Rigid, top-down laws often fail because code moves faster than bureaucracy. If we want to keep innovation alive, we should move away from heavy-handed mandates that dictate specific technical architectures. Instead, regulators should focus on outcome-based standards. This means telling companies what their systems must achieve—such as preventing bias or ensuring data privacy—without telling them exactly how to write the code to get there. It gives engineers room to experiment while keeping the guardrails visible.
Co-regulation offers a middle ground. In this model, governments set high-level safety objectives, but industry experts develop the technical benchmarks. This ensures rules remain practical and technically grounded. We could also implement 'regulatory sandboxes,' which allow startups to test high-risk models in controlled environments under supervision. This prevents small players from being crushed by compliance costs that only giants like Google can afford.
Democratic oversight requires transparency, not just secrecy behind closed doors. We need independent auditing bodies that can inspect models for safety and fairness. These audits shouldn't be one-time events. Continuous monitoring ensures that as a model learns and changes, it doesn't drift into dangerous territory. Oversight works best when it acts as a safety inspector, not a brake pedal.
