Open Source and the EU AI Act: A Compatibility Challenge
The EU AI Act is poised to become the world's first comprehensive AI regulation, setting a template for other jurisdictions. But the Act carries a significant risk: it may treat upstream open source projects as if they were commercial products or deployed AI systems. Such an approach would clash with how open source development actually works and would burden individual developers and non-profit research organizations with obligations designed for large-scale deployments.
If the Act stifles open source AI development, it could undermine its own stated goals of fostering responsible innovation aligned with European values. A coalition of open culture and AI organizations—including Creative Commons, EleutherAI, Hugging Face, LAION, and Open Future—has published a policy paper, “Supporting Open Source and Open Science in the AI Act,” to offer a path forward. The paper is intended as a practical resource for policymakers who want regulation that supports, rather than suppresses, the growing open source AI ecosystem.
Why Open Source Matters for AI Policy
Open source is frequently misunderstood or undervalued in AI policy discussions, even though it has been central to both AI development and policy debates. It functions as a global public good—software and models that anyone can use, study, modify, and redistribute. Many transparency and voluntary commitment practices now common in AI, such as model documentation, originated in the open source community. Any regulatory framework that ignores this reality risks harming the collaboration and competition that responsible innovation depends on.
Developer Exemptions Are a Starting Point
GitHub has represented the open source community in EU deliberations since the AI Act was first introduced in 2021. GitHub CEO Thomas Dohmke addressed policymakers in Brussels on the need to exempt developers from the Act’s requirements. That speech followed GitHub’s recommendations to Parliament, which called for a tailored exemption that distinguishes between open source development and the risks posed by deployed AI systems.
As Parliament completed its deliberations this spring, the coalition sent a letter urging further improvements to the Act. GitHub Chief Legal Officer Shelley McKinley has also offered lessons for policymakers as AI regulation debates expand beyond Europe. The new policy paper continues this advocacy, aiming to ensure that the open source community’s stake in AI governance is fully understood.
