Which regulation prohibits apps that pose unacceptable risks like real-time biometric identification?

• A. EU AI Act of 2024
• B. GDPR (EU)
• C. CCPA 2020
• D. Privacy challenges in AI

Answer: (A)

AI regulation treats some uses as unacceptable risk and bans them to prevent harm before it happens. The EU AI Act of 2024 creates a prohibited category for certain AI practices, including real-time biometric identification in public spaces for surveillance. This prohibition reflects the serious privacy and civil liberties concerns such uses raise, signaling that some AI applications are not acceptable regardless of how they’re deployed.

In contrast, GDPR focuses on how personal data, including biometric data, can be collected and processed—establishing lawful bases, transparency, and rights for individuals—rather than issuing a blanket prohibition on real-time biometric identification. CCPA centers on consumer privacy rights and business obligations around personal data, not on prohibiting specific AI practices. “Privacy challenges in AI” is a topic area, not a regulation. So the regulation that prohibits apps posing unacceptable risks like real-time biometric identification is the EU AI Act of 2024.