to do so meaningfully. | EU AI Act; UNESCO; OECD |
| Transparency and explainability | Intended use, capabilities, limitations, data and uncertainty are disclosed at a level appropriate to the audience — user, affected person, regulator. | OECD; NIST; EU AI Act |
| Fairness and non-discrimination | Disparate performance and unequal impact across groups are measured, mitigated and carried into the deployment decision rather than reported after it. | UNESCO; NIST; EU AI Act |
| Safety, robustness and security | Systems behave predictably under distribution shift, adversarial input, degraded conditions and misuse, and fail into a safe state. | OECD; NIST; EU AI Act |
| Privacy and data governance | Lawful basis, purpose limitation, provenance, quality, retention and individual rights are governed across the data lifecycle. | UNESCO; NIST; GDPR and sectoral law |
| Accountability | Named individuals and bodies hold decision rights and answer for outcomes. Responsibility is not transferred to the system. | OECD; UNESCO; ISO/IEC 42001 |
| Contestability and redress | Affected people can challenge a decision and obtain human review, rather than being told the system decided. | UNESCO; EU AI Act; human-rights instruments |
| Sustainability and societal impact | Environmental cost and broader societal effects are assessed as part of the deployment case. | UNESCO; OECD |
TerminologyTerms frequently used interchangeably, and the distinctions between them.
Much of the apparent disagreement in governance discussions is terminological rather than substantive. The distinctions below are those that materially change the meaning of a claim.
| Term | What it denotes | How it differs |
|---|---|---|
| AI ethics | The normative inquiry: what ought to be done, and why. | Supplies the values. It does not, in itself, allocate responsibility or produce evidence. |
| Responsible AI | The organizational practice of applying those values across the AI lifecycle. | Broader than ethics and narrower than governance: it is the application. |
| AI governance | The decision rights, policies, controls and oversight structures through which the practice operates. | The operating machinery. It can exist without being effective. |
| Trustworthy AI | A property claimed of a system against defined characteristics. | A conclusion, which requires evidence if it is to be more than an assertion. |
| AI assurance | Independent examination of whether claims hold, against defined criteria and scope. | The independent test, conducted separately from the party making the claim. |
| AI safety | Preventing harmful behaviour, including under distribution shift, misuse and increasing capability. | Overlaps Responsible AI, but extends to questions of research and capability beyond a deployed system. |
| Alignment | Whether a system pursues the objectives its principals actually intend. | A technical research problem rather than a governance control. |
| Explainability | Producing an account of why a system produced a given output. | Often post-hoc and approximate. |
| Interpretability | The degree to which a system’s mechanism is inherently understandable. | A property of the model, not of an explanation layered on top. |
| Human-in-the-loop | A person reviews or approves before an action takes effect. | Nominal unless the reviewer has time, competence, authority and usable information. |
| Model card | A structured record of a model’s intended use, performance and limitations. | Documentation, not validation. |
| Datasheet | An equivalent record for a dataset: provenance, composition, collection and known limits. | Addresses the data layer, where many fairness problems originate. |
| Impact assessment | A structured analysis of potential harms to people before deployment. | Prospective. Distinct from post-hoc audit. |
| Drift | Degradation as live data diverges from the data a system was validated on. | A monitoring obligation, not a one-time test. |
| Red-teaming | Adversarial testing intended to elicit failure rather than confirm success. | Complements evaluation; does not replace validation. |
| Provenance | The traceable origin and transformation history of data, models and outputs. | Underpins most other claims; without it they cannot be verified. |
InstrumentsWhat is guidance, what is standard, and what is law.
These instruments differ in legal force. Treating a voluntary framework as binding, or a binding obligation as advisory, is a common and consequential error.
| Instrument | Issuer | Status |
|---|---|---|
| AI Principles | OECD | Intergovernmental recommendation. Non-binding; widely used as a reference for national policy. |
| Recommendation on the Ethics of AI | UNESCO | Standard-setting instrument adopted by member states. Not directly enforceable; implemented through national measures. |
| AI Risk Management Framework | NIST | Voluntary framework. Widely adopted as an organizing structure for risk work. |
| ISO/IEC 42001 | ISO/IEC | Certifiable management-system standard. Voluntary, but conformity can be independently certified. |
| EU AI Act | European Union | Binding regulation with staged application and extraterritorial reach. |
| Sectoral regulation | Domain regulators | Binding within the sector. Frequently the more demanding requirement in practice. |
PracticePrinciple becomes governance only when it resolves into evidence.
Every principle above resolves, or fails to resolve, into the same four questions: which control implements it, who owns that control, what artifact demonstrates the control operating, and what happens when it fails. An organization that can answer those four for a named system has a governance position. One that can only cite the principle has a statement of intent.
This is why the useful unit of assessment is a system rather than an organization. Principles are held at company level; evidence exists at system level, for a particular version, population, workflow and period.
Question 01
Which control
The specific mechanism that implements the principle for this system, not a policy asserting the principle.
Question 02
Whose control
A named accountable owner with the authority to change the system or stop it.
Question 03
What evidence
An artifact that is relevant, current, traceable and sufficient to show the control operating.
Question 04
What on failure
The defined response: escalation, containment, corrective action, and the conditions for resuming operation.
Further reading
The primary sources are published and freely available: the OECD AI Principles, the UNESCO Recommendation on the Ethics of Artificial Intelligence, the NIST AI Risk Management Framework, ISO/IEC 42001, and the consolidated text of the EU AI Act. Readers new to the field are advised to consult them directly.
How this connectsWhere AIGX applies Responsible AI.
AIGX Research addresses the final question in that sequence: what evidence supports a governance claim, and how that evidence can be examined. Our sector frameworks translate these principles into controls with named obligations and required artifacts; the methodology sets out how an assessment is scoped, evidenced and reviewed.
This page is reference material. It presents the consensus of the field and does not state an AIGX position.
Disclaimer
This page summarizes publicly available frameworks, standards and research for reference. It is not legal or regulatory advice. References to third-party standards, regulations and frameworks are provided for attribution and alignment only, and do not imply affiliation, endorsement, sponsorship or certification by their respective owners. Descriptions reflect the position as at the review date and instruments referenced may since have been amended.