AI Ethics Guidelines Cheat Sheet

AI ethics and regulatory compliance — EU AI Act risk categories, bias detection methods, fairness metrics, transparency requirements, and responsible AI developme.

Last Updated: May 1, 2025

EU AI Act Risk Categories

Risk LevelDefinitionRequirementsExamples
UnacceptableBanned outrightProhibited from EU marketSocial scoring, real-time biometric surveillance, emotion recognition at work
High-RiskMust meet strict requirementsCE marking, conformity assessment, human oversight, transparency, accuracy, cybersecurityMedical devices, hiring systems, credit scoring, law enforcement AI
Limited RiskTransparency obligations onlyMust inform users they're interacting with AIChatbots, emotion recognition, deepfake generators
Minimal RiskNo specific regulationVoluntary codes of conduct encouragedSpam filters, AI-powered video games, inventory management
General Purpose AI (GPAI)Additional rules for foundation modelsTechnical documentation, copyright compliance, energy reporting, systemic risk assessment for models >10^25 FLOPsGPT-4, Claude, Gemini, Llama 3

Bias Detection Methods

Disparate Impact Analysis
Compare outcomes across demographic groups: ratio < 0.8 indicates potential discrimination
Equalized Odds
Measure if false positive / false negative rates are equal across groups
Demographic Parity
Check if positive prediction rates are similar across groups — P(ŷ=1|A=a) ≈ P(ŷ=1|A=b)
Intersectional Analysis
Test bias at intersections (e.g., race × gender) not just single attributes
Counterfactual Testing
Change only the protected attribute in inputs, check if model output changes
Subgroup AUC
Compute model performance metrics separately for each demographic subgroup
Calibration by Group
Check if predicted probabilities mean the same thing across groups — P(Y=1|score=s, A=a) = P(Y=1|score=s, A=b)
Word Embedding Association Test (WEAT)
Measure bias in word embeddings — geometric distance between concept and attribute vectors

Fairness Metrics & Interventions

ItemDescription
Pre-processingBalance training data: oversample underrepresented groups, reweight samples, or generate synthetic data
In-processingAdd fairness constraints to model training: adversarial debiasing, fairness regularization, constrained optimization
Post-processingAdjust model outputs: threshold optimization per group, equal opportunity calibration
Fairness-Aware MetricsUse Fairlearn (Microsoft), AI Fairness 360 (IBM), or What-If Tool (Google) for automated fairness evaluation
Data CardsDocument training data: source, collection method, demographic composition, known gaps — Google's Data Cards framework
Model CardsDocument model: intended use, limitations, evaluation results, ethical considerations — pioneered by Google / Hugging Face
Human ReviewEstablish diverse review panels to evaluate model behavior in context — technical metrics alone miss contextual fairness
Redress MechanismProvide a clear process for users to contest AI decisions — required by GDPR and EU AI Act for high-risk systems

Transparency Requirements

ItemDescription
ExplainabilityUsers have a right to meaningful explanation of AI decisions — SHAP, LIME, and attention visualization help
Opt-Out RightsUsers must be able to opt out of automated decision-making for consequential decisions (GDPR Article 22)
AI DisclosureUsers must be informed when interacting with AI vs human — chatbots, voice assistants, customer service
Audit TrailMaintain records of model versions, training data provenance, and decision rationale for regulatory audits
Energy ReportingEU AI Act: report model training energy consumption — encourages efficient model development
Copyright TransparencyDisclose copyrighted training data — EU AI Act requirement to enable opt-out and compensation mechanisms
Third-Party AuditsIndependent audits for high-risk AI systems — similar to financial audits for public companies
Open Source EthicsOpen-source models aren't exempt from ethics — consider dual-use risks when releasing powerful models publicly
Pro Tip: Start with transparency. Even if you can't fix every bias immediately, documenting model limitations, training data composition, and intended use builds trust and is increasingly required by law.